Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft
File: sXQMTAefLR3uhUOfgngbm651apU.mft (raw, json)
Hash identifier: XUCGkylBNINhiINfmyKgxKgcjCSAhMAivLaCZ7yM6U0=
Subject key identifier: C5:CE:13:0C:79:47:2D:30:ED:7B:05:31:83:00:60:C3:AC:8E:86:D9
Authority key identifier: B1:74:0C:4C:07:9F:2D:1D:EE:85:43:9F:82:78:1B:9B:AE:75:6A:95
Certificate issuer: /CN=b1740c4c079f2d1dee85439f82781b9bae756a95
Certificate serial: 019D28BB7B31836E244C525FCB8EC4132581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft
Manifest number: 14D4
Signing time: Thu 26 Mar 2026 06:01:08 +0000
Manifest this update: Thu 26 Mar 2026 06:01:08 +0000
Manifest next update: Fri 27 Mar 2026 06:01:08 +0000
Files and hashes: 1: k2NLRoGGs_1_tPLBpVuQ2tQaPX8.roa (hash: 7U/P0XBJOG36kibHl1+nAbvsI31pDTNTQ+rTrF6SsdE=)
2: kfGT7rmG_b7NtjrIHfozveynidI.roa (hash: fvmGEPse0L5/dDUx9Eg53Q73vcZQitS7udRiA39FkwA=)
3: sXQMTAefLR3uhUOfgngbm651apU.crl (hash: bxdUKNtkvRv5GabMy7uPTHNE2eqBKRrbcEchtSetEuU=)
4: yS_lGMVX6IuAVI6W1sAw8zbKOfs.roa (hash: xRXUXVbiVTSPwLv7pVaMbiKs2q5E3HgTW6OSYD6dOfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:7b:31:83:6e:24:4c:52:5f:cb:8e:c4:13:25:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1740c4c079f2d1dee85439f82781b9bae756a95
Validity
Not Before: Mar 26 06:01:08 2026 GMT
Not After : Mar 27 06:01:08 2026 GMT
Subject: CN=c5ce130c79472d30ed7b0531830060c3ac8e86d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9e:3a:a8:d8:7c:24:8c:c9:78:2d:10:c5:33:
fb:df:ea:60:54:af:a7:77:63:83:e5:ce:85:d6:46:
d1:4b:7f:7d:bf:54:f7:06:65:98:fa:fb:f5:c3:92:
3f:17:af:b3:0b:8c:e6:53:7d:71:c8:19:cb:bc:22:
8a:b0:b8:9f:05:8c:42:76:b2:53:ce:3e:14:30:b1:
cb:db:64:fd:92:b7:85:81:12:c9:c5:40:31:80:ce:
5b:7b:e7:87:1e:af:94:f6:d0:5c:d4:13:aa:95:3e:
81:c9:0b:a1:96:24:1b:a3:54:e4:aa:14:15:14:69:
04:aa:9f:1e:68:6f:d7:77:1b:54:5b:08:37:36:b0:
43:ee:18:75:94:c1:ce:26:6e:8b:31:14:b3:29:e0:
e8:78:c8:63:91:0d:3d:98:da:89:65:a2:c2:11:2a:
55:b6:51:20:fe:4f:7b:9b:98:92:3e:53:ab:2d:b8:
53:d2:55:da:57:5b:28:80:ca:9b:c1:4e:24:f8:75:
8d:da:23:b7:ce:20:77:6b:83:c2:58:89:21:f8:af:
77:e9:e6:f7:6c:16:a1:05:61:69:0f:72:39:a7:9b:
5b:e7:41:7d:f7:12:04:8a:c3:fd:1f:3b:c9:18:c3:
9a:fd:67:8a:ee:a5:24:10:27:90:2a:f0:54:ec:98:
92:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CE:13:0C:79:47:2D:30:ED:7B:05:31:83:00:60:C3:AC:8E:86:D9
X509v3 Authority Key Identifier:
keyid:B1:74:0C:4C:07:9F:2D:1D:EE:85:43:9F:82:78:1B:9B:AE:75:6A:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d7:34:80:94:26:f3:44:f5:f8:a9:04:f9:54:f4:f6:40:ad:
46:5b:1a:8c:f0:f8:99:6d:61:67:2c:3c:70:c5:7e:62:ca:a9:
35:76:81:75:a2:e8:64:52:84:3b:9b:21:d1:d4:97:d3:62:db:
b0:29:eb:ac:c3:c8:05:82:cf:8c:a9:2c:68:29:b4:35:12:e3:
04:11:2f:3c:85:e6:94:93:48:c8:5f:0a:f3:7e:1b:7b:a0:a9:
f2:b1:66:30:e5:4e:71:d5:e9:c7:1a:7e:67:76:54:f3:fb:81:
f5:42:3f:5b:46:27:81:c9:20:bb:b1:60:e3:3b:8c:17:cf:c8:
fc:21:09:59:85:cf:3b:4f:ad:6c:ab:73:6e:6b:45:a4:28:3a:
46:7d:be:9d:38:d4:7b:c5:b7:14:70:5c:84:10:5e:92:55:57:
cc:8f:9e:22:9f:cc:96:d3:5c:d3:78:7a:78:09:82:68:28:7e:
d4:37:b8:02:d3:84:47:9a:c3:d8:cf:c7:e6:ef:55:ef:08:b0:
42:41:45:b4:88:3d:a1:a8:3a:bb:ad:27:87:4a:6d:29:e1:e8:
b3:b3:d9:86:b2:4b:6b:04:9f:2b:2c:df:08:ea:3b:54:55:3b:
4c:81:e1:59:1c:6c:b4:37:73:d9:c4:ca:90:01:76:bb:67:8c:
23:39:8b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:59 2026 by rpki-client