Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
File: _SxsGlV_WItkfheRGmMA40LGYes.mft (raw, json)
Hash identifier: bL96AXj/BQFvfLfjH/dG5Rlz6WGppYfptvL3oAQccfE=
Subject key identifier: 31:8F:2F:61:A4:29:66:0B:1F:B3:B3:2D:69:AF:08:E7:2D:E7:A1:F7
Authority key identifier: FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
Certificate issuer: /CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Certificate serial: 01A0D0EDD75239C7098E313ECE674D3CB4DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
Manifest number: 11A0
Signing time: Thu 24 Sep 2026 01:00:43 +0000
Manifest this update: Thu 24 Sep 2026 01:00:43 +0000
Manifest next update: Fri 25 Sep 2026 01:00:43 +0000
Files and hashes: 1: _SxsGlV_WItkfheRGmMA40LGYes.crl (hash: j85aQrNhGUiKzBgEgJOL33WRWNdMmGwauck/M85w/1U=)
2: ybz_LJxmvXeX0zTpU2lRHbVV5as.roa (hash: s/QbbRettUJpmi4/wPM4zY/mnziqrGPExrreuVQcjVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:d7:52:39:c7:09:8e:31:3e:ce:67:4d:3c:b4:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Validity
Not Before: Sep 24 01:00:43 2026 GMT
Not After : Sep 25 01:00:43 2026 GMT
Subject: CN=318f2f61a429660b1fb3b32d69af08e72de7a1f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f6:a2:2d:76:23:b8:df:2c:6f:10:ad:a7:4d:
b2:21:b3:03:ae:ae:b1:a8:aa:28:c8:cc:19:a4:84:
fe:8e:0c:40:72:65:d3:ea:30:d9:33:b0:bd:97:2c:
2b:d9:5c:df:19:f1:4a:c9:20:b8:ae:f8:e8:84:a4:
81:ac:2b:7a:63:04:a7:96:2c:59:88:88:25:58:69:
2e:5d:e5:48:c3:0d:31:2f:62:bd:c5:79:3d:0f:c2:
5a:1c:5b:98:1d:9e:f4:85:9c:45:7a:d8:87:2a:be:
99:cc:b5:bd:66:ff:9b:e2:0f:5d:35:a8:f7:04:87:
d3:07:3b:26:f7:ff:50:f7:bc:24:72:93:28:a6:fa:
ef:0e:2d:f8:52:b1:e5:04:36:e6:99:17:9b:b3:4c:
51:b4:ac:4e:98:7b:b0:ec:07:38:0b:06:92:b2:bf:
fe:08:3d:41:27:b5:d3:4c:8d:0a:ac:b1:79:78:e4:
f8:86:dd:95:ea:f3:f4:a6:b3:16:db:eb:21:20:94:
11:23:a5:18:86:ff:ae:74:cf:22:d5:cd:76:aa:09:
ac:56:0e:49:f9:88:cc:e7:bc:32:15:dc:91:d3:e0:
5c:77:5b:4b:2c:85:64:34:d5:e0:53:86:ed:1d:c7:
b2:e2:9c:a0:57:f9:95:9c:46:63:c7:11:cc:83:16:
6c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8F:2F:61:A4:29:66:0B:1F:B3:B3:2D:69:AF:08:E7:2D:E7:A1:F7
X509v3 Authority Key Identifier:
keyid:FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:6b:d6:e8:7b:c7:e3:a3:ab:bd:4a:d1:4e:ea:51:11:27:6b:
7e:3d:8e:54:9c:18:7b:4c:da:36:f1:90:16:bb:5d:d1:a8:58:
00:84:09:a3:97:ae:25:30:1c:1e:e0:71:1b:fe:38:dc:24:96:
a8:c1:bb:6c:e9:11:8a:fc:23:04:44:82:06:a8:68:9d:57:11:
d9:49:84:d3:e2:f4:28:05:55:92:c7:a4:29:0f:35:3f:12:a0:
e1:1b:21:b0:dc:6d:d1:19:1f:94:36:fd:68:58:c6:eb:91:c7:
1e:e0:c3:06:57:8d:12:c5:da:cf:b9:74:1b:7d:49:e3:98:a7:
7e:2c:cf:e1:d0:fc:c7:cf:c0:72:5e:f5:66:76:5c:52:3c:f8:
a8:4c:57:8f:94:f1:28:73:cb:2a:0c:6a:b1:a9:99:44:c6:40:
03:fb:f0:70:d6:4d:74:64:85:1c:17:6f:f0:d0:3c:14:8a:d5:
15:b5:17:11:2d:86:8e:a1:3d:ea:2b:f7:c5:ca:09:c9:41:cc:
a5:d6:d1:08:65:0a:60:fd:ea:87:2f:7c:41:f1:0b:f0:0e:5c:
27:56:f8:37:97:7f:41:ad:2a:97:8b:5e:85:48:eb:3d:1f:87:
bf:7a:b0:58:5f:4a:a1:71:b0:a0:54:52:04:c5:d6:de:af:c0:
f1:a6:ee:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:23:47 2026 by rpki-client