Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
File: sx0cKJHYgEaaINi38Y5M2GVDAEY.mft (raw, json)
Hash identifier: AW3hKzMaiQ0QWRNHaTaTZP1Zi1eiNeE7A0BOCxbT7z8=
Subject key identifier: E5:C8:F3:B7:21:32:99:97:C8:E8:37:1A:C3:44:67:AE:F8:BB:1C:8F
Authority key identifier: B3:1D:1C:28:91:D8:80:46:9A:20:D8:B7:F1:8E:4C:D8:65:43:00:46
Certificate issuer: /CN=b31d1c2891d880469a20d8b7f18e4cd865430046
Certificate serial: 019D25F1964F680A71949E521995FE4EF4B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
Manifest number: 0568
Signing time: Wed 25 Mar 2026 17:01:22 +0000
Manifest this update: Wed 25 Mar 2026 17:01:22 +0000
Manifest next update: Thu 26 Mar 2026 17:01:22 +0000
Files and hashes: 1: nZ-MC578XDNoxF9WT_GxSRoreCI.roa (hash: P9N+z+cz6t9cJMJHuc2G7Ay4P8kV4Zg2jsXlf/jTUFo=)
2: sx0cKJHYgEaaINi38Y5M2GVDAEY.crl (hash: Nxdpm9AvzXIN4Wu+ZpBZgR/OPmTI/lOQ68iBmsnqbuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:96:4f:68:0a:71:94:9e:52:19:95:fe:4e:f4:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31d1c2891d880469a20d8b7f18e4cd865430046
Validity
Not Before: Mar 25 17:01:22 2026 GMT
Not After : Mar 26 17:01:22 2026 GMT
Subject: CN=e5c8f3b721329997c8e8371ac34467aef8bb1c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c3:94:cb:5a:19:f2:66:d5:a6:be:15:65:af:
d3:e1:11:07:7e:e3:e4:c2:10:8e:80:c9:be:16:27:
17:d3:bc:18:98:4f:fd:dc:e6:c9:a3:f4:b3:33:b1:
8a:c8:5d:7c:e2:17:4a:6e:c7:57:5c:8f:99:b9:45:
8a:3c:1c:41:1e:07:ea:e6:f2:ac:16:60:62:19:c8:
d0:f5:d4:c2:3d:5d:91:3b:9f:04:4e:88:84:29:86:
2a:4c:1e:ea:11:fd:d3:c2:be:8d:5a:8f:39:5f:30:
9b:e6:60:a8:c9:91:38:92:5a:4c:29:61:b6:4a:d2:
b9:ad:66:4e:9a:d8:b2:31:56:93:bc:09:09:b3:38:
04:d9:09:37:d9:fd:9d:ae:3e:d6:2c:fe:4d:19:0c:
3a:99:8c:9d:7f:24:d0:fd:7a:58:f2:0c:f9:06:75:
55:d7:77:10:bf:42:ad:c4:0b:b9:77:16:0e:9e:e0:
9d:cb:ec:45:6c:f9:c3:3d:fe:d3:e3:46:6f:5e:e2:
cd:92:2f:97:72:4f:9e:e1:b2:83:53:4a:dc:f0:86:
db:0e:f1:64:6e:86:13:c7:ec:b0:d7:71:b3:48:ff:
a8:1f:13:1f:f4:d7:99:41:d7:d1:db:da:59:76:b7:
16:0c:93:38:37:51:d5:b3:d3:6f:b9:cd:6f:68:62:
26:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C8:F3:B7:21:32:99:97:C8:E8:37:1A:C3:44:67:AE:F8:BB:1C:8F
X509v3 Authority Key Identifier:
keyid:B3:1D:1C:28:91:D8:80:46:9A:20:D8:B7:F1:8E:4C:D8:65:43:00:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:56:e9:ed:49:37:9f:10:33:9f:19:b3:30:0b:86:de:92:85:
78:59:22:23:6e:9c:49:bd:7d:28:39:8a:c4:53:49:42:0c:c5:
9a:87:a2:29:92:92:3d:d2:67:75:ba:cd:46:9a:aa:17:e2:76:
60:8e:5e:ac:e2:ec:46:37:72:fb:37:8d:f5:85:47:50:8f:60:
1d:7d:e1:71:d4:0a:9c:73:e0:ae:6c:a5:50:31:af:29:d0:01:
6b:5b:e7:93:d4:bb:d1:ed:ba:49:6f:6d:76:ce:f1:12:42:e6:
9c:65:dc:0a:81:60:23:f4:87:a5:ea:9d:a2:15:73:58:39:38:
1e:0b:54:c5:96:6e:98:50:f4:18:c4:14:1e:cb:96:00:81:46:
e7:1a:26:9f:1b:13:18:82:7a:d9:a2:ab:ad:c9:28:39:67:1f:
57:d4:da:e2:7d:30:12:e9:d7:2a:a8:fe:b7:ba:39:9e:21:56:
58:bb:38:8e:25:52:af:d8:e5:ab:81:6b:be:dd:37:1c:2c:4f:
40:c9:61:c9:4d:54:2d:eb:e5:69:d1:23:5a:75:71:1c:b6:04:
d9:9c:18:10:8c:65:5c:02:f2:9d:1d:a6:5b:57:99:e5:58:fa:
ad:72:8e:c8:39:2f:aa:79:da:8f:d8:ad:7f:f1:42:0e:44:96:
0c:b0:2a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:00 2026 by rpki-client