Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
File: sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft (raw, json)
Hash identifier: uxRYCnFwLodDrymcHahb1ElkQ3bkaK94MWe+CLElL/4=
Subject key identifier: CD:D5:CA:52:DA:9B:8F:EF:9B:C4:E9:F4:FA:DE:21:AC:43:17:95:25
Authority key identifier: B1:76:8F:0A:8D:1E:D1:17:3E:CE:DC:68:9C:17:7B:24:9E:E3:A6:8C
Certificate issuer: /CN=b1768f0a8d1ed1173ecedc689c177b249ee3a68c
Certificate serial: 019CB0243F85A706BC9A0F76F5942783C258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
Manifest number: 01AE
Signing time: Mon 02 Mar 2026 20:01:31 +0000
Manifest this update: Mon 02 Mar 2026 20:01:31 +0000
Manifest next update: Tue 03 Mar 2026 20:01:31 +0000
Files and hashes: 1: Evg5E-8VSXY1dFWe0dsHFW-O_Jo.roa (hash: Icoysq39tLxqHCpP3ABhw3yUgnv4HKO+EMDypdb4KPE=)
2: r-GapXK3JuL-T7M03ZC61uSVfyE.roa (hash: AG5Eg1DYw6Qc5ggeZMDpUWKtb6RLHqA8/H20Z17wo7s=)
3: sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl (hash: wgQAnEkUh9wsu4wIP7YEPrSQ+Velly0nMIUzfjiGYow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:24:3f:85:a7:06:bc:9a:0f:76:f5:94:27:83:c2:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1768f0a8d1ed1173ecedc689c177b249ee3a68c
Validity
Not Before: Mar 2 20:01:31 2026 GMT
Not After : Mar 3 20:01:31 2026 GMT
Subject: CN=cdd5ca52da9b8fef9bc4e9f4fade21ac43179525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5b:2c:5b:01:0b:5c:f1:e3:17:15:99:ad:9a:
0c:6f:72:cb:3d:78:d1:69:56:a0:bf:10:b1:c9:c8:
b0:46:83:02:e6:8a:fd:58:26:26:1a:55:0a:43:47:
ca:ec:b9:be:b9:4e:e4:c5:09:52:5f:6f:59:fb:c5:
cb:97:e5:4a:8e:22:fb:53:12:30:6f:4c:f3:35:4e:
18:92:4b:fa:65:c6:80:ee:ce:65:03:41:71:51:b7:
81:54:f2:16:66:77:2e:ff:54:d6:d5:00:88:06:43:
b9:39:af:df:a0:75:dd:c3:b8:55:ff:66:e1:b5:df:
ae:b8:08:0e:45:26:53:71:50:e8:54:f3:cb:a1:cb:
f5:0b:f4:ba:d6:84:3f:9a:34:4f:df:bd:6a:79:d7:
c6:31:db:e3:11:41:c5:cd:5a:44:34:7f:31:f3:9d:
d8:3f:67:85:19:7d:ec:36:59:d5:1d:f1:05:32:f7:
9e:80:18:c8:d9:23:fd:83:e6:66:fd:d9:b4:66:29:
d7:cd:0e:1a:57:5b:21:1d:9f:6c:07:b9:d5:59:af:
20:0b:b3:50:79:e7:8a:bb:3e:3f:52:74:93:ab:8c:
a6:39:5f:f5:ce:2e:95:85:98:88:5d:43:56:95:5a:
2d:67:73:eb:57:3e:7b:fe:df:f0:df:f3:09:3c:90:
db:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D5:CA:52:DA:9B:8F:EF:9B:C4:E9:F4:FA:DE:21:AC:43:17:95:25
X509v3 Authority Key Identifier:
keyid:B1:76:8F:0A:8D:1E:D1:17:3E:CE:DC:68:9C:17:7B:24:9E:E3:A6:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:6a:22:34:0c:71:3a:2f:a7:d8:66:c3:03:af:b0:0e:ca:5b:
2e:07:17:28:49:42:8a:53:33:cb:2f:45:d0:fb:32:8f:ce:1c:
21:db:12:39:44:f5:d9:78:3d:59:ca:00:89:a8:b9:be:76:11:
d4:95:34:d2:b5:7b:15:c3:9e:0b:0c:0d:9b:3b:01:77:1b:2b:
95:2a:25:5d:a0:f6:b1:2d:09:03:71:f3:7f:db:d0:b2:53:cd:
20:d0:50:a2:24:c3:23:9f:9b:00:f7:58:05:2e:11:64:17:57:
f9:09:54:1e:59:43:48:4a:a7:f1:f5:c0:93:aa:9c:77:c1:97:
a5:9f:21:6e:d0:8d:cd:9e:47:78:53:2d:7a:4b:36:46:7f:64:
32:18:46:9a:a0:27:d9:8e:07:0a:4c:ef:56:7b:70:1a:db:a6:
56:a0:9e:fa:cb:5a:90:d2:a4:55:f5:a4:6f:eb:60:d0:36:c1:
10:68:2c:0b:b7:01:fb:b6:69:d6:31:d5:39:ea:11:fe:b7:0b:
5d:9f:a3:45:10:54:8c:df:9a:eb:be:ef:6d:d9:c3:d8:88:37:
cd:e4:e3:3d:89:da:4f:48:5a:c4:16:09:76:49:4b:f6:4d:df:
5a:f3:ad:da:89:47:95:67:cb:92:1a:3b:11:e8:a4:c4:9a:48:
44:44:27:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:30:31 2026 by rpki-client