Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
File: sXtEkEx2lKVAig0pcsOf8LGwPqU.mft (raw, json)
Hash identifier: JSi1G0EajNjvpcP36/DHbvVLPgpZ67J/tpaEkQ21N1Y=
Subject key identifier: B6:91:38:4C:5E:34:6D:0A:77:F5:AB:0A:6F:0B:FF:52:EF:BA:02:89
Authority key identifier: B1:7B:44:90:4C:76:94:A5:40:8A:0D:29:72:C3:9F:F0:B1:B0:3E:A5
Certificate issuer: /CN=b17b44904c7694a5408a0d2972c39ff0b1b03ea5
Certificate serial: 019D2A3C4DCF345B72F6CDD0001C7F6BF30F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
Manifest number: 10D2
Signing time: Thu 26 Mar 2026 13:01:28 +0000
Manifest this update: Thu 26 Mar 2026 13:01:28 +0000
Manifest next update: Fri 27 Mar 2026 13:01:28 +0000
Files and hashes: 1: _RUk9FpS67FmhL3-cjuZddAmpdk.roa (hash: B9UAAuPL9bMWFoRGXof1Klm+Lwvuj9esb9qSVPpnlxw=)
2: sXtEkEx2lKVAig0pcsOf8LGwPqU.crl (hash: 9m21Z/KRHtKxLST0elHrk71dhPS4zfSrhitimjci6VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:4d:cf:34:5b:72:f6:cd:d0:00:1c:7f:6b:f3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b17b44904c7694a5408a0d2972c39ff0b1b03ea5
Validity
Not Before: Mar 26 13:01:28 2026 GMT
Not After : Mar 27 13:01:28 2026 GMT
Subject: CN=b691384c5e346d0a77f5ab0a6f0bff52efba0289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4d:c8:54:e8:a2:f4:ce:31:cb:ee:d7:57:d5:
42:0a:a8:17:f9:b6:71:82:f0:99:27:4f:50:e4:48:
42:72:a1:e8:3c:04:3a:6e:48:8f:08:58:8a:c0:30:
51:27:2e:7b:37:ad:33:d5:89:5e:9e:a8:d6:7c:2a:
61:dd:38:a3:3b:7e:48:1b:8d:78:9e:09:ab:b8:a1:
bc:5b:8f:ce:14:3a:70:90:db:38:0f:fc:b1:bf:2c:
b3:73:66:ff:e8:11:74:96:0f:b7:b2:86:cb:e6:5f:
36:fa:04:e0:1f:c9:e5:8d:85:b5:91:28:10:22:3d:
59:a5:f3:b2:4e:64:47:69:74:36:8a:88:8a:d6:c0:
8b:ce:1b:9b:57:5f:56:36:2c:e5:de:87:44:01:14:
3d:7e:ca:3e:ff:20:b3:45:a7:80:39:ee:95:2a:ac:
f2:ec:16:33:91:ee:ea:d0:6c:94:ff:4b:2c:a2:09:
0a:eb:52:4a:df:b2:87:15:34:df:63:c8:5e:87:03:
26:92:9d:32:bb:77:7b:ee:26:32:18:87:61:63:c1:
de:69:1a:12:7a:e9:b0:5f:e6:54:d1:5a:a9:c2:76:
df:1b:aa:aa:a3:84:b1:e5:93:7f:4c:bc:ad:97:89:
e2:45:aa:9f:42:0f:69:76:ae:c9:43:b4:74:29:76:
40:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:91:38:4C:5E:34:6D:0A:77:F5:AB:0A:6F:0B:FF:52:EF:BA:02:89
X509v3 Authority Key Identifier:
keyid:B1:7B:44:90:4C:76:94:A5:40:8A:0D:29:72:C3:9F:F0:B1:B0:3E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a9:45:5a:9c:bf:83:df:4b:d6:dc:24:12:06:80:05:7b:6a:
84:00:5a:04:d2:d8:fb:aa:31:b5:90:51:e8:b3:aa:20:b9:85:
2f:89:ba:30:32:ad:0c:70:ab:86:7e:05:bf:e4:54:8b:6b:9f:
9b:8e:50:8e:99:70:02:3b:49:08:bc:0f:c1:0a:13:ff:cc:d2:
2d:0b:e8:ff:ae:03:f6:d3:1b:66:20:05:ba:10:5e:a9:72:48:
92:60:bb:28:a6:06:bf:d4:1b:ab:1b:4e:d0:ff:d3:6e:36:04:
73:d7:30:74:87:e5:5c:79:81:ae:fa:fc:8b:ff:74:d4:bb:98:
d8:28:c0:cb:bc:b7:ad:8f:80:15:ff:44:44:b4:c4:b0:db:50:
eb:87:ad:d3:29:3c:32:48:3f:8f:50:2e:ad:c2:29:4b:6d:6b:
65:bc:fe:17:06:31:ab:dd:09:fe:a2:9b:21:10:a5:bf:e8:61:
21:58:4f:ea:6c:67:c9:25:b6:89:e0:6f:94:e8:a6:39:3a:95:
d9:77:85:d1:12:89:22:f5:7a:a7:fb:8e:3c:52:20:73:af:29:
5c:f2:cc:4b:84:ce:31:fe:9b:a5:b9:c7:27:19:43:3f:5a:69:
c8:0d:d6:7f:18:60:a3:87:f8:84:00:f8:18:3f:42:cb:49:59:
58:8a:e9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:22:53 2026 by rpki-client