Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
File: SXIqDKi7yU1IpctIzMku_vhFp-M.mft (raw, json)
Hash identifier: ANl5bjHAZSO5XpNdIoHJ7DgpPFLiSzf45BxULwVl4Hc=
Subject key identifier: 42:36:04:B7:37:2F:92:AB:B2:D2:CF:AB:09:8B:72:3B:08:2A:1D:67
Authority key identifier: 49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
Certificate issuer: /CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Certificate serial: 019FAA1A851F796485483089B66AA1D05E98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
Manifest number: 1990
Signing time: Tue 28 Jul 2026 19:01:32 +0000
Manifest this update: Tue 28 Jul 2026 19:01:32 +0000
Manifest next update: Wed 29 Jul 2026 19:01:32 +0000
Files and hashes: 1: SXIqDKi7yU1IpctIzMku_vhFp-M.crl (hash: HR5wljwHKSZZWfExgVp0Pz5fkIvHBYJn3LxCpZDY+6k=)
2: Y7BflHpDTlEOWh8-FjDosgwANDI.roa (hash: BNh1IcHDcawtVTnT8ZLo5aKLUrVIe97SR3mZxwBAYlo=)
3: kfeH-aHyiZ_llhlDCtwr8YeqKuk.roa (hash: 4qeVrLsRX3PjbQ9N5eaGFDLDZ8tMOqdmxHU/M5zIjWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:85:1f:79:64:85:48:30:89:b6:6a:a1:d0:5e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Validity
Not Before: Jul 28 19:01:32 2026 GMT
Not After : Jul 29 19:01:32 2026 GMT
Subject: CN=423604b7372f92abb2d2cfab098b723b082a1d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a5:77:10:1a:02:c7:13:df:72:b2:02:a9:a0:
a1:2c:96:ce:8a:f0:e2:27:e3:d8:98:78:6f:e9:0a:
d6:cb:fb:9b:3f:f4:b3:a0:53:78:5c:74:47:e5:2c:
ca:bf:a1:c8:63:90:39:cf:7e:04:c5:11:a0:f1:8d:
9a:5c:f6:00:82:14:7f:84:24:21:fe:19:99:ca:55:
f2:20:73:9f:ba:de:a2:71:69:27:9a:c1:8c:c6:74:
59:e4:e9:36:a5:24:6e:e1:6b:83:17:20:fa:30:cb:
6b:63:62:19:ae:f7:02:22:d3:88:80:07:d0:e8:c9:
d3:c1:f8:95:bb:52:43:9f:86:d1:6a:57:60:3d:b9:
72:23:dc:16:64:2a:77:8f:a1:7c:1a:dc:ef:14:2c:
a1:28:4b:72:33:e7:df:03:58:92:59:8a:1b:cd:90:
b7:3e:2a:30:fb:ca:e4:7b:8f:d5:73:3a:45:bb:a7:
94:79:7c:55:e2:6e:53:9b:35:6a:a5:79:23:80:2c:
72:da:6b:b7:3e:76:3b:14:19:0b:eb:4b:23:a0:8f:
55:91:09:91:0d:9e:46:95:92:82:c9:15:e8:ab:69:
2f:d8:92:71:ae:ed:a7:10:c8:91:f7:97:b5:6a:87:
d0:53:06:76:30:75:ea:68:07:46:f3:fd:f4:8c:10:
dc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:36:04:B7:37:2F:92:AB:B2:D2:CF:AB:09:8B:72:3B:08:2A:1D:67
X509v3 Authority Key Identifier:
keyid:49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:f4:f7:5b:77:5d:5d:78:3c:d4:f0:45:10:d3:cc:9e:76:0c:
