Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
File: sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft (raw, json)
Hash identifier: WBKNPt+94QNUQIWHNGGJWb6o1ZGQMj3pUCX/Am+yers=
Subject key identifier: B1:08:37:DF:0C:02:81:C6:51:67:87:0B:6C:6C:34:EC:E5:11:8D:D4
Authority key identifier: B1:76:8F:0A:8D:1E:D1:17:3E:CE:DC:68:9C:17:7B:24:9E:E3:A6:8C
Certificate issuer: /CN=b1768f0a8d1ed1173ecedc689c177b249ee3a68c
Certificate serial: 019E1F11023A499E584250C473532E236A9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
Manifest number: 026C
Signing time: Wed 13 May 2026 02:01:08 +0000
Manifest this update: Wed 13 May 2026 02:01:08 +0000
Manifest next update: Thu 14 May 2026 02:01:08 +0000
Files and hashes: 1: Evg5E-8VSXY1dFWe0dsHFW-O_Jo.roa (hash: Icoysq39tLxqHCpP3ABhw3yUgnv4HKO+EMDypdb4KPE=)
2: r-GapXK3JuL-T7M03ZC61uSVfyE.roa (hash: AG5Eg1DYw6Qc5ggeZMDpUWKtb6RLHqA8/H20Z17wo7s=)
3: sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl (hash: w3xCCseYdrda3nWiWeC1USj2Sc/mxaAgAqxs+CEYCnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:02:3a:49:9e:58:42:50:c4:73:53:2e:23:6a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1768f0a8d1ed1173ecedc689c177b249ee3a68c
Validity
Not Before: May 13 02:01:08 2026 GMT
Not After : May 14 02:01:08 2026 GMT
Subject: CN=b10837df0c0281c65167870b6c6c34ece5118dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5d:a9:b3:35:3c:34:dd:b6:19:ae:65:8e:f1:
db:ce:b5:dd:67:3b:a3:86:af:75:51:df:3a:d3:5a:
1a:2f:d5:7d:1f:ab:65:ed:7a:5b:85:6b:31:0b:f7:
d6:e5:05:98:5e:f4:8c:e5:35:a6:a9:2d:90:78:4b:
5e:5f:7f:37:b1:14:13:64:23:6f:eb:f7:49:4f:50:
16:76:e8:ba:5d:f5:7d:0e:a8:d0:50:5a:4d:45:23:
f2:42:8a:2c:b4:b8:4d:9a:0b:2b:c8:9e:35:f1:a2:
11:ba:27:63:3e:b3:7a:d5:7a:0d:b4:35:37:c8:24:
0b:39:18:7f:02:1e:74:93:c2:34:47:d7:0b:db:23:
2f:e1:27:3b:79:0f:59:1a:31:72:94:a1:1c:5f:8a:
d5:8c:c5:db:3c:2c:8b:6b:63:12:2b:1b:b9:dd:5c:
50:b1:e1:50:b2:b0:5f:ac:41:3b:fe:c2:81:6c:c4:
1f:bd:5d:7e:96:2f:b6:6e:9b:51:41:32:14:53:98:
93:73:63:b1:ca:ec:fa:b6:60:ed:3e:ba:6a:4b:81:
a9:e7:38:c3:ba:55:4d:06:08:e0:33:55:0b:88:63:
d6:de:ac:66:6c:1e:29:0b:6e:94:9e:7e:0c:0f:1a:
4a:eb:a9:8a:96:bc:0a:fb:88:7d:88:9f:7e:dd:c0:
df:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:08:37:DF:0C:02:81:C6:51:67:87:0B:6C:6C:34:EC:E5:11:8D:D4
X509v3 Authority Key Identifier:
keyid:B1:76:8F:0A:8D:1E:D1:17:3E:CE:DC:68:9C:17:7B:24:9E:E3:A6:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c5:69:c0:08:97:ba:9a:dd:d4:b1:cd:af:89:32:73:ff:4f:
69:d3:0b:64:44:d9:89:97:b0:87:df:21:d2:43:ca:65:b2:1a:
b9:5e:68:60:34:a9:0a:e9:a3:6b:c9:7a:ea:fb:b2:1f:b6:49:
11:e2:84:a9:e1:12:03:76:65:ec:37:ab:c1:eb:1b:81:f8:7b:
20:b8:f7:01:90:41:e8:4a:75:00:43:1c:ee:65:23:f6:4f:82:
7c:c0:02:be:ea:7d:5e:75:f9:b8:5b:45:85:5a:d6:cf:48:07:
8a:02:b8:50:70:80:2b:c5:c7:7b:70:18:b4:64:96:5c:88:b7:
8e:f7:93:f1:63:26:98:3b:de:cb:cf:76:7a:a3:c7:ef:6e:9f:
f9:86:53:fc:e5:05:73:75:8e:39:7a:89:45:f0:63:41:5a:bf:
97:66:70:0d:a2:e4:d8:32:2e:77:15:39:bd:a9:ac:4c:d2:9e:
51:2f:76:07:3f:ee:b4:93:6c:1d:20:5b:5e:f2:a8:04:84:99:
11:1c:bf:fd:2e:db:af:3c:94:14:b3:94:77:b7:3e:6c:10:3f:
57:18:7f:87:66:e6:f2:c6:cd:fb:06:c4:7a:3e:55:55:87:f6:
2a:ea:7c:b5:4c:ea:3d:93:7c:b5:16:aa:52:40:85:90:b4:4e:
e2:2b:6f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:04:05 2026 by rpki-client