Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
File: sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft (raw, json)
Hash identifier: o2ZngwEuuTdywXXHh59oGTrZhJYzjxct9kuYtGIrLR0=
Subject key identifier: 3F:E8:8B:AD:20:C1:E9:24:9B:BB:CB:78:88:FD:6B:16:59:B9:93:22
Authority key identifier: B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3
Certificate issuer: /CN=b31f0671f399e4da20a48bd327c47afa4a41ffc3
Certificate serial: 01A0CC364397AD3EB521038482E008CD59F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
Manifest number: 19FD
Signing time: Wed 23 Sep 2026 03:01:43 +0000
Manifest this update: Wed 23 Sep 2026 03:01:43 +0000
Manifest next update: Thu 24 Sep 2026 03:01:43 +0000
Files and hashes: 1: YxQQWDg_coyEB6pTn4AJqkDaXAs.roa (hash: FxWNGXvs3glxGeqRKNIBrVgkNIhHyCpETztEe1qzaRU=)
2: sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl (hash: rmT4ljasq/Cxn3NkrjnBSjC07GGzJIWDIMG7VQ5psEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:36:43:97:ad:3e:b5:21:03:84:82:e0:08:cd:59:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31f0671f399e4da20a48bd327c47afa4a41ffc3
Validity
Not Before: Sep 23 03:01:43 2026 GMT
Not After : Sep 24 03:01:43 2026 GMT
Subject: CN=3fe88bad20c1e9249bbbcb7888fd6b1659b99322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:15:ac:2c:6c:30:1b:e6:40:b7:d7:c7:c1:8f:
46:34:1b:cc:30:0d:7c:bd:20:df:a7:e6:55:34:1b:
36:26:3d:b1:e9:98:ac:1e:33:44:65:59:6c:e4:3d:
c9:d7:99:fe:21:0c:a3:41:0e:ef:9a:ad:cb:89:1e:
d0:aa:23:51:df:be:e3:80:e8:f6:cd:88:03:73:f7:
56:2c:15:30:22:73:75:e9:9d:b9:83:a8:65:66:e4:
9f:0e:df:de:cf:4f:04:1c:bb:7c:2a:ef:b5:ee:f9:
27:23:6c:4c:a0:24:9b:fb:14:b5:4b:68:bf:b5:a9:
d4:d4:e3:0a:60:fc:11:95:cc:ff:f6:04:2a:40:ee:
c8:2b:b0:33:1f:9a:08:77:50:86:aa:76:a8:15:68:
d6:fd:33:80:87:34:52:14:bd:19:69:e2:7e:64:0b:
02:81:c8:71:aa:53:ed:7d:8d:0e:d4:c9:07:19:b1:
6c:73:f8:18:72:9f:7d:4e:af:be:22:18:db:48:78:
e7:34:ee:bf:9d:46:80:4b:e0:2a:b9:d4:28:84:fd:
77:f7:b7:7f:ac:7b:5c:fb:a6:f0:6c:42:c0:48:56:
3e:3e:1e:0d:ae:2e:cc:44:40:a6:60:fd:e4:c0:bb:
55:62:b3:0c:2a:51:af:24:a3:11:cf:c4:9c:c7:0a:
b7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E8:8B:AD:20:C1:E9:24:9B:BB:CB:78:88:FD:6B:16:59:B9:93:22
X509v3 Authority Key Identifier:
keyid:B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d1:2a:e1:92:30:1f:36:54:f5:43:3f:d5:d9:f2:10:90:e2:
ea:70:b2:d8:14:2c:34:6c:95:8f:1a:d9:9a:dd:10:1b:03:a8:
6f:4f:b4:94:d8:8f:5d:3f:0f:98:38:c9:5b:83:54:44:67:63:
81:7e:df:68:9f:4e:b3:40:95:ca:cb:d9:4d:47:a7:0d:b0:ea:
cc:45:b2:92:90:f1:0b:64:00:7a:d9:fa:06:18:78:bb:a4:ec:
fe:6a:2c:27:d3:af:b4:ce:4d:04:1a:0c:1c:b6:9e:96:2a:9c:
4c:5b:3a:09:48:d4:70:58:e8:be:ca:15:23:f3:f1:73:11:22:
b7:f8:e5:92:14:9f:2c:82:3e:08:f7:0e:0f:fd:ab:3d:bf:28:
62:5f:ec:56:a9:ce:bd:46:d8:b6:18:6a:5a:68:dd:ed:bf:88:
fb:d3:8f:07:84:b5:8b:79:c4:04:c7:4b:ff:b5:2b:fb:88:0c:
f5:71:90:49:26:91:bc:22:96:04:64:df:17:89:a9:2d:ab:54:
15:d3:9a:b6:33:9b:cf:be:c5:ea:c4:2f:c1:0b:53:b7:89:c4:
ed:7a:c6:82:97:79:fa:18:63:94:02:d3:25:5f:38:fc:9f:3d:
b3:40:e6:1b:69:e5:29:a9:8f:32:5c:37:66:6a:60:36:13:a2:
d2:c1:92:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:26:18 2026 by rpki-client