Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
File: sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft (raw, json)
Hash identifier: xOqABAHuHJKPrlCvDApyTZTfWgJJJbKGWYe+iMWM5iY=
Subject key identifier: 0D:28:AA:7A:82:D7:69:60:E7:73:13:81:18:26:F4:95:75:52:F9:C2
Authority key identifier: B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34
Certificate issuer: /CN=b312db95dfc3b31395e0ecb5ff26212d798de834
Certificate serial: 019EC06E361C647E41160260989861A305F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
Manifest number: 16FF
Signing time: Sat 13 Jun 2026 10:01:48 +0000
Manifest this update: Sat 13 Jun 2026 10:01:48 +0000
Manifest next update: Sun 14 Jun 2026 10:01:48 +0000
Files and hashes: 1: X8tdXJvU9JJe77PtcT-JDwBOQi8.roa (hash: tVoeTVft5vKlrmkaWfTVngTflVy/IwyLYYQaNJOX868=)
2: sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl (hash: cmA0FU9lAiKPKWLRILVTMnpZ86URJhVLaJ5oQqCiAoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6e:36:1c:64:7e:41:16:02:60:98:98:61:a3:05:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b312db95dfc3b31395e0ecb5ff26212d798de834
Validity
Not Before: Jun 13 10:01:48 2026 GMT
Not After : Jun 14 10:01:48 2026 GMT
Subject: CN=0d28aa7a82d76960e77313811826f4957552f9c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e3:88:0a:67:74:f3:5f:0b:70:97:32:63:7c:
e1:43:7e:7a:08:b4:c4:30:86:54:55:70:27:87:dc:
2c:2c:be:03:af:17:a3:d0:84:48:07:0a:cf:ee:6d:
08:b5:b2:58:58:ab:50:f3:90:7d:a9:d0:1e:a6:4f:
71:9a:da:2f:cf:c6:97:9f:ec:cc:c2:d0:f9:f3:76:
c3:98:53:fa:78:51:5b:55:b5:be:8b:3a:e4:b4:2e:
ec:ae:a9:60:a5:4e:63:ce:ac:53:f5:46:fc:54:b1:
0b:9a:6e:d8:cd:c4:bb:4e:1e:b3:c8:db:b4:49:05:
cf:c7:94:e7:f5:6f:fd:75:e1:c4:b7:14:7f:5a:93:
9f:ce:c7:64:22:1a:04:49:d3:ec:51:0d:81:3e:19:
20:50:5c:6c:6f:a5:80:11:c4:75:50:1a:c3:f0:c4:
fa:5e:fa:ce:a4:df:5a:63:7a:47:6b:5f:64:35:df:
e4:37:70:85:a9:6b:6e:35:20:4a:35:da:04:20:cf:
d0:5b:ca:a3:7f:25:b9:f9:7d:49:83:1c:5f:a1:6a:
8a:4a:ea:c1:ba:d7:21:50:19:dd:43:03:49:a0:51:
ba:38:eb:12:c3:ae:3d:8e:d2:f7:dc:46:97:1e:0f:
59:6f:91:c5:2f:46:43:5b:5f:a4:f4:f2:8b:ac:aa:
3b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:28:AA:7A:82:D7:69:60:E7:73:13:81:18:26:F4:95:75:52:F9:C2
X509v3 Authority Key Identifier:
keyid:B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ad:8d:77:ee:0e:3b:79:13:78:d1:01:f0:00:06:e3:39:ee:
