Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
File: _SxsGlV_WItkfheRGmMA40LGYes.mft (raw, json)
Hash identifier: sh7ti8BWOp/nA60De19pGVRynaptCEL58WFpcnv1ePs=
Subject key identifier: A9:A9:90:56:B8:DA:59:38:07:D8:F0:39:FD:0A:6B:BC:BA:58:23:EA
Authority key identifier: FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
Certificate issuer: /CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Certificate serial: 019D284DB33A6E28173D2DD24109DF2A808D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
Manifest number: 0FBB
Signing time: Thu 26 Mar 2026 04:01:13 +0000
Manifest this update: Thu 26 Mar 2026 04:01:13 +0000
Manifest next update: Fri 27 Mar 2026 04:01:13 +0000
Files and hashes: 1: _SxsGlV_WItkfheRGmMA40LGYes.crl (hash: 0EWQaCefJR9ITZXdKNB2wTABXz5TAQVg3dlx7l7CU64=)
2: ybz_LJxmvXeX0zTpU2lRHbVV5as.roa (hash: s/QbbRettUJpmi4/wPM4zY/mnziqrGPExrreuVQcjVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:b3:3a:6e:28:17:3d:2d:d2:41:09:df:2a:80:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Validity
Not Before: Mar 26 04:01:13 2026 GMT
Not After : Mar 27 04:01:13 2026 GMT
Subject: CN=a9a99056b8da593807d8f039fd0a6bbcba5823ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:2a:5c:38:ad:0a:93:fd:4f:a1:e7:26:9e:92:
4a:1b:e9:97:a3:24:ff:d8:43:4e:8d:7f:12:89:f6:
b7:19:97:e8:85:99:f0:84:0d:e8:8a:da:ae:69:ce:
a5:f5:ed:ca:dd:fa:19:ce:2f:98:47:ee:ab:4b:b4:
a8:09:bd:43:57:e7:65:d1:b8:61:c5:cc:4c:b1:01:
8c:9d:62:82:34:c8:07:07:d2:b1:7f:71:b9:b3:4f:
9f:30:18:f2:af:ef:5c:b6:a4:b4:21:b3:72:7d:a6:
aa:f0:36:0c:3c:5d:87:67:fa:2f:3c:82:17:49:c5:
93:62:f5:da:49:50:e3:49:52:96:01:0b:f7:dd:75:
87:0b:4c:29:fd:33:2a:fb:04:97:e2:e2:03:6d:5a:
7d:4c:f5:3e:35:a3:1a:19:f2:44:ee:66:b0:b9:10:
29:bc:c3:44:8c:05:96:f8:e3:eb:aa:0e:af:09:9a:
f3:0c:d6:cd:9d:ad:a3:e6:24:13:20:88:27:38:25:
b0:c8:0b:75:67:5f:17:3b:a6:85:2a:8a:47:2c:27:
91:d1:e2:22:1b:5f:47:93:fa:51:34:6c:d9:4a:48:
2a:15:e7:78:5b:08:37:17:df:82:96:21:df:8f:a8:
d2:83:04:18:29:59:ee:87:69:9a:74:a0:91:74:ae:
71:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A9:90:56:B8:DA:59:38:07:D8:F0:39:FD:0A:6B:BC:BA:58:23:EA
X509v3 Authority Key Identifier:
keyid:FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:d9:b2:6f:b7:73:30:1e:bf:e1:5a:39:55:d5:dc:1a:c9:8a:
dd:a9:ea:80:87:40:eb:5e:37:1b:c1:79:8e:75:34:a4:d2:90:
