Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
File: SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft (raw, json)
Hash identifier: HjsRhVuXFGrHCli6asw4/zEWVOiZVab5COdFX5XJBzI=
Subject key identifier: 0E:0C:0B:FA:B3:67:2F:21:53:32:1B:A4:54:86:7D:BD:F1:64:05:02
Authority key identifier: 49:7E:DE:37:F2:9F:40:A7:1B:1C:B2:A5:FC:E5:26:E8:A3:D0:E5:E1
Certificate issuer: /CN=497ede37f29f40a71b1cb2a5fce526e8a3d0e5e1
Certificate serial: 019FAA504ECB80629D380EC1884236F5204C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
Manifest number: 019D
Signing time: Tue 28 Jul 2026 20:00:17 +0000
Manifest this update: Tue 28 Jul 2026 20:00:17 +0000
Manifest next update: Wed 29 Jul 2026 20:00:17 +0000
Files and hashes: 1: FsZqIeW01RfaEApHUES0cB5ebyI.roa (hash: VCT9mMAi/Cn+09fCPNJ/y3SBfVeioqWO5E+XzvEA3FA=)
2: KfCvlR8vu0qoz40NwG_o9ivr0L0.asa (hash: 28KOqwH8/su8P6T5Q9zLgm8jJkLHgtcR+NYZ8WhN7qk=)
3: SX7eN_KfQKcbHLKl_OUm6KPQ5eE.crl (hash: R8u7EmKJ/HRccerAc5/ns7MvedFMPV8OK/jM5Goe2XU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:4e:cb:80:62:9d:38:0e:c1:88:42:36:f5:20:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=497ede37f29f40a71b1cb2a5fce526e8a3d0e5e1
Validity
Not Before: Jul 28 20:00:17 2026 GMT
Not After : Jul 29 20:00:17 2026 GMT
Subject: CN=0e0c0bfab3672f2153321ba454867dbdf1640502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dd:d3:9b:7d:4f:7e:e5:0f:e6:e9:04:45:d2:
54:a3:4d:f9:71:d5:b4:69:a6:cf:16:16:76:b3:6e:
26:39:2c:37:54:d0:a2:55:30:a7:8a:df:c0:dd:9c:
23:2b:65:f1:56:b4:44:76:97:1e:df:db:91:66:27:
3d:92:2a:f3:ef:4a:26:1d:6d:ce:06:4f:3f:d9:0a:
54:6b:9b:6b:c3:5e:81:e1:59:de:55:54:8f:e7:ba:
c8:c3:5d:ce:05:08:86:12:d9:60:4b:0f:d2:9f:45:
d4:12:92:55:64:5e:87:68:26:6c:0b:81:31:81:b9:
f9:2c:2e:62:28:d8:09:16:75:ff:97:c5:58:ae:d4:
a5:2f:c5:d3:71:94:9b:5e:c1:4d:d6:93:3a:f1:63:
3b:8e:c2:1a:ee:f8:43:85:52:05:d8:29:20:58:e4:
f3:1d:f3:a9:9f:06:33:02:1e:39:d0:14:ca:46:cb:
7e:ee:07:30:cb:86:33:94:4d:60:09:29:7b:d6:61:
67:27:86:32:c8:3b:67:99:81:3e:40:42:4c:ff:74:
f5:f9:19:c3:e5:01:ea:b9:15:b1:22:12:4f:b0:33:
ea:2d:0b:3d:26:78:96:af:16:fa:1d:45:ba:19:67:
cf:e7:d5:17:e2:dd:c2:27:f7:e2:d9:b1:b1:ed:59:
c7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0C:0B:FA:B3:67:2F:21:53:32:1B:A4:54:86:7D:BD:F1:64:05:02
X509v3 Authority Key Identifier:
keyid:49:7E:DE:37:F2:9F:40:A7:1B:1C:B2:A5:FC:E5:26:E8:A3:D0:E5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:8b:36:09:60:d3:20:66:83:5c:a9:02:eb:8c:81:5c:ae:40:
19:d7:46:68:e1:5d:59:6b:cf:1e:7a:b0:0f:be:11:0c:59:db:
12:04:16:4d:d9:58:ee:3b:d0:d1:9e:11:b2:88:b5:02:dd:29:
27:21:40:c6:73:90:91:4d:fc:ef:5e:50:97:0e:7d:4f:2f:c7:
7b:72:c6:71:34:f8:e7:3d:84:90:e5:0a:7e:f1:40:c7:13:11:
b1:af:68:b9:55:2a:64:96:80:b7:94:f4:7c:07:2b:53:45:32:
c3:b5:5e:90:86:e2:b8:1f:c0:cb:f8:96:65:8d:b2:ce:40:ca:
89:24:d8:7c:64:90:c8:fd:e5:dd:06:90:47:2d:f4:4f:3b:c8:
64:8a:4d:4f:8f:71:60:d1:eb:6e:e7:f0:7a:78:83:79:a2:0b:
4b:9e:55:83:ed:de:66:31:7d:62:7c:1f:6a:ce:8e:aa:ba:8d:
b6:80:3a:19:90:4f:c2:df:a1:e6:85:0a:77:64:00:54:bf:f0:
82:33:3b:44:56:da:e9:0f:f9:3b:ce:66:e6:4a:94:b1:fc:f4:
c4:90:6a:0e:b1:73:c3:e2:11:3a:bf:60:8a:47:3c:e3:eb:ad:
1d:60:f2:c5:10:3f:bc:bc:8f:39:d5:f7:67:43:c1:25:54:53:
98:6e:45:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:58:58 2026 by rpki-client