Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
File: _SxsGlV_WItkfheRGmMA40LGYes.mft (raw, json)
Hash identifier: qDm2kYhf9Q2Qo2isBbuhL3o1Lpm6YPvtBxvhV+mCgdI=
Subject key identifier: C9:7C:A1:E5:30:C1:1D:83:8E:37:72:16:7C:40:40:1C:F1:12:90:AF
Authority key identifier: FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
Certificate issuer: /CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Certificate serial: 019CAEA3B404B4DE802CEA9A05F95B118C40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
Manifest number: 0F7C
Signing time: Mon 02 Mar 2026 13:01:29 +0000
Manifest this update: Mon 02 Mar 2026 13:01:29 +0000
Manifest next update: Tue 03 Mar 2026 13:01:29 +0000
Files and hashes: 1: _SxsGlV_WItkfheRGmMA40LGYes.crl (hash: cv6BRvL/tO9lXvUOjcNS/BK2+7OcYTaqwafrrufEOik=)
2: ybz_LJxmvXeX0zTpU2lRHbVV5as.roa (hash: s/QbbRettUJpmi4/wPM4zY/mnziqrGPExrreuVQcjVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:b4:04:b4:de:80:2c:ea:9a:05:f9:5b:11:8c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Validity
Not Before: Mar 2 13:01:29 2026 GMT
Not After : Mar 3 13:01:29 2026 GMT
Subject: CN=c97ca1e530c11d838e3772167c40401cf11290af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ef:ec:9d:c8:d3:e3:76:80:49:43:51:59:8f:
b1:b2:2d:ff:ae:40:52:b9:06:0f:42:f1:b0:17:06:
69:e3:20:33:bf:30:4b:1a:99:97:23:62:5c:d0:f7:
e4:8c:56:c7:32:fc:88:50:57:52:bc:6d:27:e8:7c:
f0:5d:e5:73:30:80:7f:aa:f5:d3:71:2c:6a:1a:8d:
d3:f8:51:63:01:d8:2b:85:ac:83:68:18:41:1e:f6:
e3:6e:b0:a7:ee:86:b5:62:8a:c9:13:87:9d:11:ac:
aa:ee:69:40:0e:65:9b:4f:6c:3a:ff:c0:e6:fc:fa:
d5:59:ea:2d:40:f4:cf:02:eb:4d:29:64:79:ba:35:
30:cf:72:3e:1b:2f:40:e3:ca:f6:59:d9:9a:62:1b:
46:4a:a6:c5:b3:e5:5f:1d:7b:05:a2:43:0d:89:7b:
f5:f5:5b:80:a2:c3:04:e7:4e:a1:0b:48:f2:37:da:
22:98:cc:a3:fc:ad:e9:a7:29:25:fa:07:47:43:a7:
8e:b7:0e:9d:52:04:8b:16:d0:c1:be:49:1a:c3:4d:
fb:c0:91:40:91:6f:f6:f6:af:a0:81:a1:0a:71:1f:
fc:79:47:5a:31:7f:be:88:eb:fe:72:ca:19:09:03:
a4:0b:d1:2b:90:57:6c:d0:2a:90:71:8f:b1:b2:9d:
e8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7C:A1:E5:30:C1:1D:83:8E:37:72:16:7C:40:40:1C:F1:12:90:AF
X509v3 Authority Key Identifier:
keyid:FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e9:3f:29:f9:96:ee:0e:ca:ee:ee:ba:83:a8:ed:0c:bf:be:
fa:f2:0b:64:e3:7d:33:09:fa:ee:23:dc:d1:6c:bc:49:d1:2c:
f4:59:6c:c3:1b:c5:a9:ff:9d:8b:2c:ab:08:c1:39:cd:90:b6:
f2:d6:ec:7a:70:e1:92:36:a9:3b:2b:bd:d6:07:66:12:ce:9e:
36:cb:85:bc:91:40:bb:cc:21:a3:5c:82:f3:74:ea:0f:86:6d:
27:98:0a:c3:57:f6:10:0e:27:39:2c:13:a6:e1:35:56:57:36:
dd:e8:3e:cb:4e:aa:84:20:5b:ef:b0:e5:a5:df:95:4e:76:33:
7b:a3:1d:ae:e1:76:79:e7:8d:89:7c:e6:a4:be:bf:f9:ca:cb:
1a:c6:0a:55:af:88:04:3d:38:bf:8e:d6:ec:5b:c1:14:f6:34:
a3:29:56:18:93:49:54:13:3a:6d:f7:4e:8c:8a:e2:4a:e5:6b:
67:a2:f0:ba:4e:1e:c7:c0:08:b8:ee:50:40:8e:96:41:eb:3b:
1e:37:82:fc:9d:f3:c8:ab:20:d8:2a:ff:e6:db:24:cc:4d:71:
bd:75:dd:a6:bb:f3:a9:9c:0d:e0:4c:65:64:12:be:7e:e1:07:
37:fa:75:57:48:89:57:bd:09:37:15:db:24:51:61:94:66:61:
65:e0:b4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:07:28 2026 by rpki-client