Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
File: SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft (raw, json)
Hash identifier: eFYuPWZDQF2XMmhpX/37eVA9qRrbT58P6Vzg7IVB264=
Subject key identifier: 36:55:44:CF:A3:3E:EC:13:19:66:75:A3:3C:39:4D:FE:2E:35:5E:9C
Authority key identifier: 49:7E:DE:37:F2:9F:40:A7:1B:1C:B2:A5:FC:E5:26:E8:A3:D0:E5:E1
Certificate issuer: /CN=497ede37f29f40a71b1cb2a5fce526e8a3d0e5e1
Certificate serial: 01A0CDECAA122D9170A6AC8104F4C51A75FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
Manifest number: 0234
Signing time: Wed 23 Sep 2026 11:00:34 +0000
Manifest this update: Wed 23 Sep 2026 11:00:34 +0000
Manifest next update: Thu 24 Sep 2026 11:00:34 +0000
Files and hashes: 1: FsZqIeW01RfaEApHUES0cB5ebyI.roa (hash: VCT9mMAi/Cn+09fCPNJ/y3SBfVeioqWO5E+XzvEA3FA=)
2: KfCvlR8vu0qoz40NwG_o9ivr0L0.asa (hash: 28KOqwH8/su8P6T5Q9zLgm8jJkLHgtcR+NYZ8WhN7qk=)
3: SX7eN_KfQKcbHLKl_OUm6KPQ5eE.crl (hash: CzhrxRSpbI3DLohBHBfij3KWah6jQNHdXvFA7bSnvn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:aa:12:2d:91:70:a6:ac:81:04:f4:c5:1a:75:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=497ede37f29f40a71b1cb2a5fce526e8a3d0e5e1
Validity
Not Before: Sep 23 11:00:34 2026 GMT
Not After : Sep 24 11:00:34 2026 GMT
Subject: CN=365544cfa33eec13196675a33c394dfe2e355e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e8:96:8c:bb:ec:95:f3:90:ca:7e:f9:50:9d:
31:df:89:92:06:03:b2:a6:0e:46:f7:04:3e:2c:28:
45:cc:b7:bd:aa:45:a9:27:06:24:f1:55:ff:af:fc:
b4:a4:6f:81:b3:fd:d6:62:fd:82:91:a7:b6:6c:65:
4e:11:df:05:5c:6f:93:07:da:8e:1b:22:08:01:62:
62:16:a0:39:20:76:01:b4:22:2b:43:b8:91:fd:75:
88:b8:b3:4d:27:d9:98:8f:7c:fe:ca:da:22:63:8c:
66:46:56:fd:e3:93:66:6d:e4:6b:2e:91:e1:60:cf:
f2:8f:a8:6e:3c:02:b9:bb:99:3c:0c:df:14:8b:8c:
53:ab:b3:0d:ea:44:8e:4f:2e:d3:65:80:f7:9c:16:
d1:73:91:35:cd:09:1d:3a:b6:49:af:87:f3:3d:3a:
7a:f4:eb:00:8b:e8:a3:e3:89:3a:1f:93:78:76:06:
f7:66:eb:39:6d:2d:14:8b:db:e4:0e:f5:b6:c2:4c:
54:b1:42:fe:04:df:70:61:4d:fe:0c:94:03:e7:c3:
50:ab:78:89:e9:05:96:3f:b8:70:5c:1a:9f:a9:43:
86:a9:d8:e3:30:4a:df:72:62:4a:eb:80:54:6c:ad:
c7:a9:73:ab:19:73:06:c5:07:d4:49:2f:64:dc:87:
10:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:55:44:CF:A3:3E:EC:13:19:66:75:A3:3C:39:4D:FE:2E:35:5E:9C
X509v3 Authority Key Identifier:
keyid:49:7E:DE:37:F2:9F:40:A7:1B:1C:B2:A5:FC:E5:26:E8:A3:D0:E5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:38:e4:76:ad:67:ef:3c:70:13:ac:fb:d1:71:1b:22:3b:db:
dd:d4:bc:c4:85:a8:35:06:52:17:d3:29:69:f5:30:c5:11:d3:
b7:9e:53:1e:b3:d5:52:3e:f9:7d:3e:b2:64:8d:45:6c:29:74:
dd:ef:02:27:ef:ed:99:1e:d9:a1:35:ae:42:f8:00:ef:e0:88:
6b:f8:fc:17:07:d8:8b:9e:17:4b:9d:d3:df:8f:65:06:54:e7:
99:83:b8:50:c9:b1:a5:24:b2:74:1f:7b:08:65:72:05:bd:d9:
49:04:2c:c7:cc:57:65:e5:de:2f:60:75:fb:19:17:c8:98:56:
57:19:bc:a2:e8:95:6e:9c:c3:50:b6:d3:ef:3f:e4:f2:8a:55:
bd:52:d9:e8:e8:99:96:f8:0e:2c:c3:54:83:d3:85:34:ce:10:
35:3c:d3:9f:12:38:e9:4c:bf:b0:1f:3c:7a:4a:f8:25:5a:a9:
7b:d9:55:88:7e:2a:9e:1b:55:29:3e:ca:24:2d:80:8e:92:2e:
62:5d:43:c6:b9:34:c2:18:15:d2:bf:60:ad:6c:86:62:c4:06:
7c:06:1d:39:32:2b:94:65:60:58:e3:e8:50:da:d7:4b:73:48:
c5:d3:80:11:48:e3:64:5b:0c:9b:9c:12:6b:cf:52:72:84:77:
f2:33:18:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:26:43 2026 by rpki-client