Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
File: _SxsGlV_WItkfheRGmMA40LGYes.mft (raw, json)
Hash identifier: 6lWp/nH0jRS9hZIg3g035cbX3smAh3vhAB2H2hXeAiw=
Subject key identifier: C7:1F:AA:FF:8B:8E:39:F5:BE:91:BA:22:41:33:83:A9:C6:7B:3D:D7
Authority key identifier: FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
Certificate issuer: /CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Certificate serial: 019D984FE1C7911C2BABB7221878DAEAA2A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
Manifest number: 0FF5
Signing time: Thu 16 Apr 2026 22:01:05 +0000
Manifest this update: Thu 16 Apr 2026 22:01:05 +0000
Manifest next update: Fri 17 Apr 2026 22:01:05 +0000
Files and hashes: 1: _SxsGlV_WItkfheRGmMA40LGYes.crl (hash: 8IRLL2k52b3uAPn3HdsfqIXWf2BRgqLzZahUSghnazM=)
2: ybz_LJxmvXeX0zTpU2lRHbVV5as.roa (hash: s/QbbRettUJpmi4/wPM4zY/mnziqrGPExrreuVQcjVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:e1:c7:91:1c:2b:ab:b7:22:18:78:da:ea:a2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Validity
Not Before: Apr 16 22:01:05 2026 GMT
Not After : Apr 17 22:01:05 2026 GMT
Subject: CN=c71faaff8b8e39f5be91ba22413383a9c67b3dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:de:1f:93:c9:52:ca:66:5a:54:68:a3:3c:f2:
80:72:ad:68:1f:51:0f:8d:c9:a0:1c:5d:09:39:98:
79:c3:82:bd:00:f8:26:04:b5:fc:56:42:cf:18:6d:
d7:7d:aa:24:c6:7f:d1:45:16:48:51:2d:2e:6d:11:
55:33:73:ae:56:b9:fe:6d:7c:7d:41:65:4a:db:35:
7b:62:18:1b:fe:e8:0e:f9:ed:09:b0:03:c4:6a:d9:
04:bf:59:31:1e:be:8a:d9:2e:29:c5:df:14:9c:4d:
5d:b3:cc:c5:cc:c0:19:2a:ae:d3:34:48:be:d3:42:
8b:98:b5:87:28:3f:a2:f0:50:2f:eb:88:9b:6a:ec:
93:dc:0f:c4:a0:62:42:77:d8:5d:34:1d:00:e7:85:
b4:e8:67:62:42:40:82:e0:61:a8:40:6a:fc:86:63:
cf:ee:02:7d:91:78:f0:1f:c1:08:02:d9:01:83:d3:
66:a7:60:a7:cc:21:14:ec:e5:26:bf:ad:c0:b0:ba:
3c:1f:e1:4a:b0:ea:fb:4f:b9:40:cd:66:cf:bd:0f:
d6:40:d6:b5:8b:d5:e6:50:b2:ff:7b:d7:fd:f3:90:
ec:f0:a6:1c:48:fa:ec:c4:83:eb:b2:4d:ef:c3:f9:
e7:5c:e0:ea:fc:e9:d4:2e:90:ce:39:68:c2:e8:be:
b0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1F:AA:FF:8B:8E:39:F5:BE:91:BA:22:41:33:83:A9:C6:7B:3D:D7
X509v3 Authority Key Identifier:
keyid:FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:7e:02:f2:47:42:4e:23:bd:77:f4:68:6a:d8:d1:c4:11:f1:
80:52:2f:fb:3f:a9:e2:f9:4f:63:d9:ba:c1:04:d9:1a:42:07:
