Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
File: SXioZBznhb40aFAwUncj5f3OVio.mft (raw, json)
Hash identifier: d3CRGAMOwYbqsBB2Ka1ATtxHoTF9ii0kk11JcflfOuQ=
Subject key identifier: 31:AF:C7:4B:E0:F7:CA:B3:F9:C3:74:30:8F:82:B2:64:FF:B0:E3:7F
Authority key identifier: 49:78:A8:64:1C:E7:85:BE:34:68:50:30:52:77:23:E5:FD:CE:56:2A
Certificate issuer: /CN=4978a8641ce785be34685030527723e5fdce562a
Certificate serial: 019CAAFCEC7125E57444E379CEC1C71E4279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXioZBznhb40aFAwUncj5f3OVio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
Manifest number: 0882
Signing time: Sun 01 Mar 2026 20:00:28 +0000
Manifest this update: Sun 01 Mar 2026 20:00:28 +0000
Manifest next update: Mon 02 Mar 2026 20:00:28 +0000
Files and hashes: 1: MihSKG7X7G5hbWHLKrg3NwyaRV8.roa (hash: pifaWr0Q6EtkAgB5G0YP5mWdeXXsBTXipgMqv9n85pY=)
2: SXioZBznhb40aFAwUncj5f3OVio.crl (hash: PZzxjDiRWoLNciK8T6fSz42Yo1w1XNTI11RkIqTEMOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
rsync://rpki.ripe.net/repository/DEFAULT/SXioZBznhb40aFAwUncj5f3OVio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:ec:71:25:e5:74:44:e3:79:ce:c1:c7:1e:42:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4978a8641ce785be34685030527723e5fdce562a
Validity
Not Before: Mar 1 20:00:28 2026 GMT
Not After : Mar 2 20:00:28 2026 GMT
Subject: CN=31afc74be0f7cab3f9c374308f82b264ffb0e37f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a8:c6:6c:3f:6c:f2:32:3e:ca:5a:c3:f4:c8:
41:f6:c2:35:c3:af:80:76:e9:99:09:6c:67:0b:2e:
8e:3e:8d:fd:69:c1:27:c6:f5:53:b0:ef:76:95:cb:
5c:2c:1f:db:fa:41:1f:1e:68:bc:a5:8a:f4:ef:2a:
e3:fc:1b:ef:cb:93:41:45:85:d8:60:14:97:2b:2c:
8c:e1:fa:90:71:d8:5e:ca:e4:04:77:a6:b9:74:c9:
70:d6:45:57:f8:06:64:f0:cb:94:8d:08:02:85:d2:
1d:c0:72:8c:fb:fc:00:1c:f4:b4:f0:95:ce:dd:e0:
96:4f:53:22:f5:35:4b:8c:3b:30:09:77:2f:28:cc:
e2:97:41:50:51:87:18:2c:bc:1e:f0:15:04:47:7c:
ef:0b:d1:0c:e2:aa:60:de:e5:10:b3:02:6c:03:3b:
2d:13:47:19:8b:fa:72:88:67:db:96:fa:ed:5c:be:
6b:63:6b:f0:80:43:96:cb:e7:81:3b:79:88:c7:d9:
2b:9d:bd:8e:d6:59:ce:91:91:de:20:7e:07:58:79:
6b:1c:3a:ef:1d:94:14:bd:c5:20:bd:eb:5d:26:b1:
ce:fd:59:a2:f4:c6:4b:09:6d:48:d6:ac:cf:0b:c2:
90:f4:2b:5c:94:13:b2:01:5f:d8:6b:f7:b1:3d:ef:
71:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AF:C7:4B:E0:F7:CA:B3:F9:C3:74:30:8F:82:B2:64:FF:B0:E3:7F
X509v3 Authority Key Identifier:
keyid:49:78:A8:64:1C:E7:85:BE:34:68:50:30:52:77:23:E5:FD:CE:56:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXioZBznhb40aFAwUncj5f3OVio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:88:ec:0d:d7:f9:0b:70:e3:03:24:b9:e2:55:50:de:26:68:
