Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
File: sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft (raw, json)
Hash identifier: 0oJJtLjDRwPhOBf8qikfCRVTVZ2525VghRtyzpBvrz0=
Subject key identifier: 55:39:1A:99:F0:0E:DE:A5:F7:BF:76:46:D4:72:CA:48:6F:05:59:37
Authority key identifier: B1:76:8F:0A:8D:1E:D1:17:3E:CE:DC:68:9C:17:7B:24:9E:E3:A6:8C
Certificate issuer: /CN=b1768f0a8d1ed1173ecedc689c177b249ee3a68c
Certificate serial: 019D9BBF042A12CF55B29DA7BD57A03A29EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
Manifest number: 0228
Signing time: Fri 17 Apr 2026 14:01:19 +0000
Manifest this update: Fri 17 Apr 2026 14:01:19 +0000
Manifest next update: Sat 18 Apr 2026 14:01:19 +0000
Files and hashes: 1: Evg5E-8VSXY1dFWe0dsHFW-O_Jo.roa (hash: Icoysq39tLxqHCpP3ABhw3yUgnv4HKO+EMDypdb4KPE=)
2: r-GapXK3JuL-T7M03ZC61uSVfyE.roa (hash: AG5Eg1DYw6Qc5ggeZMDpUWKtb6RLHqA8/H20Z17wo7s=)
3: sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl (hash: mnQE+Sc6s71vPzr0KhAxArixZ18dAkcQwgCgrph1PDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:bf:04:2a:12:cf:55:b2:9d:a7:bd:57:a0:3a:29:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1768f0a8d1ed1173ecedc689c177b249ee3a68c
Validity
Not Before: Apr 17 14:01:19 2026 GMT
Not After : Apr 18 14:01:19 2026 GMT
Subject: CN=55391a99f00edea5f7bf7646d472ca486f055937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2f:38:ed:7b:8a:be:b2:1c:65:49:99:ef:20:
7b:1b:ba:98:2b:b2:2d:b7:4c:c6:ed:2a:55:a2:3c:
f3:98:a1:c3:8a:91:b7:da:63:72:e8:45:d9:f5:22:
96:c9:74:90:33:11:aa:a6:da:e3:cc:44:ff:48:d9:
31:0f:d4:10:97:f6:30:dd:f1:c3:98:2e:ad:ca:d6:
50:c2:94:66:c5:c3:93:ae:df:2b:0f:01:71:33:40:
7a:29:be:68:c9:f9:7f:02:f4:ee:06:63:52:ac:4e:
31:d9:da:32:93:ca:3c:35:4c:c4:94:1f:7e:93:b9:
14:66:bb:2b:52:c9:65:f4:54:33:16:1c:d1:03:ee:
ed:52:67:df:26:d0:66:a1:9b:bb:2c:8c:4c:a2:d0:
20:67:d9:1f:15:78:8f:3c:fc:d0:e2:c1:2d:e1:97:
5c:74:12:c0:8e:aa:c2:c8:ed:6f:97:0f:64:5b:46:
0f:89:f0:94:8a:95:b5:24:fb:3e:79:31:12:9b:f9:
bc:2f:f4:b0:6c:4a:7c:27:88:07:c6:6a:ab:77:cf:
a7:ff:35:44:4e:e4:8c:44:6c:fa:d9:6e:f6:35:16:
92:c7:69:9a:b1:17:32:38:c1:20:22:f3:a5:ea:c2:
53:e9:ca:1f:ff:eb:dd:6c:e8:ed:2c:10:6c:ec:bc:
73:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:39:1A:99:F0:0E:DE:A5:F7:BF:76:46:D4:72:CA:48:6F:05:59:37
X509v3 Authority Key Identifier:
keyid:B1:76:8F:0A:8D:1E:D1:17:3E:CE:DC:68:9C:17:7B:24:9E:E3:A6:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:1c:96:66:5f:f2:35:f7:c8:4a:16:ab:67:c3:34:8d:1e:08:
dc:af:c5:86:32:02:0e:4e:12:cc:3e:43:e4:47:b7:f2:8a:0f:
1b:db:d8:f8:c6:de:d4:bd:77:f3:f0:f0:ed:d1:06:b1:00:9a:
2d:61:b3:a4:cf:30:d4:ea:7b:4d:02:c1:02:bb:19:81:b0:8d:
84:e1:4b:95:90:d1:f7:ac:63:97:5a:0a:be:12:12:b7:c7:03:
58:18:d3:80:d4:3f:78:2d:87:b2:f2:e6:0f:64:99:5d:b7:b1:
10:9d:75:1f:7c:4d:38:18:d9:dc:cd:38:e9:2e:07:5c:f2:0e:
8e:77:ff:bf:01:8a:0a:e2:e4:3e:47:00:c5:b4:25:7a:a9:ab:
50:5a:3a:b4:eb:d6:96:c1:3b:1d:1f:d7:46:9d:85:2f:bb:03:
6c:d6:4f:9d:c3:c9:c4:bf:1d:8e:eb:46:39:f7:aa:83:cf:87:
5d:08:43:4a:44:c0:a7:7a:d5:2a:26:09:cf:36:02:67:11:8f:
9b:ce:36:4f:a2:be:34:30:7b:df:cf:ca:19:c1:7f:66:12:5b:
7b:b0:42:28:9d:51:10:0f:08:48:2a:35:ee:09:3c:e3:9a:44:
f3:ca:85:32:3a:ce:a7:45:3e:1a:72:c5:c9:fe:74:fb:e9:fd:
4a:38:7d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:12:02 2026 by rpki-client