Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft
File: SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft (raw, json)
Hash identifier: a5xFu1rU5c2jMGOkBW1XdXolzua3GA1QH9NvQyvsqFc=
Subject key identifier: 69:04:A9:60:4D:8D:7D:C3:72:72:57:C4:E0:2D:D5:73:D4:44:8D:32
Authority key identifier: 4B:1C:DC:B9:0B:98:32:01:67:48:A7:E2:68:CC:1E:FF:23:92:62:F8
Certificate issuer: /CN=4b1cdcb90b9832016748a7e268cc1eff239262f8
Certificate serial: 019D28F2423B94807C96BBECE9F3EAC7EC12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft
Manifest number: 15C4
Signing time: Thu 26 Mar 2026 07:00:58 +0000
Manifest this update: Thu 26 Mar 2026 07:00:58 +0000
Manifest next update: Fri 27 Mar 2026 07:00:58 +0000
Files and hashes: 1: HVNyPpshDup5-VV20Zvos0kqjfw.roa (hash: feauyuxnsf6ozUYlBnDdKhJOIjOdxAMV8HCT2qzKw9w=)
2: SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl (hash: 94D9KgsA44MNx25mk7/NvuvGLFk57KQ3RyJYJgvLObg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:42:3b:94:80:7c:96:bb:ec:e9:f3:ea:c7:ec:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b1cdcb90b9832016748a7e268cc1eff239262f8
Validity
Not Before: Mar 26 07:00:58 2026 GMT
Not After : Mar 27 07:00:58 2026 GMT
Subject: CN=6904a9604d8d7dc3727257c4e02dd573d4448d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f6:6d:ec:32:c5:b7:b0:5e:b1:71:a9:77:a3:
2b:9c:ad:9f:9f:52:a6:e0:e2:2f:6b:36:53:ac:3e:
01:e2:8e:03:81:b0:f1:cc:31:bd:82:f0:1a:fc:c5:
17:e9:35:fc:64:7b:1e:05:d5:cc:ad:c9:b9:3e:e7:
37:0c:21:b1:d6:a3:a0:d6:f6:14:9f:8c:13:ea:5d:
b8:23:21:5c:6a:c7:ea:29:9d:67:6b:9b:a9:95:cf:
ff:2a:a8:41:66:3a:c7:63:08:67:32:d9:c9:0a:d6:
5c:49:da:c7:d4:81:9d:8f:df:95:df:8d:f1:32:98:
51:06:79:76:9f:9c:38:84:0d:62:d6:27:97:26:62:
3f:35:a8:67:0f:b4:76:28:91:3c:23:7a:9e:87:7d:
19:fa:4f:b9:a9:62:86:c4:06:6a:d9:82:b5:54:c9:
c9:ea:51:31:9d:d3:81:57:fb:5e:44:b3:39:c8:ca:
09:27:21:16:de:64:81:94:a1:95:88:38:3f:b8:ff:
7c:59:43:0c:e2:3a:c6:51:0b:07:18:0a:39:ef:14:
d2:d7:52:bb:e6:44:6c:94:36:43:be:0c:6e:f3:9e:
87:8e:be:73:66:2e:13:47:39:f3:46:2a:02:f3:5a:
8c:0b:5c:e1:ad:c0:45:fe:36:ed:05:9a:f4:52:f2:
e2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:04:A9:60:4D:8D:7D:C3:72:72:57:C4:E0:2D:D5:73:D4:44:8D:32
X509v3 Authority Key Identifier:
keyid:4B:1C:DC:B9:0B:98:32:01:67:48:A7:E2:68:CC:1E:FF:23:92:62:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6f:16:4c:b7:5c:19:50:6c:68:fb:4e:7f:d5:fe:1b:9f:ed:
0d:5a:a7:5f:4f:a8:d5:6e:8b:62:5e:a9:9c:6e:dc:ab:17:b3:
4b:6b:0c:77:f7:e4:d3:3d:f9:29:cc:93:b3:39:3c:93:93:cb:
c9:12:3f:65:7d:d1:a1:7f:6a:18:b4:ff:69:0f:61:ef:aa:9a:
8c:1c:ea:07:7b:27:aa:bf:b3:da:41:e1:75:73:79:e8:f6:86:
05:19:d6:73:e6:0a:58:94:d0:89:46:1a:da:f0:a9:f8:ef:68:
9b:5c:22:d4:d3:28:8b:ef:1e:ef:69:46:8e:5b:ad:4a:ed:21:
f1:a3:fc:4d:dc:30:0f:36:1d:2d:81:1a:f7:9b:6e:21:57:a4:
b9:e5:c9:2b:32:ef:99:72:8d:73:50:44:8e:d0:76:80:d7:31:
0e:96:1a:aa:1a:8c:37:64:f8:f5:05:f0:ee:b0:a5:fa:f0:1e:
d0:e1:1a:62:57:3a:4a:c7:3d:9c:d5:a1:ed:4d:29:ee:d4:0a:
d3:a8:f6:cd:6b:61:e2:dc:ba:2c:4a:63:a1:26:2d:0f:cc:b5:
fb:32:e9:11:2b:50:2a:9a:6f:2e:d8:a6:9f:57:e6:84:6d:c0:
28:bd:3c:75:ca:a6:2d:23:ed:0d:6a:e2:de:1e:33:d9:f5:0e:
99:e0:2f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:31:21 2026 by rpki-client