Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.mft
File: sxagaE0dOLrPQzjCsB2ztBNw60U.mft (raw, json)
Hash identifier: DUWo2CqYGKQG6CbG33+wwNpBJERVin+H4qrdfK5VAos=
Subject key identifier: E4:70:4B:7D:99:57:4C:B5:2D:25:38:46:7D:4E:F2:8F:5C:9A:B9:BD
Authority key identifier: B3:16:A0:68:4D:1D:38:BA:CF:43:38:C2:B0:1D:B3:B4:13:70:EB:45
Certificate issuer: /CN=b316a0684d1d38bacf4338c2b01db3b41370eb45
Certificate serial: 019CAB3463B7B06C8AF4E5C4B8A2672B5742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxagaE0dOLrPQzjCsB2ztBNw60U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.mft
Manifest number: 06C4
Signing time: Sun 01 Mar 2026 21:01:03 +0000
Manifest this update: Sun 01 Mar 2026 21:01:03 +0000
Manifest next update: Mon 02 Mar 2026 21:01:03 +0000
Files and hashes: 1: PWqPuXgW_9Y9TvyR2FkZ0jJYBq8.roa (hash: 19NEYDyyhBU0DYdUPGu2u1lBZKeokSrHjnAnkDsiz24=)
2: sxagaE0dOLrPQzjCsB2ztBNw60U.crl (hash: U8Wjb7Tjw3WCrLchgqzz0wixinwYNicRWyIWInQxKY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxagaE0dOLrPQzjCsB2ztBNw60U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:63:b7:b0:6c:8a:f4:e5:c4:b8:a2:67:2b:57:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b316a0684d1d38bacf4338c2b01db3b41370eb45
Validity
Not Before: Mar 1 21:01:03 2026 GMT
Not After : Mar 2 21:01:03 2026 GMT
Subject: CN=e4704b7d99574cb52d2538467d4ef28f5c9ab9bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:03:b5:ba:99:76:41:ea:6d:3d:d2:94:8c:81:
8f:b3:0b:e6:0b:14:47:67:6d:e6:59:52:fe:8a:37:
2f:fe:86:6d:94:cb:c5:ac:99:d2:c2:3d:f2:fc:28:
aa:a6:96:fe:f6:1b:75:2a:38:69:c4:c9:ba:b0:30:
4f:32:88:2c:8c:3f:a3:10:fa:5a:ad:36:35:bb:1e:
63:2f:9a:ba:b8:9b:98:fe:5e:b1:07:48:64:30:4c:
e2:47:81:cc:25:01:0f:7a:4d:33:d3:13:a8:87:d8:
b7:44:45:f4:7e:88:7b:8e:3e:57:40:48:7c:ef:54:
05:55:03:67:bc:98:3e:58:e4:c8:6f:c6:d4:21:11:
c0:05:dd:2a:d9:7a:0b:b8:56:86:9e:32:a8:6d:e7:
d1:8a:94:1b:61:e1:03:fb:a0:0e:70:0d:94:ac:97:
00:65:8c:c1:d5:34:f3:40:29:31:f1:56:a1:6c:1d:
ff:91:11:e3:78:7f:fe:52:e5:b6:f6:df:2c:20:a6:
6a:44:fb:b5:f3:f3:38:71:d0:23:98:4e:9f:61:7e:
52:2d:84:14:9e:74:32:35:86:2e:8d:10:07:7c:6d:
11:f0:44:a4:21:5f:24:bf:60:7c:0c:ea:b5:53:1e:
b8:5a:d6:86:81:84:98:92:2d:06:4b:d2:e7:69:27:
eb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:70:4B:7D:99:57:4C:B5:2D:25:38:46:7D:4E:F2:8F:5C:9A:B9:BD
X509v3 Authority Key Identifier:
keyid:B3:16:A0:68:4D:1D:38:BA:CF:43:38:C2:B0:1D:B3:B4:13:70:EB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxagaE0dOLrPQzjCsB2ztBNw60U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:26:a8:16:28:d1:0e:54:28:06:d5:e8:c2:de:51:ae:cc:79:
09:aa:c6:4e:a0:ef:95:e9:88:61:8d:43:32:b5:69:d2:a5:29:
ab:85:dc:7c:2b:e4:53:d0:e0:11:cb:e2:5e:83:97:70:5a:d1:
6d:28:68:e7:91:68:a9:ce:a0:e6:86:bf:66:d6:29:62:e5:80:
8e:79:02:a1:5e:cc:07:8a:b8:da:0a:65:2e:20:0b:4b:0f:3f:
7a:06:55:dd:a8:91:3f:c7:d6:fa:11:de:c1:3e:00:97:29:80:
78:01:29:15:61:49:8d:96:29:a7:df:1f:d9:37:6b:24:de:32:
cb:bc:ef:ae:74:93:f2:f0:7e:37:79:ee:68:13:42:5a:fb:1e:
e9:07:5e:b8:ba:89:c8:a4:34:6d:c6:b7:40:bc:da:29:42:3d:
34:6e:87:66:09:25:37:a7:05:8f:cf:ad:08:8e:52:54:c9:67:
c8:84:da:15:b7:51:5c:c0:c9:56:aa:ad:f6:c2:38:c2:16:da:
30:b2:c9:c6:9c:c2:e3:d9:0c:27:e8:1a:9c:55:44:ee:c2:e4:
9d:ea:af:3f:33:2d:1a:c3:21:a0:fa:e7:b2:7a:0e:b2:48:7d:
8b:cd:23:e9:4a:fd:c9:dc:f9:6b:83:e0:51:a2:5c:0d:4f:ab:
02:00:50:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:41:34 2026 by rpki-client