Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft
File: sX6_RB7hCFYx7rdxmomC39gFe-E.mft (raw, json)
Hash identifier: 2T69GUEteLqxPD9rlhAU212yOnalSaUF8FcqCarh6Bg=
Subject key identifier: 95:2D:42:C0:9A:66:2E:C0:99:F5:F5:68:06:8D:CD:DB:4B:3C:DF:B1
Authority key identifier: B1:7E:BF:44:1E:E1:08:56:31:EE:B7:71:9A:89:82:DF:D8:05:7B:E1
Certificate issuer: /CN=b17ebf441ee1085631eeb7719a8982dfd8057be1
Certificate serial: 019D98F43FFAF7E9BFCE37E1EEE57E4FBF2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sX6_RB7hCFYx7rdxmomC39gFe-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft
Manifest number: 0C17
Signing time: Fri 17 Apr 2026 01:00:37 +0000
Manifest this update: Fri 17 Apr 2026 01:00:37 +0000
Manifest next update: Sat 18 Apr 2026 01:00:37 +0000
Files and hashes: 1: WseAFri0IbJVLS_17n9KVrn46U8.roa (hash: FwcN+EP7M1WYCm+EEp4GaqVFfXeQyTGsWFqoQ+nRBec=)
2: sX6_RB7hCFYx7rdxmomC39gFe-E.crl (hash: fWodxqqu7tlDsRBc3TKyMwLOqj+uSsH5XDcXDn+3lyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sX6_RB7hCFYx7rdxmomC39gFe-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:3f:fa:f7:e9:bf:ce:37:e1:ee:e5:7e:4f:bf:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b17ebf441ee1085631eeb7719a8982dfd8057be1
Validity
Not Before: Apr 17 01:00:37 2026 GMT
Not After : Apr 18 01:00:37 2026 GMT
Subject: CN=952d42c09a662ec099f5f568068dcddb4b3cdfb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:de:a5:c5:13:b0:21:01:8b:6b:fc:9d:83:07:
b5:65:b8:c8:cc:6a:2e:1f:60:8c:6b:a1:82:cf:0c:
91:cd:e9:2f:28:de:60:33:75:11:7f:0c:af:f0:a7:
a1:ea:21:5a:d2:97:a3:7b:ab:47:05:c4:15:ed:c5:
e4:01:eb:4d:6a:45:d7:78:18:22:90:44:85:c9:32:
1f:a0:16:eb:91:87:72:65:3a:4f:31:a5:89:1a:8a:
97:44:f9:eb:36:d5:4a:c2:1a:ff:63:5e:0b:b4:89:
52:4d:d6:5c:ac:b0:2b:9a:c4:7d:d0:06:a7:21:f8:
af:9d:dd:36:2b:9a:2e:91:2f:32:05:4c:2f:1d:c0:
29:5c:b5:6a:86:04:e2:ee:f3:5d:19:d0:02:66:18:
d9:5a:12:48:7a:c4:fa:1e:2a:9d:b8:e4:97:bf:c5:
91:f9:cc:20:10:eb:2c:33:4d:31:68:d5:a2:90:84:
05:63:e8:fc:9d:c4:ea:fe:e7:41:9f:0e:1f:b1:73:
c0:e9:15:37:a3:41:c2:7d:29:bf:0c:c2:30:b3:c6:
42:83:4f:e8:b4:25:e8:6c:37:79:43:4d:eb:3c:e7:
6f:ea:05:50:dd:9b:dc:da:dd:83:4a:bc:3e:44:c6:
b9:d4:aa:23:fe:5a:9d:9b:8c:ff:a3:49:63:db:17:
df:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2D:42:C0:9A:66:2E:C0:99:F5:F5:68:06:8D:CD:DB:4B:3C:DF:B1
X509v3 Authority Key Identifier:
keyid:B1:7E:BF:44:1E:E1:08:56:31:EE:B7:71:9A:89:82:DF:D8:05:7B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sX6_RB7hCFYx7rdxmomC39gFe-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:bf:45:b2:84:95:fc:0f:df:12:cf:12:f8:e5:6a:c9:c6:69:
b9:fe:c0:6a:65:c4:9c:e0:4e:b6:02:db:d4:fb:45:87:96:be:
56:8e:0a:d7:b3:fe:2a:bc:0a:da:25:21:4c:8c:99:93:07:49:
d8:f9:47:2f:8a:8b:67:81:d3:07:ab:f5:72:19:ac:5b:f3:b5:
64:81:82:26:4b:05:dc:64:da:a9:1b:f1:71:ec:5b:25:a9:8a:
fb:c1:3c:de:5d:53:51:ec:54:79:93:98:6b:ba:38:55:fe:8f:
b5:7f:9b:77:ff:b7:43:e5:fa:1f:80:8f:cc:23:c4:39:d1:44:
12:d5:b3:5a:9b:d2:eb:c3:92:78:85:2d:ff:15:5e:23:b6:0a:
2b:45:9f:dc:92:c0:52:65:6b:8e:1a:ee:2e:ca:32:9d:22:51:
9f:c7:a9:fc:85:b7:b0:d5:ad:08:d7:c6:c1:8c:f5:91:bb:1a:
09:e4:f8:c3:08:7d:c8:5c:6a:ee:83:ee:fb:14:55:2c:e9:97:
d8:90:76:6a:2d:32:28:a2:4a:e5:20:73:c1:f7:f6:06:20:7f:
9b:d0:1f:e0:9f:47:94:77:b7:c5:fd:27:69:6e:9c:81:03:9a:
58:a4:be:0b:d4:58:fe:6f:10:16:e8:c2:cb:1d:c7:fc:55:d7:
00:7f:25:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:21:17 2026 by rpki-client