Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
File: sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft (raw, json)
Hash identifier: /r5bkOwmdVYs4JeLDBJ2UivLdobfA3kvxsPMyYdmURE=
Subject key identifier: 35:EB:98:BF:D6:9B:31:F5:6E:C4:2B:9E:03:3E:86:B2:C3:31:33:E6
Authority key identifier: B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34
Certificate issuer: /CN=b312db95dfc3b31395e0ecb5ff26212d798de834
Certificate serial: 019CAD599F0464B0D6C604D076150E986EE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
Manifest number: 15EC
Signing time: Mon 02 Mar 2026 07:00:57 +0000
Manifest this update: Mon 02 Mar 2026 07:00:57 +0000
Manifest next update: Tue 03 Mar 2026 07:00:57 +0000
Files and hashes: 1: X8tdXJvU9JJe77PtcT-JDwBOQi8.roa (hash: tVoeTVft5vKlrmkaWfTVngTflVy/IwyLYYQaNJOX868=)
2: sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl (hash: UYnfO1lDas3T0U8OpGAmJKDfVLpAwaG1CgkC513gEdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:9f:04:64:b0:d6:c6:04:d0:76:15:0e:98:6e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b312db95dfc3b31395e0ecb5ff26212d798de834
Validity
Not Before: Mar 2 07:00:57 2026 GMT
Not After : Mar 3 07:00:57 2026 GMT
Subject: CN=35eb98bfd69b31f56ec42b9e033e86b2c33133e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f1:2c:34:48:b6:91:ed:36:71:e4:3e:d3:e7:
6b:81:a5:6b:9f:4b:23:cb:ad:33:ed:eb:e4:df:55:
1b:81:19:4e:ab:e1:7d:62:57:51:7b:21:c1:41:4f:
39:58:e7:05:ed:07:f6:71:87:49:57:c9:7a:ae:b4:
92:19:8a:03:14:f0:c1:bf:ed:a1:df:4d:e0:6c:bd:
f6:23:10:77:d2:a8:e8:44:30:3e:87:6e:ca:51:34:
a5:b1:f9:70:6a:48:35:85:28:5a:68:e1:50:08:a6:
17:bf:de:48:f6:6a:df:85:99:0d:3a:97:4a:4d:1c:
3b:25:04:60:e2:67:4b:82:71:9a:89:f5:b6:6d:08:
4c:40:b6:79:39:26:43:31:e7:d6:9b:5c:be:1b:db:
10:4f:31:62:21:33:55:fc:cf:ac:eb:30:5c:9a:8e:
bf:c3:75:71:2f:c0:a8:94:11:4a:76:84:59:59:f6:
36:e9:d0:e1:f1:10:4e:cf:39:0a:2c:5d:4e:48:ad:
16:9e:e7:d6:01:09:ba:56:59:e8:83:36:aa:ca:ee:
22:a6:16:53:2d:19:93:65:d8:36:88:86:dc:4b:ce:
0b:e6:d1:6d:47:52:c3:cf:d4:da:20:28:ff:08:48:
04:53:85:99:86:dd:05:66:fb:2c:6c:aa:82:af:61:
c4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:EB:98:BF:D6:9B:31:F5:6E:C4:2B:9E:03:3E:86:B2:C3:31:33:E6
X509v3 Authority Key Identifier:
keyid:B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:da:f0:bd:20:10:e3:93:5b:ab:c9:54:b4:48:15:80:ff:0e:
fb:7d:e7:9d:72:47:c9:e2:76:ae:d7:40:87:90:95:b7:3f:6a:
e6:e3:9f:4e:13:e8:ce:05:35:9e:9e:6e:c4:9a:3b:93:dd:6f:
19:e0:df:d3:fe:45:7d:45:70:af:bc:eb:2f:c3:20:07:4f:ac:
f8:a0:e2:99:35:9c:95:eb:07:f4:ef:37:59:32:ee:6d:6e:73:
c2:21:63:50:0c:fa:87:47:17:32:e8:3d:f3:58:85:c5:27:dc:
c7:77:62:9c:51:69:19:6d:93:10:ee:bf:1f:26:df:6a:ff:8a:
cb:97:ea:17:13:8f:31:d5:14:97:73:07:eb:f6:f0:0a:fc:62:
d5:c5:30:fa:b0:72:2e:99:71:aa:e7:27:21:c0:15:b9:cd:ae:
33:4c:e6:29:ff:5a:5e:b0:5c:b6:66:66:8d:65:38:44:93:67:
9f:59:11:0c:be:22:a8:f3:dc:11:1f:47:e8:3f:9c:c9:54:c1:
49:b7:92:b2:a7:dc:62:f4:93:e1:c7:20:ce:db:b1:55:ca:8c:
b3:fc:37:d7:99:07:e5:37:85:04:96:c5:ce:9a:f8:9e:cb:07:
71:26:e9:34:0e:23:90:93:d3:86:39:aa:47:6f:70:59:b4:d3:
d2:91:5d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:16:58 2026 by rpki-client