Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
File: _SxsGlV_WItkfheRGmMA40LGYes.mft (raw, json)
Hash identifier: wznNbyxfLGj+3FGBfg1xfSt/72NawwFK+cdxGbrcGn4=
Subject key identifier: 10:BA:B6:EF:99:79:90:8A:37:04:37:DC:67:2B:87:BC:6E:3A:30:D9
Authority key identifier: FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
Certificate issuer: /CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Certificate serial: 01A0C17B01283A5A81E0AD1826B8EAD4DD85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
Manifest number: 1198
Signing time: Mon 21 Sep 2026 01:00:58 +0000
Manifest this update: Mon 21 Sep 2026 01:00:58 +0000
Manifest next update: Tue 22 Sep 2026 01:00:58 +0000
Files and hashes: 1: _SxsGlV_WItkfheRGmMA40LGYes.crl (hash: 8cp2Udk/FMtVoe9bQlEW65XIOC/U38ddr/CTR7wDmeM=)
2: ybz_LJxmvXeX0zTpU2lRHbVV5as.roa (hash: s/QbbRettUJpmi4/wPM4zY/mnziqrGPExrreuVQcjVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 01:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:7b:01:28:3a:5a:81:e0:ad:18:26:b8:ea:d4:dd:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Validity
Not Before: Sep 21 01:00:58 2026 GMT
Not After : Sep 22 01:00:58 2026 GMT
Subject: CN=10bab6ef9979908a370437dc672b87bc6e3a30d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:34:3f:dd:e9:0a:c0:f4:d2:cd:a9:69:34:71:
f6:cb:0e:86:75:ad:db:96:26:22:d8:ed:57:2d:f7:
a0:a7:96:8b:18:5e:a4:80:02:ff:35:ef:12:5b:c6:
36:c5:3d:56:19:4f:7c:9e:8a:4a:99:f9:c0:23:88:
92:0b:80:96:de:7f:80:f0:54:bf:ff:76:d6:28:1c:
72:56:2b:0a:7a:64:54:ed:e3:18:ef:93:aa:1d:27:
75:39:3d:28:22:17:78:1b:4a:3b:e4:62:52:a8:82:
aa:7d:3c:34:7b:74:09:4a:f9:54:71:33:a9:1c:e3:
05:f9:52:ef:f0:68:34:50:21:c2:23:6e:34:1e:13:
56:fb:19:e8:51:cd:98:75:01:ed:d0:90:b1:3d:4f:
de:25:fe:d4:52:0e:29:dd:9a:06:f4:d3:fe:4e:7b:
fd:56:f8:62:bf:6b:68:b9:1c:fa:0d:bc:86:fe:bb:
bb:ce:6f:11:36:e8:54:d4:f3:12:85:91:9d:0a:bf:
62:02:94:b9:31:56:18:fd:e4:29:8d:62:68:41:bf:
01:dd:f5:50:c7:98:8e:6f:66:41:fe:7c:87:4b:d7:
f2:21:97:d0:f5:ad:b8:d4:e8:66:50:0b:92:d3:8f:
7f:85:c2:be:be:c5:20:f3:31:92:6c:27:41:b5:e2:
2a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BA:B6:EF:99:79:90:8A:37:04:37:DC:67:2B:87:BC:6E:3A:30:D9
X509v3 Authority Key Identifier:
keyid:FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:5a:05:77:32:91:86:31:07:a8:d1:f9:cd:19:66:c9:dc:61:
d7:e5:73:7e:b2:ad:e7:ae:5b:b1:1b:03:2f:f7:31:5b:6b:8f:
56:6c:43:c1:e0:c6:ad:0c:60:66:23:f4:85:f7:13:ab:bf:6d:
e4:e7:35:f0:2f:45:fa:f6:2d:4f:5a:f6:8f:18:e5:d4:05:5b:
6b:ce:9e:84:00:fc:19:4b:ed:f5:6e:3b:f4:c2:00:c6:a8:ec:
fa:e9:8c:bf:7f:c6:49:8a:5a:26:c1:aa:85:ef:05:6e:9b:f9:
aa:93:7a:55:9d:72:b8:53:f2:35:e1:e3:e4:20:0b:4a:86:51:
8b:3c:ab:26:8e:50:5f:d5:15:e8:8e:7c:df:90:e9:90:be:23:
00:4e:c5:5f:a2:82:13:57:83:5b:06:1f:76:44:40:1b:a0:31:
a0:ce:a3:81:be:41:34:04:4f:19:be:ac:d2:1c:d0:39:25:2b:
c7:2e:91:18:39:53:5d:11:45:91:3b:79:e9:47:bb:81:48:90:
b1:50:e7:55:c9:d5:7c:62:f6:31:a7:52:51:04:63:ce:a7:4a:
6e:48:ac:5f:66:3e:7f:36:af:04:7d:ab:a9:1a:33:f3:0a:eb:
82:26:98:a3:cc:5f:a2:c7:44:4a:70:38:90:2a:86:09:07:1b:
b4:5a:0f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:04:57 2026 by rpki-client