Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
File: sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft (raw, json)
Hash identifier: YYV3batiQGdQjoq+EOU8MOmu7ZGN12EfmijnigbnVRo=
Subject key identifier: ED:37:62:12:9C:44:A0:D4:FB:8C:30:3C:B7:AA:BE:F5:27:F0:E1:3E
Authority key identifier: B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34
Certificate issuer: /CN=b312db95dfc3b31395e0ecb5ff26212d798de834
Certificate serial: 01A1DE02A0110F2D1F750FC4E3AA23103442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
Manifest number: 189C
Signing time: Sun 15 Nov 2026 07:01:16 +0000
Manifest this update: Sun 15 Nov 2026 07:01:16 +0000
Manifest next update: Mon 16 Nov 2026 07:01:16 +0000
Files and hashes: 1: X8tdXJvU9JJe77PtcT-JDwBOQi8.roa (hash: tVoeTVft5vKlrmkaWfTVngTflVy/IwyLYYQaNJOX868=)
2: sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl (hash: zsS1g2Uat0/gBwA7LM/0SH166uwzoPqKWGGQCVCC+QQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:a0:11:0f:2d:1f:75:0f:c4:e3:aa:23:10:34:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b312db95dfc3b31395e0ecb5ff26212d798de834
Validity
Not Before: Nov 15 07:01:16 2026 GMT
Not After : Nov 16 07:01:16 2026 GMT
Subject: CN=ed3762129c44a0d4fb8c303cb7aabef527f0e13e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:04:75:59:01:d3:94:3a:95:c4:94:68:87:f0:
42:c8:3b:47:0c:f6:da:a3:07:78:33:51:3b:64:3d:
39:2a:41:ef:72:4e:e4:f2:3d:77:ac:4a:c1:b7:91:
11:23:78:66:76:fe:f6:bd:54:90:84:ad:23:4b:99:
ea:fc:d3:b6:cd:32:9f:db:e3:12:4e:e7:4d:02:9c:
6f:30:48:42:0a:55:ce:f8:76:6c:97:c8:6a:06:5e:
63:37:09:20:eb:60:5a:63:eb:07:23:4b:04:63:8f:
f2:61:e3:16:d9:d0:7c:4f:37:34:45:eb:06:9b:3c:
d5:23:6e:a9:a8:69:ec:1a:e3:0f:12:77:ca:21:2b:
27:93:bd:84:e9:01:66:20:d4:ee:1e:be:9c:9e:74:
57:7c:e2:2c:d5:49:6d:2b:6c:b4:05:96:1a:1a:fd:
8c:d9:48:49:88:83:3f:0a:83:5c:6e:6b:d9:7a:53:
97:cf:65:e4:96:be:46:15:48:10:dd:30:1c:22:15:
09:25:cf:b5:36:85:73:1e:66:20:fa:67:e9:83:bd:
37:56:cd:a5:ee:ad:ad:ba:25:e1:f6:2a:bb:7d:7f:
6d:40:1a:a3:70:38:c5:ab:e9:f1:a0:e0:76:a1:a3:
19:1f:8f:14:44:25:ef:7a:98:04:86:0a:b4:c3:df:
f2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:37:62:12:9C:44:A0:D4:FB:8C:30:3C:B7:AA:BE:F5:27:F0:E1:3E
X509v3 Authority Key Identifier:
keyid:B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:19:cd:e2:4d:ab:08:95:2a:70:88:d0:69:74:25:29:c0:b4:
7c:e2:a6:67:e1:d6:a2:2c:e6:af:0b:e0:8a:d1:18:99:b3:4b:
eb:cd:49:87:22:56:70:aa:f5:54:df:40:ae:c3:50:0e:a6:1a:
df:f3:7d:df:ab:2a:75:03:36:6e:f8:c5:8c:69:52:aa:c0:ed:
ab:e2:10:12:42:b9:59:c0:6c:ab:b4:82:53:fc:1e:8b:44:f4:
4b:bf:6d:03:6f:cf:3c:a1:71:bb:57:52:cd:64:9f:47:d3:65:
03:a2:4c:89:a1:b2:a7:ee:4a:d1:ea:ab:74:05:0e:cc:44:c5:
02:51:b0:b3:4b:a4:7d:0a:1b:2d:b1:af:d5:06:62:0f:72:65:
9b:2e:94:80:a4:f0:3e:7c:03:0b:ab:e6:26:a6:31:1e:a1:95:
0a:e5:26:33:91:69:a1:a6:9a:ac:69:7b:ee:61:8e:4d:ba:1d:
fc:62:e8:91:7e:a7:11:21:15:14:11:5e:9c:07:37:dd:fc:0a:
33:ca:4f:e3:42:ed:94:9b:02:52:bf:48:a2:70:05:2f:02:4f:
7b:00:76:36:c1:dd:00:d6:4b:57:93:6a:b0:1c:ce:23:7b:50:
e7:b2:71:b7:79:2b:45:de:5f:fb:3b:2d:35:d4:50:f6:df:58:
9d:ce:84:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:05:49 2026 by rpki-client