17:ef:cf:46:ea:0e:0a:8b:37:27:7c:26:a7:b2:8e:78:6b:d7:
33:4f:11:3c:fd:ea:4e:2a:b4:30:47:b7:c4:63:6b:48:02:2c:
3a:a3:d1:1a:11:5e:ec:38:68:71:e4:91:fc:c2:f1:9a:ba:06:
8a:a8:13:37:ed:3a:d0:62:12:13:a7:74:cf:74:d2:a8:9c:c0:
39:4f:98:22:ec:b6:1e:6c:df:eb:c3:b3:b2:f5:15:0b:c8:0d:
33:07:63:a1:ef:7d:74:b6:7a:f7:d8:d3:42:09:c4:13:16:60:
26:93:b7:d2:3e:e2:d1:77:5a:f8:9e:f9:00:8d:12:d8:8e:12:
40:f4:3e:fe:47:99:69:94:f4:4e:a3:32:99:30:b7:d6:b4:36:
7b:64:bf:80:e8:9e:09:26:a0:5f:bc:e3:e1:34:bc:76:d0:7d:
a7:1c:44:6d:40:13:14:a2:53:a2:a9:bd:92:68:54:c1:6c:e8:
2e:ba:76:57:52:af:b2:1f:73:61:e2:6e:6c:8e:ad:18:bd:2b:
bd:6b:21:21:c6:45:09:d5:a7:a2:22:36:02:2d:19:08:e8:ee:
b4:9a:ea:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTbM6bigXPS3SQQnfKoCNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMmM2YzFhNTU3ZjU4OGI2NDdlMTc5MTFhNjMwMGUzNDJj
NjYxZWIwHhcNMjYwMzI2MDQwMTEzWhcNMjYwMzI3MDQwMTEzWjAzMTEwLwYDVQQD
EyhhOWE5OTA1NmI4ZGE1OTM4MDdkOGYwMzlmZDBhNmJiY2JhNTgyM2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+ipcOK0Kk/1PoecmnpJKG+mXoyT/
2ENOjX8Sifa3GZfohZnwhA3oitquac6l9e3K3foZzi+YR+6rS7SoCb1DV+dl0bhh
xcxMsQGMnWKCNMgHB9Kxf3G5s0+fMBjyr+9ctqS0IbNyfaaq8DYMPF2HZ/ovPIIX
ScWTYvXaSVDjSVKWAQv33XWHC0wp/TMq+wSX4uIDbVp9TPU+NaMaGfJE7mawuRAp
vMNEjAWW+OPrqg6vCZrzDNbNna2j5iQTIIgnOCWwyAt1Z18XO6aFKopHLCeR0eIi
G19Hk/pRNGzZSkgqFed4Wwg3F9+CliHfj6jSgwQYKVnuh2madKCRdK5xUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmpkFa42lk4B9jwOf0Ka7y6WCPqMB8GA1UdIwQY
MBaAFP0sbBpVf1iLZH4XkRpjAONCxmHrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1N4c0dsVl9XSXRrZmhlUkdtTUE0MExHWWVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82YTNmNmUtMmQ0My00ZWM2LWE3ZWMt
ZTEzZGViNGFjN2I3LzEvX1N4c0dsVl9XSXRrZmhlUkdtTUE0MExHWWVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS82YTNmNmUtMmQ0My00ZWM2LWE3ZWMtZTEzZGViNGFjN2I3
LzEvX1N4c0dsVl9XSXRrZmhlUkdtTUE0MExHWWVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl9myb7dz
MB6/4Vo5VdXcGsmK3anqgIdA6143G8F5jnU0pNKQF+/PRuoOCos3J3wmp7KOeGvX
M08RPP3qTiq0MEe3xGNrSAIsOqPRGhFe7DhoceSR/MLxmroGiqgTN+060GISE6d0
z3TSqJzAOU+YIuy2Hmzf68OzsvUVC8gNMwdjoe99dLZ699jTQgnEExZgJpO30j7i
0Xda+J75AI0S2I4SQPQ+/keZaZT0TqMymTC31rQ2e2S/gOieCSagX7zj4TS8dtB9
pxxEbUATFKJToqm9kmhUwWzoLrp2V1Kvsh9zYeJubI6tGL0rvWshIcZFCdWnoiI2
Ai0ZCOjutJrqhA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:14:48 2026 by rpki-client