Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
File: sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft (raw, json)
Hash identifier: 20GGhUR5QVOfEAkMLBZLkWlk2RgFSuXJP8elDawQqgw=
Subject key identifier: 34:CE:D9:74:34:83:E8:C4:A9:6C:D3:C8:1F:3A:DC:17:0D:84:6B:61
Authority key identifier: B1:76:8F:0A:8D:1E:D1:17:3E:CE:DC:68:9C:17:7B:24:9E:E3:A6:8C
Certificate issuer: /CN=b1768f0a8d1ed1173ecedc689c177b249ee3a68c
Certificate serial: 019FACE47C2F8CB1349D746829F8C30EB5BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
Manifest number: 033A
Signing time: Wed 29 Jul 2026 08:01:22 +0000
Manifest this update: Wed 29 Jul 2026 08:01:22 +0000
Manifest next update: Thu 30 Jul 2026 08:01:22 +0000
Files and hashes: 1: Evg5E-8VSXY1dFWe0dsHFW-O_Jo.roa (hash: Icoysq39tLxqHCpP3ABhw3yUgnv4HKO+EMDypdb4KPE=)
2: r-GapXK3JuL-T7M03ZC61uSVfyE.roa (hash: AG5Eg1DYw6Qc5ggeZMDpUWKtb6RLHqA8/H20Z17wo7s=)
3: sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl (hash: Jy8wO+DwLspj7BjFXY3QsDuiYMJZoNQsujTz/hD8f10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e4:7c:2f:8c:b1:34:9d:74:68:29:f8:c3:0e:b5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1768f0a8d1ed1173ecedc689c177b249ee3a68c
Validity
Not Before: Jul 29 08:01:22 2026 GMT
Not After : Jul 30 08:01:22 2026 GMT
Subject: CN=34ced9743483e8c4a96cd3c81f3adc170d846b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f3:b5:0b:71:ea:59:9a:39:29:02:65:da:26:
d2:5e:d6:c2:b7:ff:55:81:fb:49:7c:cc:4f:76:3b:
08:07:91:72:9b:56:42:00:a7:f8:82:2c:8a:2a:86:
a5:5f:cb:6d:31:dc:69:fa:19:84:68:ed:5a:66:77:
4e:bf:19:26:f6:8e:99:c9:41:6e:60:e3:7d:87:fa:
cd:f0:3b:e3:fa:c1:76:a6:d0:dd:1f:0e:b2:19:e9:
5a:3b:13:2b:96:4d:d0:7e:d2:62:4f:0b:6c:2f:6d:
5d:89:50:e8:cb:0b:50:dd:5a:b4:ee:99:fc:91:56:
b8:0a:a9:7a:fe:41:5a:56:05:5a:79:76:e1:6f:69:
6b:d0:28:00:de:9c:3d:ff:a9:0d:cb:e7:c9:de:5c:
19:9b:d6:9d:e9:bb:d7:8c:69:2c:a8:49:12:6f:46:
4f:e8:67:fd:b7:d3:57:0b:07:02:cc:2b:35:f0:de:
c9:17:7a:4a:37:0d:dd:2d:1b:bd:b3:49:dd:05:39:
52:a9:8d:64:c1:37:36:23:1b:c0:03:d5:ba:a7:61:
00:72:90:81:45:85:f0:51:14:1e:41:0e:05:48:81:
b7:35:69:ef:ff:b3:73:29:2a:92:17:a3:e8:62:25:
3b:14:1d:8a:be:f6:41:d6:a1:be:b1:a0:4a:96:ee:
b8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CE:D9:74:34:83:E8:C4:A9:6C:D3:C8:1F:3A:DC:17:0D:84:6B:61
X509v3 Authority Key Identifier:
keyid:B1:76:8F:0A:8D:1E:D1:17:3E:CE:DC:68:9C:17:7B:24:9E:E3:A6:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:20:43:9f:d8:45:bb:e6:fe:02:fb:d9:51:7b:70:9f:76:c6:
e2:93:49:14:aa:f3:26:e0:28:aa:cf:03:18:be:1b:42:3d:e2:
2c:ac:56:da:7f:3c:34:7d:1e:ec:21:c2:f5:54:2c:81:17:45:
52:8e:4c:fb:c3:7c:7c:7d:a6:3d:71:57:b8:37:e4:ca:d5:d8:
d8:67:cd:b6:b2:16:4f:35:8c:96:9a:54:26:a5:ef:a2:40:4e:
75:87:68:c9:20:d4:af:1e:81:58:4d:6c:3e:55:07:00:de:26:
ab:a3:1b:ab:ec:ab:0b:03:51:2d:3c:e6:80:b9:97:81:07:be:
63:67:23:4c:11:8d:3d:44:89:8a:37:dd:2f:bb:16:55:25:28:
d1:4f:8e:d1:9a:0b:a0:c7:44:75:92:b2:9e:a9:d6:a8:cc:64:
b3:63:d5:23:bd:cd:65:b1:e8:a4:0a:98:3f:a2:b4:50:2d:89:
2f:81:64:2d:68:17:4a:66:63:ee:b2:29:07:f7:db:3e:72:81:
a1:4f:51:20:7b:75:c5:68:5f:4c:64:c3:ef:47:51:da:66:80:
2d:1a:74:a1:58:6b:9d:a9:96:ff:93:bf:f7:61:78:96:e4:97:
2d:80:5c:08:38:0d:e3:d8:49:d4:3c:83:d1:d8:c8:85:86:68:
f6:ad:ff:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:10:39 2026 by rpki-client