Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
File: sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft (raw, json)
Hash identifier: FjbaHS21KtUpCJh+EY9gegrXHbaSGdI6N5Tdgp5muk4=
Subject key identifier: BB:6C:F6:0A:45:55:E1:46:F7:3D:43:45:EF:13:DA:DC:2E:5F:F6:60
Authority key identifier: B1:76:8F:0A:8D:1E:D1:17:3E:CE:DC:68:9C:17:7B:24:9E:E3:A6:8C
Certificate issuer: /CN=b1768f0a8d1ed1173ecedc689c177b249ee3a68c
Certificate serial: 01A11FAE944346A0648083CCDE3C38677038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
Manifest number: 03FA
Signing time: Fri 09 Oct 2026 08:01:37 +0000
Manifest this update: Fri 09 Oct 2026 08:01:37 +0000
Manifest next update: Sat 10 Oct 2026 08:01:37 +0000
Files and hashes: 1: Evg5E-8VSXY1dFWe0dsHFW-O_Jo.roa (hash: Icoysq39tLxqHCpP3ABhw3yUgnv4HKO+EMDypdb4KPE=)
2: r-GapXK3JuL-T7M03ZC61uSVfyE.roa (hash: AG5Eg1DYw6Qc5ggeZMDpUWKtb6RLHqA8/H20Z17wo7s=)
3: sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl (hash: rAAmCMnwJ/3BQ1hkFYK7FoLSztingbYEsAUhfgi6tGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:ae:94:43:46:a0:64:80:83:cc:de:3c:38:67:70:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1768f0a8d1ed1173ecedc689c177b249ee3a68c
Validity
Not Before: Oct 9 08:01:37 2026 GMT
Not After : Oct 10 08:01:37 2026 GMT
Subject: CN=bb6cf60a4555e146f73d4345ef13dadc2e5ff660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ed:c0:6f:22:3c:1a:4d:5b:5c:cd:49:df:ce:
0f:6f:39:b9:ae:73:e3:7a:84:61:c8:cc:6f:19:03:
bb:b9:02:d7:9f:fe:e5:fd:82:31:3a:75:de:bb:0f:
3f:30:c8:29:16:86:8a:f8:10:14:5a:bc:4a:42:8d:
dd:45:fd:53:d5:0e:6a:73:52:a2:73:79:9c:4d:d8:
6c:d3:d6:a7:b2:05:fc:55:64:7a:90:f0:d3:a6:0d:
d2:01:3c:0e:b0:6d:dd:79:76:b8:97:94:f8:d6:45:
2e:47:84:96:e9:2a:3c:1d:b3:cf:2d:c5:b6:fe:e6:
b8:1a:f4:03:76:00:14:a2:b9:3d:74:68:2c:f2:74:
05:7d:97:ee:9f:c9:ef:fc:18:d2:8d:46:fa:5e:52:
4a:ad:51:21:7d:92:8a:07:48:18:a6:fc:e0:0b:1f:
16:8d:d5:bf:d0:6e:b8:cf:c8:38:47:fb:2a:91:9c:
74:d8:b5:47:1e:ed:4a:74:ce:02:f5:d6:6a:e5:25:
09:fe:5f:cc:65:a1:00:6a:f3:24:bf:94:a6:81:37:
b9:8f:52:21:7f:98:af:4e:b3:91:5c:fe:2c:5c:19:
a6:27:da:8e:42:9a:f1:ce:94:3e:49:d2:e2:5e:d3:
50:75:4b:1f:6e:08:b7:c4:59:78:96:b7:1b:d6:ca:
8a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6C:F6:0A:45:55:E1:46:F7:3D:43:45:EF:13:DA:DC:2E:5F:F6:60
X509v3 Authority Key Identifier:
keyid:B1:76:8F:0A:8D:1E:D1:17:3E:CE:DC:68:9C:17:7B:24:9E:E3:A6:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:68:a5:2f:90:6b:bd:05:54:5a:be:64:32:6d:1d:bd:8e:d6:
8f:1f:8b:64:ea:54:f1:45:ac:53:c3:d8:c2:95:de:1a:73:45:
c6:19:88:e5:14:fa:ae:2a:00:98:91:b3:3b:70:ad:b1:90:55:
d2:c1:7b:1c:b1:6f:d9:05:12:38:c7:40:f0:28:d5:4d:26:46:
df:9d:f4:11:3f:d7:36:0b:7b:c1:8d:fa:a5:5d:53:e8:ea:ef:
9a:98:71:59:78:4a:d5:4d:68:5e:de:28:f2:19:c7:ba:e1:4c:
e8:3f:e3:b9:42:5e:d3:d2:ff:58:35:03:63:4e:92:00:76:fc:
84:6e:93:5a:8f:0e:33:6c:b7:fd:cd:b2:7d:7c:6c:80:0b:fc:
0d:ef:ca:da:52:69:38:15:74:f0:d9:26:1d:52:52:ec:79:51:
40:e4:c3:cf:73:46:ac:f2:fa:65:8f:f0:85:a6:bf:3a:98:03:
1f:f2:70:98:68:1a:b3:f2:ee:93:d7:11:53:6b:a4:45:20:f1:
6e:10:84:74:2e:b2:d6:f8:70:cb:87:d5:a9:ba:a8:7d:87:33:
7b:42:fe:70:56:6f:75:71:64:cd:1c:fe:af:b5:87:01:e5:9c:
aa:c0:d2:13:ef:4b:1f:9d:ed:96:a5:31:f9:65:8b:6c:d1:40:
cb:12:2d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 12:10:52 2026 by rpki-client