Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
File: SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft (raw, json)
Hash identifier: pILfRhH9kR2qRl+CgbDRIgl8vULn7MhDjzbjjERTQLM=
Subject key identifier: 09:0B:00:19:CA:47:2D:8D:8E:FE:89:4C:AE:0F:42:74:97:56:8F:03
Authority key identifier: 4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB
Certificate issuer: /CN=4b1a238e043fe063a723b63159015393a64afceb
Certificate serial: 019D29619AC67164CD83ABC97B429B499370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
Manifest number: 07B3
Signing time: Thu 26 Mar 2026 09:02:35 +0000
Manifest this update: Thu 26 Mar 2026 09:02:35 +0000
Manifest next update: Fri 27 Mar 2026 09:02:35 +0000
Files and hashes: 1: L4GTgn9egBv7X8ozBy3W1tdX8eU.roa (hash: WLET1VlxTbzpa1IgY9ty4OjbAIQ5DWuzb+zM7ZHvhBc=)
2: SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl (hash: G6ICG/yKwwEMYQd1j1vugfq8NJdV8tiFgtGNyv/6aCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:9a:c6:71:64:cd:83:ab:c9:7b:42:9b:49:93:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b1a238e043fe063a723b63159015393a64afceb
Validity
Not Before: Mar 26 09:02:35 2026 GMT
Not After : Mar 27 09:02:35 2026 GMT
Subject: CN=090b0019ca472d8d8efe894cae0f427497568f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f3:0b:fd:53:0d:92:ba:89:21:41:5c:33:af:
e4:d9:af:f8:b6:21:f0:c5:f8:fe:51:21:6c:37:81:
a5:30:ca:4f:a8:2c:1c:5a:ee:9f:29:c8:d8:02:08:
76:17:93:38:8b:4c:31:fc:68:b8:2b:a5:c7:94:57:
5e:0f:5b:24:84:b5:2c:0b:92:ac:6d:22:ce:ec:ee:
cc:8e:b9:51:30:9e:5c:40:a0:88:83:2e:e5:ec:20:
13:9f:5e:0f:1f:18:db:8f:a0:b7:8b:5c:55:17:e0:
13:94:93:22:50:76:c7:55:f7:8e:c1:a7:9e:77:1f:
78:e1:5b:13:da:22:de:c6:7f:5f:6e:fe:91:8e:d3:
5b:ee:00:41:9a:25:48:92:59:a1:b6:42:87:8d:24:
c6:0e:17:f9:ea:2b:f6:58:03:cf:73:d9:a0:41:77:
c0:e6:2a:c5:b1:04:13:5a:fb:e1:20:57:c7:3a:5d:
6c:3e:7c:6a:9e:a9:27:54:6e:46:23:b9:c6:39:bc:
88:4d:1b:82:b6:27:85:52:41:76:fc:42:5d:03:04:
92:94:14:64:60:ed:03:f8:db:e3:c7:49:22:b9:1d:
30:67:0e:6f:7b:fb:ee:67:fd:13:fe:72:85:96:f0:
38:5b:74:11:67:64:bf:9c:6a:f8:e7:84:a1:2e:a9:
47:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0B:00:19:CA:47:2D:8D:8E:FE:89:4C:AE:0F:42:74:97:56:8F:03
X509v3 Authority Key Identifier:
keyid:4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:39:e9:54:24:34:3b:3b:7e:ea:cb:54:b7:a6:90:12:ce:b8:
ca:66:09:7d:b8:16:04:00:60:b7:54:05:c3:2d:e4:8c:f8:89:
a0:9b:3e:86:09:71:f2:9d:82:6b:aa:83:31:ff:e7:49:dd:d2:
38:d5:93:ce:ee:67:00:ce:8a:5a:e3:fd:cb:48:11:26:bc:4b:
43:9d:89:1b:54:02:9c:44:4a:f5:a5:de:de:b9:96:0f:88:f9:
0b:87:10:85:ac:4e:26:6e:d8:c1:63:c2:2e:bf:e1:a5:d5:4f:
71:94:de:38:b5:f4:f8:a9:27:19:32:75:7d:75:7b:da:ae:55:
4a:c9:af:dc:b0:9d:fd:81:b6:fa:0c:57:74:88:46:f4:0f:4f:
ec:31:86:c3:a9:10:be:d7:01:75:fd:e4:e8:b1:f9:93:e6:cc:
69:31:54:5d:14:57:2d:d3:84:50:29:c9:69:ad:d9:46:c7:e2:
a6:75:5a:f2:2c:4f:84:0a:db:96:17:40:c2:b7:4f:31:ee:dc:
0b:be:a8:2c:a7:02:95:ae:96:ca:c2:68:6b:24:0e:0a:60:59:
4b:ae:6f:54:46:a7:3a:d9:79:d3:a8:41:2b:16:53:a9:62:7f:
84:87:70:37:15:56:9d:68:95:80:30:7c:05:05:36:0c:89:f2:
88:43:b6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:04:28 2026 by rpki-client