Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
File: _SxsGlV_WItkfheRGmMA40LGYes.mft (raw, json)
Hash identifier: PhM4/969+O7nDUY4VzK9yWn76Xt9avS8Y/GFzHNa/V0=
Subject key identifier: 22:EA:DE:68:CD:CB:9C:80:18:0F:68:7D:DD:7A:A8:56:91:31:52:FB
Authority key identifier: FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
Certificate issuer: /CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Certificate serial: 019F92489D49276C547A4D65C0EC984E8701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
Manifest number: 10FB
Signing time: Fri 24 Jul 2026 04:01:00 +0000
Manifest this update: Fri 24 Jul 2026 04:01:00 +0000
Manifest next update: Sat 25 Jul 2026 04:01:00 +0000
Files and hashes: 1: _SxsGlV_WItkfheRGmMA40LGYes.crl (hash: 6VepfoDK4+/NhGiOtSnSyJexk88es2or06aeJwoFrvI=)
2: ybz_LJxmvXeX0zTpU2lRHbVV5as.roa (hash: s/QbbRettUJpmi4/wPM4zY/mnziqrGPExrreuVQcjVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:9d:49:27:6c:54:7a:4d:65:c0:ec:98:4e:87:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Validity
Not Before: Jul 24 04:01:00 2026 GMT
Not After : Jul 25 04:01:00 2026 GMT
Subject: CN=22eade68cdcb9c80180f687ddd7aa856913152fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:19:57:cf:80:d4:fb:4d:9b:10:14:87:9c:8c:
fd:02:d2:07:f0:d9:a8:7c:f3:b7:00:44:db:42:e8:
9d:02:06:41:a5:03:88:de:ca:0e:4c:d0:c1:54:8a:
7a:f0:2b:37:a8:ac:e4:99:72:61:c7:f7:dc:64:d5:
f4:a4:86:ec:7c:21:69:6c:e9:a8:47:ff:61:c3:c2:
e6:5b:23:1c:d4:0e:86:11:f2:52:a9:29:23:44:5e:
12:70:d5:b9:c4:c0:df:6e:ca:5c:87:9a:3b:b3:86:
16:21:0b:63:cc:9d:85:e2:3d:20:5d:cd:3d:bf:cf:
77:41:4b:80:e4:f4:b9:f3:d5:39:65:88:d1:2f:d5:
76:31:ee:81:60:ae:8b:00:30:46:13:17:21:94:03:
2d:b2:f0:ce:16:28:d0:a2:5c:a8:15:01:15:70:40:
96:e2:3b:1e:ad:26:35:1d:dd:f7:58:08:b1:91:33:
f1:41:3e:61:70:71:2a:b6:b3:1b:dd:e4:de:98:39:
36:56:46:d8:6b:2d:77:bf:2f:fe:35:99:65:0e:f6:
18:47:87:15:6f:2a:e3:8c:75:22:0b:a5:82:bb:64:
fd:d9:81:89:ad:50:d1:bc:ec:67:df:52:55:ed:f8:
27:4b:79:6d:56:10:59:44:f3:08:a1:fb:8a:fa:25:
20:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:EA:DE:68:CD:CB:9C:80:18:0F:68:7D:DD:7A:A8:56:91:31:52:FB
X509v3 Authority Key Identifier:
keyid:FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b6:ba:9a:8a:e7:dd:95:4f:0b:d5:2f:c1:e2:63:ca:8c:f0:
e9:40:97:72:25:e9:27:fe:4b:4d:24:74:60:73:c5:8a:07:e6:
2c:e5:3c:e3:56:ab:69:df:a2:c4:92:42:9e:7f:e2:de:f2:49:
b5:80:b9:c2:90:66:58:9f:2a:9b:ee:12:57:45:43:00:9b:aa:
2b:aa:dd:d4:a2:0c:e5:61:02:74:0f:d1:e9:65:24:3f:8e:e9:
3f:d9:df:09:57:c4:83:87:9d:10:61:f1:a5:ee:06:5d:de:55:
61:d3:58:33:57:34:78:7a:cb:15:8f:f0:a7:f5:cb:e7:27:3b:
00:40:eb:e7:d7:f3:f7:53:4e:5c:88:1a:61:4a:e3:c4:a2:65:
d8:ad:f4:b4:10:12:71:a2:c6:a3:c5:21:53:db:96:ee:03:d0:
05:dd:9d:d9:c2:62:27:5e:eb:83:5d:b2:bd:bd:35:c0:ed:72:
f4:cb:d5:ba:79:b5:06:23:06:65:46:83:4d:c4:c3:63:8d:6c:
4c:91:89:14:a7:0e:87:4a:e6:bd:45:57:0e:fb:73:6c:b6:cf:
e4:7f:09:09:04:72:02:db:d6:78:aa:83:b1:02:7e:8a:83:99:
07:34:66:5c:53:fa:6b:c3:ef:19:3c:af:db:db:d7:18:64:f7:
33:b1:a0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:44:12 2026 by rpki-client