Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.mft
File: sxagaE0dOLrPQzjCsB2ztBNw60U.mft (raw, json)
Hash identifier: R0clkDygFwOGeCKiv99Q/NZl3muS+/jMqgGfg/g0kr4=
Subject key identifier: B8:FA:C7:DF:3C:06:A0:C8:3F:13:96:53:93:B3:89:6F:D9:9B:F6:86
Authority key identifier: B3:16:A0:68:4D:1D:38:BA:CF:43:38:C2:B0:1D:B3:B4:13:70:EB:45
Certificate issuer: /CN=b316a0684d1d38bacf4338c2b01db3b41370eb45
Certificate serial: 019D9AABB5F104F90A13431647C7F52E1BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxagaE0dOLrPQzjCsB2ztBNw60U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.mft
Manifest number: 0740
Signing time: Fri 17 Apr 2026 09:00:37 +0000
Manifest this update: Fri 17 Apr 2026 09:00:37 +0000
Manifest next update: Sat 18 Apr 2026 09:00:37 +0000
Files and hashes: 1: PWqPuXgW_9Y9TvyR2FkZ0jJYBq8.roa (hash: 19NEYDyyhBU0DYdUPGu2u1lBZKeokSrHjnAnkDsiz24=)
2: sxagaE0dOLrPQzjCsB2ztBNw60U.crl (hash: YUQZSOrnEYHLkdS597vQHXwhW8hJxxz9jIRlzvFk7GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxagaE0dOLrPQzjCsB2ztBNw60U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:b5:f1:04:f9:0a:13:43:16:47:c7:f5:2e:1b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b316a0684d1d38bacf4338c2b01db3b41370eb45
Validity
Not Before: Apr 17 09:00:37 2026 GMT
Not After : Apr 18 09:00:37 2026 GMT
Subject: CN=b8fac7df3c06a0c83f13965393b3896fd99bf686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:60:ed:ba:96:f5:18:d6:55:4b:a5:f6:b4:95:
07:bb:7f:a0:84:8d:0b:f1:55:77:46:e0:70:c5:b5:
7c:de:ec:68:6f:41:31:55:fa:a7:cd:18:ee:8a:c8:
c8:e7:e2:f2:3e:e7:c8:df:a7:48:c8:e7:f4:03:b3:
a7:ef:e3:b3:7b:64:a1:f3:7b:d0:5f:21:af:4d:08:
84:ac:e0:2c:3d:9d:08:10:63:35:69:86:7f:16:ff:
56:6a:79:b8:a6:41:07:d8:41:e9:dd:f6:21:27:97:
0b:40:45:4c:ef:59:d3:b6:be:2c:8a:3f:20:f2:f7:
34:a5:66:4d:60:70:9f:4e:58:74:e9:7b:72:57:35:
11:5b:61:9e:b7:5b:84:cd:24:e2:4c:cd:a3:b5:85:
e5:b4:7f:fe:47:1b:53:33:d6:00:fc:de:53:e4:28:
98:28:70:3b:c1:ab:b5:9c:d5:14:d2:a0:32:a2:68:
d9:37:77:72:09:86:0c:80:ae:7d:b5:51:c4:82:08:
05:80:fc:12:c9:a1:6f:e7:fa:c2:a3:fc:ad:8a:08:
d4:64:a3:3e:cc:b0:30:f2:b3:82:96:51:09:05:94:
71:b1:0e:55:65:8f:f7:4e:14:00:72:ee:ae:70:49:
d4:09:63:84:76:90:0d:d7:df:fb:de:00:a3:a0:dc:
7d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FA:C7:DF:3C:06:A0:C8:3F:13:96:53:93:B3:89:6F:D9:9B:F6:86
X509v3 Authority Key Identifier:
keyid:B3:16:A0:68:4D:1D:38:BA:CF:43:38:C2:B0:1D:B3:B4:13:70:EB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxagaE0dOLrPQzjCsB2ztBNw60U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:3d:e8:37:3c:79:8f:d6:4f:99:6b:f1:ed:62:e2:29:f0:1f:
31:ad:9b:27:37:83:6e:d7:83:e8:f2:2c:1c:78:7e:6f:59:3c:
3a:ad:f5:d4:0c:69:ea:17:23:ce:aa:61:84:1c:d2:ba:be:86:
e1:f4:32:24:75:6a:bf:aa:69:99:cf:1b:16:4b:44:aa:4e:27:
36:41:1d:25:c7:d5:5a:8b:96:71:30:0d:7d:4b:df:5e:af:32:
c2:06:6e:ff:43:92:e5:78:21:24:58:e2:ef:f6:f1:23:fe:cc:
03:52:32:f2:a0:26:71:a9:5a:4d:b5:5b:a8:85:ca:81:a5:65:
51:bc:69:0f:02:70:a2:32:b7:a4:9f:38:e3:35:e2:07:c0:c5:
71:17:a9:d4:b9:20:ce:a3:be:23:83:a4:73:95:cc:59:66:3d:
1d:34:a8:05:80:fe:0f:23:c9:05:01:d5:be:aa:57:c5:88:34:
67:fb:fc:13:07:f3:89:74:34:2c:0f:a7:51:88:51:81:65:c8:
b1:39:fb:9a:03:8f:51:79:43:f2:a2:4b:67:f2:7e:0a:6d:60:
e3:ac:76:e1:01:b6:b3:29:cd:5f:29:d1:8f:25:1a:d5:49:7d:
a8:62:e2:04:ff:bf:e0:c8:10:f5:9f:be:d1:6a:16:bd:74:e3:
f5:92:74:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:23:30 2026 by rpki-client