Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
File: sx0cKJHYgEaaINi38Y5M2GVDAEY.mft (raw, json)
Hash identifier: xBGlLG/i1Uf332Axm+HnZiE9iq7QkW5g/HRKAS3WN+A=
Subject key identifier: A4:EC:C0:E4:CC:24:A2:4D:B0:20:91:52:06:AA:55:89:38:D1:F7:32
Authority key identifier: B3:1D:1C:28:91:D8:80:46:9A:20:D8:B7:F1:8E:4C:D8:65:43:00:46
Certificate issuer: /CN=b31d1c2891d880469a20d8b7f18e4cd865430046
Certificate serial: 019FAAF60B5750555E8BB4049E94332C572A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
Manifest number: 06B6
Signing time: Tue 28 Jul 2026 23:01:19 +0000
Manifest this update: Tue 28 Jul 2026 23:01:19 +0000
Manifest next update: Wed 29 Jul 2026 23:01:19 +0000
Files and hashes: 1: nZ-MC578XDNoxF9WT_GxSRoreCI.roa (hash: P9N+z+cz6t9cJMJHuc2G7Ay4P8kV4Zg2jsXlf/jTUFo=)
2: sx0cKJHYgEaaINi38Y5M2GVDAEY.crl (hash: zXKyDuxFkF01OIvuJelIyYnyKxqQLS5KN0HU2dvrMwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f6:0b:57:50:55:5e:8b:b4:04:9e:94:33:2c:57:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31d1c2891d880469a20d8b7f18e4cd865430046
Validity
Not Before: Jul 28 23:01:19 2026 GMT
Not After : Jul 29 23:01:19 2026 GMT
Subject: CN=a4ecc0e4cc24a24db020915206aa558938d1f732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:67:f4:de:3d:e0:fb:a5:34:4f:79:c1:6f:a4:
1d:f7:9d:7e:d8:11:87:50:4b:c4:b0:fc:00:51:c1:
29:ce:16:3d:08:4f:db:8e:75:3b:3d:4a:22:7c:ee:
47:78:a9:10:19:94:61:cc:74:54:8b:24:c8:8a:e4:
23:1e:42:b0:df:ed:9b:b3:00:e6:26:0b:b3:ae:e1:
7e:39:80:d2:11:05:33:98:70:19:42:7f:5e:5c:a0:
60:68:aa:3c:55:ed:3e:a0:3c:fb:a4:1e:4c:a8:92:
d1:4c:19:dc:cc:26:9d:21:cd:71:cd:d0:26:91:4c:
c4:f6:76:c3:f0:7d:24:20:22:44:c3:f1:3b:8e:1c:
6e:fe:03:a2:a0:26:3c:fb:d0:5d:f1:ca:2e:32:70:
c8:12:25:51:53:e5:72:80:17:e4:4b:7d:5f:e2:00:
2f:1c:0a:d0:37:7d:84:23:9f:4b:ee:70:d0:e9:7d:
7d:32:bb:36:6c:fd:c1:42:5a:99:e5:9b:98:20:dc:
72:0d:9f:76:80:b0:3c:2f:bd:2b:d6:21:a2:e4:b2:
cc:bd:20:54:a9:fe:ea:75:9a:08:04:c6:e9:37:01:
5d:23:34:87:19:d0:7a:3b:82:6d:80:60:39:ca:9b:
98:54:89:b4:58:bd:0c:13:50:ab:42:18:5b:05:0d:
83:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:EC:C0:E4:CC:24:A2:4D:B0:20:91:52:06:AA:55:89:38:D1:F7:32
X509v3 Authority Key Identifier:
keyid:B3:1D:1C:28:91:D8:80:46:9A:20:D8:B7:F1:8E:4C:D8:65:43:00:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:df:f9:c0:35:68:d3:67:2f:9e:b7:dd:e0:a8:6d:a4:34:7d:
