Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
File: sXtEkEx2lKVAig0pcsOf8LGwPqU.mft (raw, json)
Hash identifier: U1VmjA7/2rYiyrJP0hIU7B1fJYV+Kg8du+c+HINyvjQ=
Subject key identifier: 0D:42:98:19:F5:7B:3E:8E:12:72:E4:AC:76:A9:F6:1E:15:78:AC:61
Authority key identifier: B1:7B:44:90:4C:76:94:A5:40:8A:0D:29:72:C3:9F:F0:B1:B0:3E:A5
Certificate issuer: /CN=b17b44904c7694a5408a0d2972c39ff0b1b03ea5
Certificate serial: 019E1F7F9879520C790FBD13E91148E13635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
Manifest number: 1151
Signing time: Wed 13 May 2026 04:01:56 +0000
Manifest this update: Wed 13 May 2026 04:01:56 +0000
Manifest next update: Thu 14 May 2026 04:01:56 +0000
Files and hashes: 1: _RUk9FpS67FmhL3-cjuZddAmpdk.roa (hash: B9UAAuPL9bMWFoRGXof1Klm+Lwvuj9esb9qSVPpnlxw=)
2: sXtEkEx2lKVAig0pcsOf8LGwPqU.crl (hash: w6Gbf2zPgbESxRIbu0AUdPoDcGrG07jR5xXSxSuPEc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:98:79:52:0c:79:0f:bd:13:e9:11:48:e1:36:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b17b44904c7694a5408a0d2972c39ff0b1b03ea5
Validity
Not Before: May 13 04:01:56 2026 GMT
Not After : May 14 04:01:56 2026 GMT
Subject: CN=0d429819f57b3e8e1272e4ac76a9f61e1578ac61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0b:ba:47:fc:9f:50:10:f5:fc:ce:58:86:b4:
05:6e:2e:ab:d3:0c:f9:06:d7:28:bb:21:70:01:41:
25:f5:29:d4:b9:b3:56:87:3b:88:79:4b:ee:e1:10:
4a:11:85:d2:8d:b4:1b:e0:ca:09:b4:e7:0f:19:ee:
e0:1f:24:7c:7b:7a:ce:cd:2a:2f:55:26:1f:31:48:
bb:de:5e:00:20:b5:01:31:b6:fa:4a:96:c8:07:3f:
fd:f1:e1:73:72:9b:d9:6e:ff:d0:97:11:19:f5:41:
d2:ba:71:d2:82:22:52:75:d6:19:bb:55:46:b1:06:
47:9a:07:34:ab:3c:a4:a7:48:3e:58:98:85:53:ca:
e7:6d:6a:d5:6a:a0:ac:ca:72:ce:42:93:86:74:71:
94:37:9e:f6:fb:91:df:86:ec:bc:9d:2d:bc:68:40:
59:7c:5a:07:5a:6a:0a:6c:b2:56:ba:7d:06:c7:84:
f2:7a:2d:e3:74:6e:7b:b7:4b:0c:18:19:32:b3:d2:
da:a7:bb:29:bc:80:4c:d2:84:c9:f3:13:d8:9b:c2:
6f:eb:15:16:af:78:50:d4:fc:a2:92:6f:1f:e1:7c:
a6:33:4a:4d:eb:2a:26:a3:8d:56:76:6a:38:37:80:
49:43:eb:98:e1:c6:04:dc:bc:bb:75:a7:72:eb:f7:
a3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:42:98:19:F5:7B:3E:8E:12:72:E4:AC:76:A9:F6:1E:15:78:AC:61
X509v3 Authority Key Identifier:
keyid:B1:7B:44:90:4C:76:94:A5:40:8A:0D:29:72:C3:9F:F0:B1:B0:3E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:70:92:fd:e2:ea:c7:4a:ed:b2:ba:30:c6:ad:dd:a6:aa:5e:
d2:6b:d2:4a:64:5e:db:4d:5d:65:0c:1a:13:7b:99:db:d7:1c:
18:85:6b:79:c2:3a:40:34:71:d3:53:ca:bf:ac:3b:93:34:b2:
2c:41:54:ab:cb:52:d1:40:28:33:7b:e6:08:20:35:fd:59:65:
e7:75:e5:95:3b:1a:e4:af:c4:32:b6:96:81:55:93:c6:01:4a:
8e:c2:91:ca:e8:95:01:2b:55:b0:24:57:58:2c:2b:ab:5c:bc:
be:6d:04:0a:cc:da:00:ed:9f:83:9b:3d:e3:b5:a1:6d:90:b7:
e3:ab:76:77:4d:3b:25:3b:24:49:50:5d:ff:e3:de:b9:ef:b9:
e0:39:3c:ed:ae:0b:18:aa:fc:5b:3f:20:4d:5d:7d:eb:92:4e:
c7:58:88:a8:3c:af:51:3f:98:f1:96:c7:16:87:bb:31:51:b2:
f3:1a:da:05:21:f9:25:0d:25:3f:90:9f:c1:0d:b3:e5:8c:45:
72:aa:51:5f:e4:63:02:66:43:32:e7:36:ca:96:3e:a9:50:6d:
2b:15:7c:74:e2:07:0b:19:93:16:c2:f4:ae:c9:75:ee:21:b9:
8a:ec:bd:e6:7b:36:aa:35:d0:51:e0:90:8b:b0:35:c1:77:38:
ef:22:84:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:56:16 2026 by rpki-client