Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
File: sXtEkEx2lKVAig0pcsOf8LGwPqU.mft (raw, json)
Hash identifier: hLxa9FPzp+lQIytpSux9v8wDXPXxnX05ClmEUnvATUM=
Subject key identifier: AC:05:75:CB:60:4A:EE:19:A1:62:B5:68:2A:75:82:4C:3E:0D:D8:9E
Authority key identifier: B1:7B:44:90:4C:76:94:A5:40:8A:0D:29:72:C3:9F:F0:B1:B0:3E:A5
Certificate issuer: /CN=b17b44904c7694a5408a0d2972c39ff0b1b03ea5
Certificate serial: 01A0D6BA0B511543C60ACB9104E099AA6BD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
Manifest number: 12B9
Signing time: Fri 25 Sep 2026 04:01:51 +0000
Manifest this update: Fri 25 Sep 2026 04:01:51 +0000
Manifest next update: Sat 26 Sep 2026 04:01:51 +0000
Files and hashes: 1: _RUk9FpS67FmhL3-cjuZddAmpdk.roa (hash: B9UAAuPL9bMWFoRGXof1Klm+Lwvuj9esb9qSVPpnlxw=)
2: sXtEkEx2lKVAig0pcsOf8LGwPqU.crl (hash: EclE5ZLX7KOOdnTl3XD3VPO0BsajoVXCuhXXpDoQtbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 04:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:ba:0b:51:15:43:c6:0a:cb:91:04:e0:99:aa:6b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b17b44904c7694a5408a0d2972c39ff0b1b03ea5
Validity
Not Before: Sep 25 04:01:51 2026 GMT
Not After : Sep 26 04:01:51 2026 GMT
Subject: CN=ac0575cb604aee19a162b5682a75824c3e0dd89e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a2:8e:07:61:d6:eb:66:76:32:1f:fc:93:a8:
56:b2:87:a8:21:47:fe:c0:5e:5b:71:3a:fa:f3:4c:
c4:92:d4:b5:2f:26:63:cc:0b:23:30:c4:7e:76:28:
4b:06:83:3f:bb:38:cc:72:ef:68:f6:2a:b8:47:9d:
db:53:08:17:0d:1a:73:08:4f:c6:97:bd:15:45:2a:
38:8e:5c:26:dc:8f:d0:d1:35:1e:37:20:6f:c0:f2:
f3:7b:49:d1:72:64:2a:c0:41:03:39:7c:5e:66:a4:
e5:00:ea:49:32:f9:6f:7e:97:38:65:64:d2:99:9e:
bb:5a:93:29:08:6d:fa:b9:c5:d4:de:58:5e:61:bc:
88:6b:36:7b:47:c8:9c:6d:d0:92:88:92:d5:f0:fb:
cb:a3:99:5d:59:59:39:a5:58:e2:d9:7a:7f:ae:3f:
24:a7:69:26:d5:8c:9c:47:65:e4:53:c1:6e:78:66:
a7:63:e9:4f:69:f3:8d:02:41:83:7e:9f:7a:99:97:
4a:ba:55:65:e6:7a:03:9a:ca:c2:4d:bd:6e:ad:31:
45:12:85:c0:61:6b:2b:2f:b4:d6:00:cb:4f:3b:63:
99:cf:42:a2:af:ff:a8:eb:8e:47:6e:d3:6d:fa:06:
96:c0:fb:c4:5e:c9:66:6e:87:6b:a4:8a:10:f8:b2:
ea:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:05:75:CB:60:4A:EE:19:A1:62:B5:68:2A:75:82:4C:3E:0D:D8:9E
X509v3 Authority Key Identifier:
keyid:B1:7B:44:90:4C:76:94:A5:40:8A:0D:29:72:C3:9F:F0:B1:B0:3E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:be:fe:24:a4:2d:0b:21:28:e3:11:6d:68:6c:c4:08:ee:38:
7e:42:14:54:6e:70:c6:3f:ee:f0:2b:e2:69:d3:d2:20:90:2f:
11:d7:61:01:85:b8:9d:3c:9d:ac:0d:c2:72:fb:c2:8e:49:87:
19:ec:c3:49:94:76:d9:b4:11:a9:c9:63:39:e7:da:45:3c:93:
8b:17:cb:17:12:e4:b7:28:9c:d1:de:b1:79:cb:7b:ca:04:38:
7b:fc:9c:78:f4:29:ee:34:08:9d:63:15:fd:67:9a:a6:1c:77:
61:14:eb:5e:c3:8f:b5:84:1f:fd:9d:70:29:d2:14:cd:00:a5:
9d:f9:d2:d6:05:7e:90:54:1e:03:27:64:76:9d:11:7a:c1:12:
f4:62:0a:0b:ed:0f:d0:c5:93:cd:08:15:35:12:64:cf:9a:7f:
89:88:67:85:9e:1c:8b:9b:78:7c:78:cb:7d:41:af:8b:28:e5:
03:4d:48:fd:7f:88:78:ce:a3:68:02:c1:1b:db:c9:2f:c2:25:
09:7e:4c:ec:ac:e9:70:ae:d9:38:4a:54:23:06:8c:30:fc:af:
df:27:4c:c9:46:1b:9a:8e:97:15:08:95:04:f3:43:92:ad:29:
e6:10:c4:5f:dd:37:e6:45:40:4e:cb:00:df:57:ca:32:3b:aa:
85:e9:8d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:43:22 2026 by rpki-client