Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
File: _SxsGlV_WItkfheRGmMA40LGYes.mft (raw, json)
Hash identifier: URy4wZgUKjXcUqOp22STOkPYDxiPN8TFfUo0UF33bvM=
Subject key identifier: 86:D9:5C:44:6A:5C:DE:0B:19:D7:DA:E1:B4:F7:47:57:18:54:20:03
Authority key identifier: FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
Certificate issuer: /CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Certificate serial: 01A1DB6FE0C85E5EBB8F224C0E3401DF4B1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
Manifest number: 122A
Signing time: Sat 14 Nov 2026 19:01:44 +0000
Manifest this update: Sat 14 Nov 2026 19:01:44 +0000
Manifest next update: Sun 15 Nov 2026 19:01:44 +0000
Files and hashes: 1: _SxsGlV_WItkfheRGmMA40LGYes.crl (hash: PccA/3yHh2mGPS0BJSXZ7iA7u9Iy0MXokdiMOrSGIOg=)
2: ybz_LJxmvXeX0zTpU2lRHbVV5as.roa (hash: s/QbbRettUJpmi4/wPM4zY/mnziqrGPExrreuVQcjVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:6f:e0:c8:5e:5e:bb:8f:22:4c:0e:34:01:df:4b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Validity
Not Before: Nov 14 19:01:44 2026 GMT
Not After : Nov 15 19:01:44 2026 GMT
Subject: CN=86d95c446a5cde0b19d7dae1b4f7475718542003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:07:ff:14:e6:0e:58:80:a9:99:0e:9c:cd:33:
10:7e:58:a3:75:6d:bd:ae:84:48:af:42:db:da:60:
24:c3:0f:b9:b2:00:01:da:75:2d:9f:28:c2:8d:b3:
b5:e7:f4:6e:ab:fd:15:0b:25:7d:69:73:38:f6:ce:
f1:bb:38:98:cd:56:00:16:88:b1:4e:72:58:0a:89:
62:6b:f1:fc:e7:a3:19:1b:79:5f:db:2f:74:64:36:
92:9d:a3:84:d2:39:b3:53:b9:0a:82:6b:14:6a:86:
9c:b5:d8:81:25:a2:d7:1b:b0:a2:e2:db:3d:68:c2:
b8:ef:6a:7f:fd:db:62:20:f2:44:42:58:08:78:41:
c6:23:77:98:7d:3a:07:e8:f0:cb:ab:a8:2b:4d:51:
ee:ca:f6:60:8f:f4:b9:44:1b:33:6b:92:fc:89:bb:
c0:2f:c8:5c:ee:e0:bf:5f:a5:0d:2d:a5:95:2c:37:
47:72:9f:c5:3a:57:00:0e:9b:31:fb:d9:39:7d:27:
84:99:ee:6e:ef:7c:7a:86:3a:a4:d4:a5:ae:92:fb:
2e:e2:d6:52:5a:39:90:ca:23:3f:dd:28:d6:62:61:
44:e6:f8:8d:b6:5f:63:a6:28:5e:12:ae:43:5d:7b:
8b:03:ce:4c:22:8c:33:c3:05:a1:10:20:1b:97:0f:
02:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D9:5C:44:6A:5C:DE:0B:19:D7:DA:E1:B4:F7:47:57:18:54:20:03
X509v3 Authority Key Identifier:
keyid:FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ed:80:1f:7e:8f:1c:24:8f:1a:3f:d1:22:be:aa:4a:ee:84:
46:52:bf:22:33:6a:b8:8e:4a:99:00:ad:d6:d5:13:ca:ad:5d:
58:cd:59:70:41:5d:10:e8:6b:49:aa:7b:cf:34:51:00:f7:d7:
49:4e:dd:20:70:cc:dc:0a:e3:cd:b8:0b:98:59:e8:60:0f:18:
85:89:25:14:5f:68:01:8a:7c:88:f3:ee:d9:37:fb:d1:2d:83:
40:5c:fd:f2:4f:16:b9:61:17:e0:11:bc:bb:da:45:56:77:ed:
bd:43:89:18:54:1d:e8:9a:4e:01:43:2a:53:12:45:b4:2c:41:
59:f9:40:14:a3:d4:20:13:1e:dd:c9:3a:72:95:25:02:96:03:
6a:86:93:38:17:a0:38:e1:40:b8:af:fc:45:cf:4d:87:67:e9:
01:46:3a:f9:33:c8:db:a2:d6:9d:4c:fd:04:a8:de:d7:eb:f4:
1a:e3:16:42:11:d7:e2:a5:c3:3b:da:1f:42:1a:de:f3:b5:b7:
ae:49:79:67:4e:47:38:d0:35:03:ea:95:b0:af:39:4f:db:2a:
c2:13:cc:3a:da:47:d3:c8:e3:c3:6e:1c:e6:3a:5a:e6:3f:fb:
60:36:b9:63:f7:77:dd:27:b2:32:a2:f5:95:72:a5:65:3b:e7:
d1:29:88:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:37:06 2026 by rpki-client