Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
File: SXIqDKi7yU1IpctIzMku_vhFp-M.mft (raw, json)
Hash identifier: R6/DqEOuuS4cJz7rS9Q5aRfQk1YwrDqb1ewMSPJrHjM=
Subject key identifier: CD:A9:93:26:03:B2:7B:76:21:FE:EA:D2:CE:C1:F7:9C:83:D9:72:4A
Authority key identifier: 49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
Certificate issuer: /CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Certificate serial: 01A0C40E02FFF0758909D726E3E94A32437B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
Manifest number: 1A22
Signing time: Mon 21 Sep 2026 13:00:47 +0000
Manifest this update: Mon 21 Sep 2026 13:00:47 +0000
Manifest next update: Tue 22 Sep 2026 13:00:47 +0000
Files and hashes: 1: SXIqDKi7yU1IpctIzMku_vhFp-M.crl (hash: u4gCJnkaaKI10O+OxjL/feJ/WnsCr7d0dnEGIin5O1w=)
2: Y7BflHpDTlEOWh8-FjDosgwANDI.roa (hash: BNh1IcHDcawtVTnT8ZLo5aKLUrVIe97SR3mZxwBAYlo=)
3: kfeH-aHyiZ_llhlDCtwr8YeqKuk.roa (hash: 4qeVrLsRX3PjbQ9N5eaGFDLDZ8tMOqdmxHU/M5zIjWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0e:02:ff:f0:75:89:09:d7:26:e3:e9:4a:32:43:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Validity
Not Before: Sep 21 13:00:47 2026 GMT
Not After : Sep 22 13:00:47 2026 GMT
Subject: CN=cda9932603b27b7621feead2cec1f79c83d9724a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:20:a8:00:bc:6e:eb:45:bc:aa:9c:2e:39:b9:
97:9c:f1:12:5b:f8:49:2f:ae:bb:52:5b:8d:34:3d:
6b:65:48:2f:35:4a:f9:3f:b1:9a:13:cc:79:e3:a5:
c1:0f:2c:96:06:15:fc:14:8c:a8:15:45:95:0f:f2:
38:ca:03:de:c7:3e:95:02:13:33:c3:53:f8:80:bf:
bf:34:0a:5f:e0:5e:a5:57:2a:b0:47:d6:73:3e:fd:
b8:5b:54:4c:7d:fb:a9:88:7d:91:a0:e2:4c:45:73:
24:81:cd:7c:40:1e:1e:4e:0e:65:5d:92:aa:b8:b3:
d5:cf:a0:c8:96:f1:b1:24:ec:ee:fe:d6:44:19:38:
f6:f3:02:1b:08:d6:d2:e4:32:27:e0:8a:8e:b3:df:
90:30:ca:9e:58:f4:dd:20:8e:2b:a7:20:42:ee:e6:
16:b2:34:a6:f8:49:79:6b:96:fb:e8:ef:d8:47:b3:
8d:e1:83:3e:0f:3e:bc:6c:e2:a9:8a:64:2f:fd:94:
ad:18:76:3c:ad:4b:08:d3:70:54:73:6f:85:6c:b4:
0c:e9:84:27:32:e6:a0:e6:68:ac:03:ba:d6:17:99:
87:62:2b:1f:57:f3:42:b0:72:f4:f5:52:43:36:0e:
70:d1:d1:17:f1:f5:d9:3e:7b:fd:37:73:76:3a:75:
f0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A9:93:26:03:B2:7B:76:21:FE:EA:D2:CE:C1:F7:9C:83:D9:72:4A
X509v3 Authority Key Identifier:
keyid:49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:8a:e8:8d:17:26:35:0d:89:65:5e:8c:0b:fa:5f:93:9f:ce:
65:f4:19:ec:7b:a8:6f:8d:e2:5b:26:39:76:4b:af:c0:cf:71:
48:d4:0a:3b:75:70:81:5c:03:05:da:2b:1b:a1:7d:95:c1:92:
30:b3:99:7d:ac:e6:b3:cb:04:f5:14:4d:6f:f2:ec:63:30:ce:
5a:85:a6:8f:b0:76:d7:8f:9f:7a:8f:e6:f7:d2:f6:d8:86:13:
44:f8:36:b9:f3:ed:e4:b9:04:57:41:21:44:80:94:d3:23:eb:
8f:7c:a6:55:43:5f:6c:08:f5:39:0b:df:9d:17:7b:25:79:ec:
1f:25:52:a4:da:34:23:73:26:a2:79:b9:dd:c6:c0:5b:76:df:
b9:95:e0:84:0f:98:24:30:38:f2:3c:ea:9e:4d:b1:a6:ef:68:
d7:29:9b:4c:0e:27:de:51:ed:b5:03:76:9e:c0:5d:01:a3:f2:
73:36:2c:80:bc:50:45:41:30:8e:2d:1b:c1:dc:24:42:2d:4d:
a5:32:f7:0e:fc:c1:ae:b6:61:95:81:23:e5:36:e9:dd:6a:e6:
73:51:3f:98:34:ed:a6:1a:58:f4:5b:14:98:bd:46:6d:69:b4:
4b:b9:40:31:27:44:5a:65:51:2a:e4:c1:27:22:1e:7e:55:9c:
6f:28:2a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:12:24 2026 by rpki-client