4f:3b:c7:32:9b:2f:67:a1:b1:c7:45:c2:23:44:6a:ef:16:b0:
75:da:5e:e8:b4:c0:01:8d:1b:d3:9d:01:1a:ae:ec:9c:f9:a5:
cb:23:86:5a:bb:f7:48:4f:b7:ef:8c:91:ad:91:24:62:96:b9:
f7:a3:ee:e0:93:e0:7d:23:18:0e:dd:0e:45:08:86:d9:80:cb:
0b:55:14:c4:28:a8:9d:23:c4:c6:52:11:72:1d:fe:fd:96:fa:
5d:19:ee:59:0a:5f:8f:9e:8e:c1:22:e6:e2:5a:a5:53:38:42:
6f:5b:76:65:3e:d9:23:b8:5c:39:60:5a:e9:0e:f4:2d:90:13:
3c:81:e9:a2:6d:35:97:c8:a0:01:be:46:03:4d:94:25:81:9a:
db:fe:eb:37:e6:51:e3:f7:7b:5b:c1:30:b3:3d:c2:cd:bc:0a:
f6:70:53:94:5c:d9:5a:03:37:d9:cc:85:b9:8c:ac:74:47:c0:
e6:47:83:44:13:8c:84:b0:1e:0f:dd:4f:11:b2:20:8e:21:1a:
25:e3:a3:23:6d:e9:cd:03:75:55:57:cf:08:10:a1:25:cf:d5:
81:cd:98:46:66:37:a1:f2:ec:2d:c6:99:33:8f:e5:7c:21:1c:
84:66:56:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7AbjYcZH5BFgJgmJhhowX3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMTJkYjk1ZGZjM2IzMTM5NWUwZWNiNWZmMjYyMTJkNzk4
ZGU4MzQwHhcNMjYwNjEzMTAwMTQ4WhcNMjYwNjE0MTAwMTQ4WjAzMTEwLwYDVQQD
EygwZDI4YWE3YTgyZDc2OTYwZTc3MzEzODExODI2ZjQ5NTc1NTJmOWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eOICmd0818LcJcyY3zhQ356CLTE
MIZUVXAnh9wsLL4Drxej0IRIBwrP7m0ItbJYWKtQ85B9qdAepk9xmtovz8aXn+zM
wtD583bDmFP6eFFbVbW+izrktC7srqlgpU5jzqxT9Ub8VLELmm7YzcS7Th6zyNu0
SQXPx5Tn9W/9deHEtxR/WpOfzsdkIhoESdPsUQ2BPhkgUFxsb6WAEcR1UBrD8MT6
XvrOpN9aY3pHa19kNd/kN3CFqWtuNSBKNdoEIM/QW8qjfyW5+X1JgxxfoWqKSurB
utchUBndQwNJoFG6OOsSw649jtL33EaXHg9Zb5HFL0ZDW1+k9PKLrKo7bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0oqnqC12lg53MTgRgm9JV1UvnCMB8GA1UdIwQY
MBaAFLMS25Xfw7MTleDstf8mIS15jeg0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3hMYmxkX0RzeE9WNE95MV95WWhMWG1ONkRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jYmM1MGUtZmFlZi00M2VjLWJkYmEt
ZmRhNDcwYzYxZTA5LzEvc3hMYmxkX0RzeE9WNE95MV95WWhMWG1ONkRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9jYmM1MGUtZmFlZi00M2VjLWJkYmEtZmRhNDcwYzYxZTA5
LzEvc3hMYmxkX0RzeE9WNE95MV95WWhMWG1ONkRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKK2Nd+4O
O3kTeNEB8AAG4znuTzvHMpsvZ6Gxx0XCI0Rq7xawddpe6LTAAY0b050BGq7snPml
yyOGWrv3SE+374yRrZEkYpa596Pu4JPgfSMYDt0ORQiG2YDLC1UUxCionSPExlIR
ch3+/Zb6XRnuWQpfj56OwSLm4lqlUzhCb1t2ZT7ZI7hcOWBa6Q70LZATPIHpom01
l8igAb5GA02UJYGa2/7rN+ZR4/d7W8Ewsz3CzbwK9nBTlFzZWgM32cyFuYysdEfA
5keDRBOMhLAeD91PEbIgjiEaJeOjI23pzQN1VVfPCBChJc/Vgc2YRmY3ofLsLcaZ
M4/lfCEchGZWlQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:30:22 2026 by rpki-client