Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
File: sxk4vHICgkRLq9OyazSStFats5c.mft (raw, json)
Hash identifier: b8Axyv0PQzcBsENlTbivowH3egqClp68ntpw3qHGxSg=
Subject key identifier: 96:87:ED:C0:FE:32:90:3C:A6:B0:69:C5:74:26:F5:3D:21:11:DE:67
Authority key identifier: B3:19:38:BC:72:02:82:44:4B:AB:D3:B2:6B:34:92:B4:56:AD:B3:97
Certificate issuer: /CN=b31938bc720282444babd3b26b3492b456adb397
Certificate serial: 019F94A52FBC4A5CDCB7A451218BF45DF738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
Manifest number: 0CE7
Signing time: Fri 24 Jul 2026 15:01:21 +0000
Manifest this update: Fri 24 Jul 2026 15:01:21 +0000
Manifest next update: Sat 25 Jul 2026 15:01:21 +0000
Files and hashes: 1: eaw_KDLii_O0OZBia4ceyJvvRgg.roa (hash: 785x1F9Iz8gQQoHICXoHX9Lh+Vh5PnxM3BQ0Ya5+hPc=)
2: sxk4vHICgkRLq9OyazSStFats5c.crl (hash: Vjb/xhyfsJMX1RsZzCHrmNHkw1VdkPlCZnWPmaU4jrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a5:2f:bc:4a:5c:dc:b7:a4:51:21:8b:f4:5d:f7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31938bc720282444babd3b26b3492b456adb397
Validity
Not Before: Jul 24 15:01:21 2026 GMT
Not After : Jul 25 15:01:21 2026 GMT
Subject: CN=9687edc0fe32903ca6b069c57426f53d2111de67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9d:2d:5b:a7:1c:ee:e3:7a:08:3c:a3:d8:2a:
2f:c5:eb:b3:76:a7:31:67:a5:3c:06:66:c8:eb:1f:
bd:50:1d:4f:56:11:3a:a7:91:77:b7:e2:77:c6:0f:
52:c8:1d:2b:4d:a8:13:80:17:5a:86:5d:67:8d:f8:
a7:ee:30:c8:36:57:a8:31:af:7a:8e:4b:0b:aa:3c:
d4:96:95:ac:50:b5:18:ce:44:e6:92:0a:7e:bb:b3:
97:d2:21:10:83:e6:a7:ae:4f:34:dd:a9:ed:19:7b:
99:66:93:c7:46:12:cb:ea:13:48:bc:ce:ab:34:1a:
ec:f8:8f:79:63:bc:c7:73:7b:6f:38:44:d8:0f:bf:
42:9d:56:ea:4c:14:c8:e6:a6:84:67:3b:e6:2f:db:
d7:3e:de:f0:54:6b:15:b8:21:31:1d:b0:1e:6a:0c:
c9:27:19:e4:81:93:57:7f:64:99:ea:bd:8b:90:95:
b6:65:62:d9:f8:9c:05:25:37:3f:67:9d:18:3a:53:
27:52:b3:8c:b0:89:89:e3:5a:02:4f:ac:56:6b:2a:
01:d9:7d:c7:b2:32:66:38:49:50:c0:d2:f9:fb:78:
25:87:c1:ce:27:80:5b:57:74:2d:ba:e2:f0:57:59:
05:5b:01:f4:9c:2c:d1:39:0f:9d:3c:4c:3e:80:82:
34:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:87:ED:C0:FE:32:90:3C:A6:B0:69:C5:74:26:F5:3D:21:11:DE:67
X509v3 Authority Key Identifier:
keyid:B3:19:38:BC:72:02:82:44:4B:AB:D3:B2:6B:34:92:B4:56:AD:B3:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ca:b0:59:e9:54:26:c3:af:51:f1:3f:1d:27:3d:28:c4:4f:
25:ab:b5:45:28:73:d8:5e:e1:c5:4a:f6:a4:a4:f9:57:2a:ec:
25:0c:09:26:69:41:25:04:39:43:2f:fa:0c:51:ef:ac:2f:eb:
ec:7b:4c:40:5f:d0:ad:f9:aa:90:73:31:10:5a:74:e7:f4:79:
46:79:c4:58:e4:89:2d:fa:39:78:5b:c5:4c:63:a0:6d:b2:e6:
4d:f2:8e:a1:01:da:48:4d:cd:79:af:66:36:02:81:4b:99:28:
ca:53:6d:a2:5d:2f:c6:9b:0f:78:00:b3:5f:fc:f2:a3:41:e6:
3a:5c:dc:6b:bc:c6:43:8a:a4:28:d4:74:af:ee:17:07:95:d0:
b9:bd:24:cf:fc:94:78:52:d7:a3:28:8d:2b:53:14:d2:34:b6:
b3:c9:95:d1:3e:67:09:14:2e:8f:25:3f:79:10:d6:e4:d9:ed:
a6:24:81:13:02:31:aa:f0:b2:19:d6:37:d3:80:c4:0f:b3:32:
55:ab:e1:c0:16:70:34:25:0b:9a:50:7f:a5:a4:e0:60:d2:0a:
a4:5d:68:2f:41:a5:6f:ff:da:62:bd:8b:9f:87:84:ab:3f:b7:
ff:07:ee:d9:cb:79:0b:a7:68:6d:e3:10:8d:77:13:35:35:5b:
87:02:4a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:04:09 2026 by rpki-client