Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
File: _SxsGlV_WItkfheRGmMA40LGYes.mft (raw, json)
Hash identifier: qCDBEOBTBwgFcLjtk6ZzQDbfQN4oJmVEz/nxGeEJB7s=
Subject key identifier: 78:71:E3:F3:95:D5:AA:D1:97:92:C4:76:9B:AD:E6:48:F8:F8:7F:EF
Authority key identifier: FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
Certificate issuer: /CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Certificate serial: 019CACB4D99078C5E1B16E998BFC5BBA11F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
Manifest number: 0F7B
Signing time: Mon 02 Mar 2026 04:00:59 +0000
Manifest this update: Mon 02 Mar 2026 04:00:59 +0000
Manifest next update: Tue 03 Mar 2026 04:00:59 +0000
Files and hashes: 1: _SxsGlV_WItkfheRGmMA40LGYes.crl (hash: Ii4n+2AOjEpZ5cM0IqM99Q2C5Y30X1nHwQa8+gWNM6I=)
2: ybz_LJxmvXeX0zTpU2lRHbVV5as.roa (hash: s/QbbRettUJpmi4/wPM4zY/mnziqrGPExrreuVQcjVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:d9:90:78:c5:e1:b1:6e:99:8b:fc:5b:ba:11:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Validity
Not Before: Mar 2 04:00:59 2026 GMT
Not After : Mar 3 04:00:59 2026 GMT
Subject: CN=7871e3f395d5aad19792c4769bade648f8f87fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:40:35:a3:da:5c:37:ae:2e:89:ad:3e:53:9f:
83:a9:17:15:29:1a:28:e2:cd:95:9f:e3:00:50:e4:
af:75:62:78:05:a2:07:70:a7:19:36:1c:a6:72:b9:
1f:d5:15:11:30:1a:49:cc:a5:72:52:df:7e:a6:e0:
95:f0:7b:67:8e:28:9a:e3:8e:8f:c1:e0:df:0a:e8:
aa:fe:f6:49:e7:8c:f5:95:73:9f:27:c9:cb:66:0d:
c0:4c:8c:be:a9:3d:ca:3b:ce:05:1c:75:ab:12:d9:
77:0a:88:5c:39:80:00:54:05:aa:1e:95:7b:4b:72:
e7:1b:03:b9:25:7e:c2:d7:02:b5:42:0a:f8:e8:17:
a4:49:20:d7:72:ab:9f:6c:76:51:46:1e:76:48:50:
ad:3e:0b:81:47:98:5b:e1:27:c1:08:82:aa:ea:78:
fd:06:a8:5d:4c:43:c0:f9:7a:1c:b3:66:67:fd:1f:
d8:53:c1:cd:55:bd:d9:3f:44:2d:cb:44:80:0c:4d:
ce:5f:03:ab:d8:af:c2:99:8c:a1:35:d2:c9:33:04:
1c:ce:f2:77:70:16:a6:a1:35:b7:c4:2e:1f:32:d2:
e9:74:70:46:06:04:d7:86:44:e4:de:7c:1b:34:7e:
da:99:4c:60:02:b0:e9:48:76:d5:c1:73:f7:24:32:
1b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:71:E3:F3:95:D5:AA:D1:97:92:C4:76:9B:AD:E6:48:F8:F8:7F:EF
X509v3 Authority Key Identifier:
keyid:FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e5:07:c9:2e:71:67:3a:c3:51:67:d0:32:f9:d1:f4:4c:4b:
2c:ad:20:f2:9a:49:42:56:85:11:7f:22:c3:21:0d:e0:9c:54:
6e:c6:f7:90:a5:d6:25:b7:ca:dd:4e:9e:4f:1a:be:68:06:ab:
05:16:95:2f:a7:24:82:d9:2b:0e:24:21:c2:53:ef:1a:76:77:
d0:20:1d:35:35:54:3e:5a:35:ed:c0:9f:54:88:4e:02:5b:9a:
2e:02:9e:9e:2c:28:88:f9:db:a8:11:88:29:98:6b:29:f8:08:
ba:b8:ac:67:78:c8:90:ba:c5:73:06:dc:d7:d6:50:8c:91:5c:
19:ca:fa:ad:5d:7a:38:80:cb:de:6f:30:50:51:0f:d0:82:0f:
af:f6:e8:92:e1:e1:39:e3:c5:e4:3c:2e:f7:34:68:d0:a7:5c:
73:61:57:2b:ca:d7:e7:c3:d9:d5:b0:97:b4:19:80:0b:14:6c:
49:eb:ec:e5:bf:5a:79:10:bf:0d:98:2c:67:dc:81:70:46:2f:
27:d3:6e:89:63:51:b7:71:35:99:0d:1b:b2:95:f4:cf:a6:60:
d1:8a:41:92:da:91:8e:87:47:05:64:ea:7e:67:d3:0a:2f:a8:
5b:bf:79:75:d9:1a:85:56:d7:e2:c9:da:9b:c3:23:a1:66:39:
7d:95:1e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:33:35 2026 by rpki-client