db:fb:e4:e8:fe:04:34:e7:d2:bf:de:a7:1a:95:67:0a:49:48:
dd:3b:3a:2d:01:6e:a4:40:fb:06:61:ad:5a:41:22:4b:e6:cc:
3b:ef:fd:df:46:92:0b:e7:b8:cb:23:b9:71:21:e4:22:ca:cc:
07:36:0e:8b:f7:a6:35:87:bb:b5:05:ac:bc:cb:4f:6f:03:1c:
e3:cb:68:84:46:f5:e9:45:e8:61:a8:af:b0:40:76:d8:67:23:
dc:77:99:ce:da:23:84:2a:e8:d3:9e:e2:5e:ed:a7:91:bd:50:
4f:d4:cd:bf:76:0e:3c:07:4c:ac:8c:27:4a:29:b4:f8:a4:a5:
9f:5a:23:77:10:49:a4:ca:85:f5:3b:13:f8:d1:9e:4b:43:7e:
29:39:7d:c7:c4:8c:98:de:10:4f:eb:4d:a3:2b:65:68:d0:59:
e1:03:a1:9a:0f:52:a7:b7:18:e3:90:cf:40:fa:bf:44:d6:ee:
64:3e:ea:f2:43:69:ff:b3:19:2e:27:f0:79:24:ec:bb:28:8d:
51:72:3a:b4:f8:6f:4f:e8:4f:ed:09:b3:4d:e5:2d:f6:8f:f7:
79:a7:bd:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YT+HHkRwrq7ciGHja6qKgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMmM2YzFhNTU3ZjU4OGI2NDdlMTc5MTFhNjMwMGUzNDJj
NjYxZWIwHhcNMjYwNDE2MjIwMTA1WhcNMjYwNDE3MjIwMTA1WjAzMTEwLwYDVQQD
EyhjNzFmYWFmZjhiOGUzOWY1YmU5MWJhMjI0MTMzODNhOWM2N2IzZGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd4fk8lSymZaVGijPPKAcq1oH1EP
jcmgHF0JOZh5w4K9APgmBLX8VkLPGG3Xfaokxn/RRRZIUS0ubRFVM3OuVrn+bXx9
QWVK2zV7Yhgb/ugO+e0JsAPEatkEv1kxHr6K2S4pxd8UnE1ds8zFzMAZKq7TNEi+
00KLmLWHKD+i8FAv64ibauyT3A/EoGJCd9hdNB0A54W06GdiQkCC4GGoQGr8hmPP
7gJ9kXjwH8EIAtkBg9Nmp2CnzCEU7OUmv63AsLo8H+FKsOr7T7lAzWbPvQ/WQNa1
i9XmULL/e9f985Ds8KYcSPrsxIPrsk3vw/nnXODq/OnULpDOOWjC6L6wDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcfqv+Ljjn1vpG6IkEzg6nGez3XMB8GA1UdIwQY
MBaAFP0sbBpVf1iLZH4XkRpjAONCxmHrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1N4c0dsVl9XSXRrZmhlUkdtTUE0MExHWWVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82YTNmNmUtMmQ0My00ZWM2LWE3ZWMt
ZTEzZGViNGFjN2I3LzEvX1N4c0dsVl9XSXRrZmhlUkdtTUE0MExHWWVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS82YTNmNmUtMmQ0My00ZWM2LWE3ZWMtZTEzZGViNGFjN2I3
LzEvX1N4c0dsVl9XSXRrZmhlUkdtTUE0MExHWWVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASX4C8kdC
TiO9d/RoatjRxBHxgFIv+z+p4vlPY9m6wQTZGkIH2/vk6P4ENOfSv96nGpVnCklI
3Ts6LQFupED7BmGtWkEiS+bMO+/930aSC+e4yyO5cSHkIsrMBzYOi/emNYe7tQWs
vMtPbwMc48tohEb16UXoYaivsEB22Gcj3HeZztojhCro057iXu2nkb1QT9TNv3YO
PAdMrIwnSim0+KSln1ojdxBJpMqF9TsT+NGeS0N+KTl9x8SMmN4QT+tNoytlaNBZ
4QOhmg9Sp7cY45DPQPq/RNbuZD7q8kNp/7MZLifweSTsuyiNUXI6tPhvT+hP7Qmz
TeUt9o/3eae9QQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:51:52 2026 by rpki-client