91:c4:78:aa:91:bc:ee:d7:8d:00:be:f5:04:0a:77:57:79:cf:
59:6c:01:dd:90:0c:8b:5c:f0:53:b5:81:fe:aa:27:f1:23:31:
0a:53:a8:c9:2e:14:96:64:68:fa:ba:24:aa:18:e6:e2:b8:37:
32:60:a3:a4:4c:e9:6f:32:b5:c2:31:61:ac:d5:d7:0d:5b:4f:
bf:c4:94:32:6a:ec:fc:2e:32:1c:f0:57:27:e6:cf:fe:f8:c4:
62:8b:47:d8:35:48:b0:2c:0d:b3:2f:d4:2f:35:1b:ad:ed:f7:
5d:48:0c:2b:aa:a1:15:26:77:05:22:17:2e:81:63:78:7a:97:
da:20:78:48:f2:c6:df:98:83:85:8c:0b:6f:f5:81:dd:07:18:
ef:fe:94:67:67:88:f8:0e:c9:67:6e:d2:ab:ae:75:f6:f4:27:
ab:91:69:86:80:89:d7:dd:8b:4b:35:a3:2e:2e:e0:1e:8d:c9:
8a:65:de:1c:cf:00:8f:35:28:73:46:84:79:e8:70:c6:6c:6e:
65:3e:0b:d8:a5:ee:0c:e8:9d:29:15:a9:25:bb:1f:48:67:40:
2d:f9:4d:8c:77:9d:24:e2:12:1c:70:22:f6:84:a7:e7:fb:f8:
d5:4d:b6:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/OxxJeV0RON5zsHHHkJ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NzhhODY0MWNlNzg1YmUzNDY4NTAzMDUyNzcyM2U1ZmRj
ZTU2MmEwHhcNMjYwMzAxMjAwMDI4WhcNMjYwMzAyMjAwMDI4WjAzMTEwLwYDVQQD
EygzMWFmYzc0YmUwZjdjYWIzZjljMzc0MzA4ZjgyYjI2NGZmYjBlMzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6jGbD9s8jI+ylrD9MhB9sI1w6+A
dumZCWxnCy6OPo39acEnxvVTsO92lctcLB/b+kEfHmi8pYr07yrj/Bvvy5NBRYXY
YBSXKyyM4fqQcdheyuQEd6a5dMlw1kVX+AZk8MuUjQgChdIdwHKM+/wAHPS08JXO
3eCWT1Mi9TVLjDswCXcvKMzil0FQUYcYLLwe8BUER3zvC9EM4qpg3uUQswJsAzst
E0cZi/pyiGfblvrtXL5rY2vwgEOWy+eBO3mIx9krnb2O1lnOkZHeIH4HWHlrHDrv
HZQUvcUgvetdJrHO/Vmi9MZLCW1I1qzPC8KQ9CtclBOyAV/Ya/exPe9xsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDGvx0vg98qz+cN0MI+CsmT/sON/MB8GA1UdIwQY
MBaAFEl4qGQc54W+NGhQMFJ3I+X9zlYqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1hpb1pCem5oYjQwYUZBd1VuY2o1ZjNPVmlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wOTNmY2ItZmU3Ny00NDliLWExYWYt
MjFiYzQ4ZWYxNjYwLzEvU1hpb1pCem5oYjQwYUZBd1VuY2o1ZjNPVmlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8wOTNmY2ItZmU3Ny00NDliLWExYWYtMjFiYzQ4ZWYxNjYw
LzEvU1hpb1pCem5oYjQwYUZBd1VuY2o1ZjNPVmlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjojsDdf5
C3DjAyS54lVQ3iZokcR4qpG87teNAL71BAp3V3nPWWwB3ZAMi1zwU7WB/qon8SMx
ClOoyS4UlmRo+rokqhjm4rg3MmCjpEzpbzK1wjFhrNXXDVtPv8SUMmrs/C4yHPBX
J+bP/vjEYotH2DVIsCwNsy/ULzUbre33XUgMK6qhFSZ3BSIXLoFjeHqX2iB4SPLG
35iDhYwLb/WB3QcY7/6UZ2eI+A7JZ27Sq6519vQnq5FphoCJ192LSzWjLi7gHo3J
imXeHM8AjzUoc0aEeehwxmxuZT4L2KXuDOidKRWpJbsfSGdALflNjHedJOISHHAi
9oSn5/v41U22zw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:21 2026 by rpki-client