Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
File: sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft (raw, json)
Hash identifier: N7QKVrhvrMYhu9/SVsV6h0E0W0kTYUpt5Xl3SN+uH5o=
Subject key identifier: CF:2B:20:15:4E:5A:FA:61:FA:A4:65:0A:6E:EA:E5:6D:AA:7D:75:27
Authority key identifier: B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34
Certificate issuer: /CN=b312db95dfc3b31395e0ecb5ff26212d798de834
Certificate serial: 019FAA1A8FD6481DAA7F1C6B6DF114AAAE63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
Manifest number: 1778
Signing time: Tue 28 Jul 2026 19:01:35 +0000
Manifest this update: Tue 28 Jul 2026 19:01:35 +0000
Manifest next update: Wed 29 Jul 2026 19:01:35 +0000
Files and hashes: 1: X8tdXJvU9JJe77PtcT-JDwBOQi8.roa (hash: tVoeTVft5vKlrmkaWfTVngTflVy/IwyLYYQaNJOX868=)
2: sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl (hash: Z5uX3qb8UkxKkWGrFcoee9TF043vTM40x1t51CgQP2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:8f:d6:48:1d:aa:7f:1c:6b:6d:f1:14:aa:ae:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b312db95dfc3b31395e0ecb5ff26212d798de834
Validity
Not Before: Jul 28 19:01:35 2026 GMT
Not After : Jul 29 19:01:35 2026 GMT
Subject: CN=cf2b20154e5afa61faa4650a6eeae56daa7d7527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:15:de:6e:70:a4:d5:e4:ab:19:75:45:12:80:
10:08:f2:1f:d2:e5:14:0f:31:9b:61:83:dd:eb:3d:
d9:d1:d1:4e:ec:e3:52:23:d2:01:ab:dd:ce:6d:29:
fc:ca:fd:e3:93:67:73:5d:e3:c3:b9:76:40:43:57:
39:c8:30:44:fb:78:c0:b9:63:98:41:75:8c:be:78:
0e:46:03:bb:7d:29:6e:80:ee:98:5c:8d:24:4a:a9:
31:1d:a5:19:bd:09:ab:82:83:48:31:1d:93:90:b3:
0f:af:4d:69:e5:5d:b3:27:fb:fb:a3:1a:cf:b1:61:
7d:4b:39:9e:b9:96:ed:f3:05:c8:a5:41:76:0e:1d:
f8:1d:e8:eb:37:3c:98:27:1e:ae:bc:51:54:96:19:
77:0a:76:d8:f9:34:cb:02:07:91:ab:57:5e:14:04:
5e:ab:66:e8:c8:e3:86:7f:f2:ca:cf:05:3e:f6:36:
a7:15:6c:35:9e:cd:f2:7d:00:27:97:c3:39:1f:bb:
b9:ae:96:d6:94:8a:e5:84:cc:5e:84:71:52:ca:59:
d0:7d:59:30:13:59:81:7c:82:0e:f9:2a:a4:d3:4c:
74:73:76:ac:3f:fc:84:09:62:aa:28:27:41:da:c5:
38:3f:ab:65:ec:21:41:40:bf:46:a9:cc:25:8c:a1:
cf:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2B:20:15:4E:5A:FA:61:FA:A4:65:0A:6E:EA:E5:6D:AA:7D:75:27
X509v3 Authority Key Identifier:
keyid:B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:86:2b:f8:5b:66:52:b8:a5:ff:29:57:82:a3:a0:28:41:95:
72:4b:e8:9f:dc:3e:e1:5b:a0:44:cb:74:4e:85:1f:d1:0a:8b:
97:0b:81:b8:a6:a3:ab:ad:72:f0:d1:ec:2b:22:95:85:69:ce:
43:3b:32:55:ed:e9:3e:94:31:b9:69:3c:62:23:55:61:c6:8f:
5f:90:cb:d6:70:ee:36:e5:ba:79:bb:3d:ce:56:06:c1:30:d9:
5c:fd:46:29:da:a6:50:4c:98:e6:ce:f6:52:3f:86:3e:1b:86:
f9:cd:8b:71:ac:c3:a5:27:1b:b6:9b:d9:6c:56:8b:6c:88:04:
9e:b1:e5:02:3c:b1:64:fd:1f:bb:2d:6d:72:aa:78:7b:1f:43:
f0:74:e3:b9:71:73:6f:cb:f0:d0:5d:0d:61:6a:20:f8:9b:dc:
27:9a:8e:0c:01:31:8c:bd:2b:26:19:2f:32:24:17:38:cc:69:
9d:8b:7f:29:02:d6:f9:e6:5b:1c:a1:78:db:83:5d:51:b4:9c:
51:c7:22:1d:6b:25:f3:bc:c0:d8:52:9d:6e:cc:77:04:97:b8:
59:76:68:d5:de:8b:d3:e2:6b:12:89:a7:f1:aa:d6:6a:c3:72:
54:94:47:af:ac:11:79:8d:f5:8a:42:80:ad:42:a5:00:29:eb:
48:08:72:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:31:11 2026 by rpki-client