Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
File: sxxM5mPh7CRedHzYRvGmnduDSzs.mft (raw, json)
Hash identifier: SUs+C1jzANHC7g+6pMKLw2Gp/sZgQwMRrZTC7la08tw=
Subject key identifier: D5:AB:F5:40:20:1F:EB:3A:13:84:85:7C:97:1E:69:3D:BD:37:99:AC
Authority key identifier: B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
Certificate issuer: /CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Certificate serial: 019E1D91215C140FAA9054C849A828E5509B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
Manifest number: 06FA
Signing time: Tue 12 May 2026 19:01:50 +0000
Manifest this update: Tue 12 May 2026 19:01:50 +0000
Manifest next update: Wed 13 May 2026 19:01:50 +0000
Files and hashes: 1: 9ab9SzC0OpWVbVEzFAJlY3uXcBE.roa (hash: Hwfx1OavP79t3IGKe+XxghvhkOaiLTfmmJfTNk5J5Tw=)
2: KV9d7BSlB2bKlwJY62KIXsG4Wz0.roa (hash: R5kvK926QqdFk8i2+ipQZcd5Ih9FO34LMPFzB8nRWl4=)
3: sxxM5mPh7CRedHzYRvGmnduDSzs.crl (hash: G8gs9sC2c2PAHQk4vYEOzFynEg/nMavzBVdYXxA8W0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:91:21:5c:14:0f:aa:90:54:c8:49:a8:28:e5:50:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Validity
Not Before: May 12 19:01:50 2026 GMT
Not After : May 13 19:01:50 2026 GMT
Subject: CN=d5abf540201feb3a1384857c971e693dbd3799ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ef:c5:9f:00:8f:a9:0f:65:40:62:fc:0b:e2:
a0:d1:8f:eb:55:04:c0:49:fe:ae:48:e7:3e:fa:b4:
82:d6:fd:31:d3:a9:a7:5b:dc:81:31:d9:1e:f3:ff:
dd:db:38:29:c4:df:44:8f:bf:38:83:f4:d3:78:40:
37:6d:ea:5a:e9:f4:82:a4:88:6c:aa:f2:72:79:c0:
96:35:ca:de:c3:e4:23:b3:e7:1d:6b:52:0b:b4:ca:
a5:b9:7a:33:66:d8:17:38:00:cb:b0:ff:1c:76:b1:
a8:a3:84:2d:c4:f5:d5:77:79:df:56:b9:8f:a6:3b:
68:f8:05:35:3a:4a:ac:2e:eb:c1:2b:84:ae:15:05:
e4:6d:3c:30:ef:f6:1c:c2:68:96:c3:1a:0f:d7:e1:
84:a3:f3:ab:92:35:45:f7:d7:67:47:66:99:e1:94:
87:54:aa:da:66:0b:04:3b:79:23:ba:74:c6:b7:5a:
f4:14:e6:32:19:5f:e9:16:80:ae:32:f3:33:85:84:
1f:d3:7f:d6:0b:0f:48:c2:80:20:79:8a:cf:35:32:
5a:39:b9:4f:7e:31:55:ca:e2:0a:15:54:c5:fd:51:
53:ef:d5:d2:12:01:a8:0b:b8:84:e1:38:9e:31:4c:
d6:9c:d4:4b:c1:74:fa:36:f0:1a:1c:f5:e9:14:bc:
1b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AB:F5:40:20:1F:EB:3A:13:84:85:7C:97:1E:69:3D:BD:37:99:AC
X509v3 Authority Key Identifier:
keyid:B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:c6:55:13:e6:42:a5:52:64:15:9e:51:84:df:7a:d1:d2:66:
be:7b:f6:ff:ac:7b:a1:ef:54:27:7c:e9:8c:58:80:dd:1f:e5:
38:25:4d:37:0f:28:a1:a2:87:0e:ef:00:64:3c:0e:ca:62:b2:
3d:4a:eb:12:1a:07:04:12:39:b7:32:2b:4f:18:02:0f:e7:3c:
d6:fc:7d:f7:fe:4c:14:b0:27:78:b6:43:f5:fa:7b:2c:36:dc:
a3:07:d5:ac:ed:68:0e:36:05:d6:08:1f:0f:8c:11:ce:41:9e:
d5:ee:be:f8:6d:86:97:3d:21:ce:b3:86:13:bc:7c:03:98:fb:
fa:74:c7:49:c4:88:12:4b:1e:e6:6b:85:85:a3:62:54:48:58:
ff:0f:cf:20:14:91:9b:73:59:6e:3e:04:41:94:8d:74:ea:4a:
d6:2b:97:b2:54:cb:7e:79:fd:b6:fc:e3:c3:6d:91:f9:3e:0b:
3f:19:31:e7:7b:f5:cf:db:f1:c9:49:60:26:f3:e4:5b:14:c1:
11:ca:cb:64:f6:42:60:49:65:cb:f3:91:1b:bc:5f:a5:2e:15:
02:b7:fd:03:04:fa:0a:06:bc:0f:05:95:36:61:86:b8:79:46:
c0:0c:7f:dd:01:a7:14:4d:28:e8:c7:dc:ba:82:fe:d9:fd:08:
bd:15:43:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:44:28 2026 by rpki-client