bf:f3:18:c9:a4:45:2a:bc:e4:20:84:48:9c:fb:cc:4a:e0:a3:
f5:ee:78:e1:79:d3:34:b4:47:f2:81:17:ab:bf:c8:f0:1b:4a:
2a:1f:74:1b:b7:9c:7d:02:3b:a8:f0:f2:8f:ef:a4:bd:1c:2b:
ee:3b:25:70:4c:c3:8a:c5:a8:68:d2:e6:f4:aa:62:7a:8c:74:
7b:70:f9:81:0e:06:a4:84:a0:89:1c:a0:e7:df:6f:8b:37:a3:
8a:b0:db:1b:13:b7:f4:93:df:aa:41:22:b1:a2:eb:d9:ba:cd:
a3:d8:c7:4b:c4:2d:58:2c:85:fb:27:bd:67:1f:40:f2:74:bc:
55:bf:93:27:a0:18:be:60:53:1f:58:00:46:63:15:5d:9c:1b:
8c:b7:13:7d:1b:f8:33:ef:83:1b:b5:93:3b:d8:d2:e4:c6:8a:
96:d7:36:96:b5:68:49:76:51:d5:11:79:64:c1:ae:fc:6d:85:
04:fb:91:d6:d0:79:f6:e1:7b:0f:d1:c8:cd:ef:e7:47:9d:83:
57:ce:0f:96:54:c7:8b:84:f5:66:f2:b7:b0:ef:5a:a4:85:86:
74:cd:6f:71:60:a7:17:82:fa:dd:5e:14:81:97:73:d3:d7:33:
6b:de:fe:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qGoUfeWSFSDCJtmqh0F6YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NzIyYTBjYThiYmM5NGQ0OGE1Y2I0OGNjYzkyZWZlZjg0
NWE3ZTMwHhcNMjYwNzI4MTkwMTMyWhcNMjYwNzI5MTkwMTMyWjAzMTEwLwYDVQQD
Eyg0MjM2MDRiNzM3MmY5MmFiYjJkMmNmYWIwOThiNzIzYjA4MmExZDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aV3EBoCxxPfcrICqaChLJbOivDi
J+PYmHhv6QrWy/ubP/SzoFN4XHRH5SzKv6HIY5A5z34ExRGg8Y2aXPYAghR/hCQh
/hmZylXyIHOfut6icWknmsGMxnRZ5Ok2pSRu4WuDFyD6MMtrY2IZrvcCItOIgAfQ
6MnTwfiVu1JDn4bRaldgPblyI9wWZCp3j6F8GtzvFCyhKEtyM+ffA1iSWYobzZC3
Piow+8rke4/VczpFu6eUeXxV4m5TmzVqpXkjgCxy2mu3PnY7FBkL60sjoI9VkQmR
DZ5GlZKCyRXoq2kv2JJxru2nEMiR95e1aofQUwZ2MHXqaAdG8/30jBDc3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEI2BLc3L5KrstLPqwmLcjsIKh1nMB8GA1UdIwQY
MBaAFElyKgyou8lNSKXLSMzJLv74RafjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1hJcURLaTd5VTFJcGN0SXpNa3VfdmhGcC1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9lYzUyMDgtZjY5NS00YmRiLTliYjIt
ZTE4ZmE2NTgwNTVhLzEvU1hJcURLaTd5VTFJcGN0SXpNa3VfdmhGcC1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9lYzUyMDgtZjY5NS00YmRiLTliYjItZTE4ZmE2NTgwNTVh
LzEvU1hJcURLaTd5VTFJcGN0SXpNa3VfdmhGcC1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuPT3W3dd
XXg81PBFENPMnnYMv/MYyaRFKrzkIIRInPvMSuCj9e544XnTNLRH8oEXq7/I8BtK
Kh90G7ecfQI7qPDyj++kvRwr7jslcEzDisWoaNLm9Kpieox0e3D5gQ4GpISgiRyg
599vizejirDbGxO39JPfqkEisaLr2brNo9jHS8QtWCyF+ye9Zx9A8nS8Vb+TJ6AY
vmBTH1gARmMVXZwbjLcTfRv4M++DG7WTO9jS5MaKltc2lrVoSXZR1RF5ZMGu/G2F
BPuR1tB59uF7D9HIze/nR52DV84PllTHi4T1ZvK3sO9apIWGdM1vcWCnF4L63V4U
gZdz09cza97+0w==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:43:41 2026 by rpki-client