Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
File: sx0cKJHYgEaaINi38Y5M2GVDAEY.mft (raw, json)
Hash identifier: 22tVV7+GY+XldrEgUbSsBlNlbXk8DF6oj0Ntk0rGztI=
Subject key identifier: C9:98:52:D5:77:2B:A6:3C:FA:B1:24:FF:33:E3:6C:BE:96:75:A6:06
Authority key identifier: B3:1D:1C:28:91:D8:80:46:9A:20:D8:B7:F1:8E:4C:D8:65:43:00:46
Certificate issuer: /CN=b31d1c2891d880469a20d8b7f18e4cd865430046
Certificate serial: 01A0DFF3F0A9F8E8D2246D9E71F833F2B156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
Manifest number: 0756
Signing time: Sat 26 Sep 2026 23:01:41 +0000
Manifest this update: Sat 26 Sep 2026 23:01:41 +0000
Manifest next update: Sun 27 Sep 2026 23:01:41 +0000
Files and hashes: 1: nZ-MC578XDNoxF9WT_GxSRoreCI.roa (hash: P9N+z+cz6t9cJMJHuc2G7Ay4P8kV4Zg2jsXlf/jTUFo=)
2: sx0cKJHYgEaaINi38Y5M2GVDAEY.crl (hash: 3cNtiLXfuO21fqJy2p6r3eXmbaIDwVAdFEfZ4zUrVEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:f3:f0:a9:f8:e8:d2:24:6d:9e:71:f8:33:f2:b1:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31d1c2891d880469a20d8b7f18e4cd865430046
Validity
Not Before: Sep 26 23:01:41 2026 GMT
Not After : Sep 27 23:01:41 2026 GMT
Subject: CN=c99852d5772ba63cfab124ff33e36cbe9675a606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2a:73:4c:8d:64:00:6c:a7:01:6e:7b:41:4a:
14:a1:60:a8:e0:c9:18:9b:75:53:5e:63:05:6e:18:
29:10:3f:96:e9:dc:fb:65:cd:f3:aa:d3:1a:2a:ec:
89:d5:55:94:c2:a9:d3:a4:e8:70:31:71:e6:f9:e7:
27:7f:cc:39:ab:7b:e1:d2:6b:bc:b2:00:10:3a:d3:
ad:2e:17:18:eb:a1:86:c0:b5:fa:40:d6:6c:a5:74:
ed:63:16:1e:aa:56:15:fc:9d:e3:e6:99:3a:33:59:
32:25:7d:e9:32:b1:78:df:6d:68:66:06:06:95:f3:
a6:1e:49:d9:29:ea:7c:0d:5f:7f:8b:73:4d:99:65:
fb:84:7b:24:55:42:cc:8e:ea:31:16:ea:d7:f2:0d:
f5:dd:3d:ca:0f:61:45:3c:6a:2b:3a:6b:e9:ec:c8:
3b:46:58:9c:0c:d0:cf:cd:88:5f:84:d5:fa:f2:7f:
50:7c:9f:31:d3:8e:e6:6d:d3:fc:74:ee:a3:2c:b4:
12:0d:ad:41:6d:75:f8:fc:5d:e5:3b:75:05:f0:34:
78:6b:b8:62:28:a9:8c:7e:e3:69:ee:a1:6e:28:77:
c4:d3:bf:24:74:43:b7:f5:7c:55:7c:51:59:7b:f4:
a6:b9:a1:18:77:90:22:90:d5:49:55:bb:2a:90:c5:
c5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:98:52:D5:77:2B:A6:3C:FA:B1:24:FF:33:E3:6C:BE:96:75:A6:06
X509v3 Authority Key Identifier:
keyid:B3:1D:1C:28:91:D8:80:46:9A:20:D8:B7:F1:8E:4C:D8:65:43:00:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:20:da:bc:22:a9:38:e1:25:cf:33:7a:95:95:8e:1e:de:49:
74:b0:0a:57:fa:ae:19:fe:2c:da:ef:14:d2:cf:f1:ac:36:69:
3c:3d:74:d6:cf:68:b2:21:2f:39:84:bf:58:c2:46:e0:a1:49:
a9:cc:ad:0a:8a:ef:db:3b:dd:c7:09:14:15:e3:e1:23:3c:7a:
ce:8c:9f:5e:9c:52:24:ca:46:e2:ba:2b:75:6a:01:42:80:5d:
b2:c1:f4:81:71:20:af:d3:fe:b9:33:55:8c:b3:e8:f3:de:e1:
c8:6f:8f:2c:5e:17:22:6c:ba:0b:f1:1f:c8:de:9b:2d:c1:02:
c8:2c:a6:21:f9:47:57:29:8f:ed:ea:b6:d1:74:d6:f2:ad:f1:
dd:6d:f7:ca:02:6d:9d:e6:ca:2c:19:34:ca:f4:06:7f:22:7c:
78:8a:ce:07:9e:b2:9e:df:43:09:f0:8a:50:9b:92:dc:fa:15:
46:f4:3c:3c:08:d2:73:29:91:32:4c:54:50:61:2d:2b:08:6b:
10:ac:7f:15:0b:a5:34:ff:78:c6:36:ff:0e:36:80:13:cd:ca:
55:cc:d1:6b:e7:0a:be:80:d6:0b:87:e6:e5:c6:b3:32:08:13:
d8:af:e7:71:ac:08:27:89:2f:2b:ca:24:fc:81:8b:55:51:ba:
f9:d7:82:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:52:19 2026 by rpki-client