b4:a6:99:89:be:3a:0b:64:a0:e7:6b:94:40:6a:7d:cf:3d:18:
e9:0b:8e:f3:84:72:29:3c:96:78:6a:31:ba:d4:fd:e2:32:03:
0f:e9:40:ba:e2:8d:a9:46:1a:75:f3:0e:3b:a8:53:58:40:77:
42:33:99:f9:0d:66:c1:04:f1:d5:aa:b4:31:03:20:70:ba:3f:
b8:80:f9:c5:d0:dd:bb:68:95:65:a2:c9:51:85:cf:e4:03:02:
14:af:fc:31:22:ad:01:63:3d:b2:49:93:08:f4:31:71:f1:9d:
54:66:6a:b6:48:a1:45:d3:a4:2d:06:c4:7a:11:96:4c:a7:df:
01:02:5f:fe:93:26:45:6b:74:6c:3d:3a:dd:7f:e8:d3:cc:b2:
60:f6:bf:a7:0d:35:28:a9:06:7d:2b:14:f9:bb:fb:d2:32:70:
28:43:32:09:79:13:27:f4:92:61:82:64:b8:fe:fa:aa:ee:8e:
e6:dd:8c:64:56:08:57:56:9d:8e:29:16:ec:36:f2:54:30:28:
95:cb:e8:64:6b:d8:fb:11:20:ff:1f:cd:44:1d:4c:57:79:31:
74:f4:e9:be:af:95:5e:f9:94:89:b2:4e:30:43:01:f8:b1:6b:
75:f8:3c:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9gtXUFVei7QEnpQzLFcqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMWQxYzI4OTFkODgwNDY5YTIwZDhiN2YxOGU0Y2Q4NjU0
MzAwNDYwHhcNMjYwNzI4MjMwMTE5WhcNMjYwNzI5MjMwMTE5WjAzMTEwLwYDVQQD
EyhhNGVjYzBlNGNjMjRhMjRkYjAyMDkxNTIwNmFhNTU4OTM4ZDFmNzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5mf03j3g+6U0T3nBb6Qd951+2BGH
UEvEsPwAUcEpzhY9CE/bjnU7PUoifO5HeKkQGZRhzHRUiyTIiuQjHkKw3+2bswDm
JguzruF+OYDSEQUzmHAZQn9eXKBgaKo8Ve0+oDz7pB5MqJLRTBnczCadIc1xzdAm
kUzE9nbD8H0kICJEw/E7jhxu/gOioCY8+9Bd8couMnDIEiVRU+VygBfkS31f4gAv
HArQN32EI59L7nDQ6X19Mrs2bP3BQlqZ5ZuYINxyDZ92gLA8L70r1iGi5LLMvSBU
qf7qdZoIBMbpNwFdIzSHGdB6O4JtgGA5ypuYVIm0WL0ME1CrQhhbBQ2DQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTswOTMJKJNsCCRUgaqVYk40fcyMB8GA1UdIwQY
MBaAFLMdHCiR2IBGmiDYt/GOTNhlQwBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3gwY0tKSFlnRWFhSU5pMzhZNU0yR1ZEQUVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83NzUwMTctYTQ1Yi00NjM3LWEzYTAt
YWYxYTBlMDBmODIzLzEvc3gwY0tKSFlnRWFhSU5pMzhZNU0yR1ZEQUVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy83NzUwMTctYTQ1Yi00NjM3LWEzYTAtYWYxYTBlMDBmODIz
LzEvc3gwY0tKSFlnRWFhSU5pMzhZNU0yR1ZEQUVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAId/5wDVo
02cvnrfd4KhtpDR9tKaZib46C2Sg52uUQGp9zz0Y6QuO84RyKTyWeGoxutT94jID
D+lAuuKNqUYadfMOO6hTWEB3QjOZ+Q1mwQTx1aq0MQMgcLo/uID5xdDdu2iVZaLJ
UYXP5AMCFK/8MSKtAWM9skmTCPQxcfGdVGZqtkihRdOkLQbEehGWTKffAQJf/pMm
RWt0bD063X/o08yyYPa/pw01KKkGfSsU+bv70jJwKEMyCXkTJ/SSYYJkuP76qu6O
5t2MZFYIV1adjikW7DbyVDAolcvoZGvY+xEg/x/NRB1MV3kxdPTpvq+VXvmUibJO
MEMB+LFrdfg8Jw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:29:06 2026 by rpki-client