Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.mft
File: sxagaE0dOLrPQzjCsB2ztBNw60U.mft (raw, json)
Hash identifier: 8TaxWFY/EklUZq8rOwNf8ruoMPwolp3J9kvjIzSov5M=
Subject key identifier: 9A:DE:40:99:3F:FA:E4:33:F9:79:AC:17:14:CF:E5:4F:ED:11:16:E2
Authority key identifier: B3:16:A0:68:4D:1D:38:BA:CF:43:38:C2:B0:1D:B3:B4:13:70:EB:45
Certificate issuer: /CN=b316a0684d1d38bacf4338c2b01db3b41370eb45
Certificate serial: 019D26CD51E869384DFADA1BF069512AC060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxagaE0dOLrPQzjCsB2ztBNw60U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.mft
Manifest number: 0704
Signing time: Wed 25 Mar 2026 21:01:23 +0000
Manifest this update: Wed 25 Mar 2026 21:01:23 +0000
Manifest next update: Thu 26 Mar 2026 21:01:23 +0000
Files and hashes: 1: PWqPuXgW_9Y9TvyR2FkZ0jJYBq8.roa (hash: 19NEYDyyhBU0DYdUPGu2u1lBZKeokSrHjnAnkDsiz24=)
2: sxagaE0dOLrPQzjCsB2ztBNw60U.crl (hash: Sfr4h2tKSoriucvdmbXF0e28E2EpzKQaYq1AZc/OQFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxagaE0dOLrPQzjCsB2ztBNw60U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:51:e8:69:38:4d:fa:da:1b:f0:69:51:2a:c0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b316a0684d1d38bacf4338c2b01db3b41370eb45
Validity
Not Before: Mar 25 21:01:23 2026 GMT
Not After : Mar 26 21:01:23 2026 GMT
Subject: CN=9ade40993ffae433f979ac1714cfe54fed1116e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:59:26:91:b4:14:c6:d6:f9:4e:1c:8d:c7:72:
4c:3f:62:b6:25:94:b4:8f:49:03:42:6d:f4:48:3f:
6e:7f:43:6a:9f:66:f1:4a:c1:9f:fb:88:0f:8a:3e:
27:e4:ef:a3:95:92:f8:b8:59:b0:a7:41:95:22:08:
e7:2a:f0:4b:75:d0:60:87:6c:4d:f6:af:7d:1f:7e:
e7:e0:cf:7d:0c:1c:29:b6:35:7c:5b:1c:b2:a5:d9:
e7:4e:c8:ef:40:93:d8:0a:92:02:72:26:28:81:fc:
93:6e:0a:f9:c8:9f:02:c4:73:c0:1f:cb:40:1f:e5:
37:26:c4:ad:d0:aa:67:06:10:f6:9c:c3:ae:c3:c9:
ef:67:16:67:00:58:4b:fe:e6:70:1c:74:bd:48:66:
8f:9d:5f:d8:a8:9e:09:f4:b6:28:ee:56:9b:5c:c6:
8c:b5:5d:5b:43:39:5a:ff:24:90:29:ad:af:b1:04:
e9:ff:3b:9b:88:8d:10:a1:46:c5:b4:4c:89:3a:53:
04:c4:78:1b:f2:39:54:3c:e3:d7:3e:bd:68:cc:f2:
df:8e:05:50:86:c1:34:5f:6f:e8:69:84:1a:38:97:
2e:3d:d3:5e:70:78:f3:25:d0:77:4e:ec:4f:b6:e3:
b0:4f:3f:43:8c:ad:0b:c1:e4:9c:44:92:19:22:aa:
2f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:DE:40:99:3F:FA:E4:33:F9:79:AC:17:14:CF:E5:4F:ED:11:16:E2
X509v3 Authority Key Identifier:
keyid:B3:16:A0:68:4D:1D:38:BA:CF:43:38:C2:B0:1D:B3:B4:13:70:EB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxagaE0dOLrPQzjCsB2ztBNw60U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:8b:8a:ee:53:ab:f5:62:06:20:db:4f:0c:c1:bf:d4:2b:69:
11:a4:63:32:95:0f:4a:d5:0e:12:f7:9a:04:8e:67:f7:bc:d3:
62:56:70:b2:4d:90:67:60:ff:73:e0:bc:3e:20:44:9a:03:42:
09:a7:3a:c4:b5:53:67:ed:51:1a:66:db:2c:77:4d:28:7b:da:
4d:aa:3c:53:e0:29:00:1c:96:35:ba:bd:80:af:06:a8:cc:db:
fa:e9:cf:03:91:c1:ab:f4:e1:72:8f:db:9d:17:b9:c3:07:db:
c2:34:98:1f:51:7e:ff:9e:8d:e5:4b:1c:d1:d3:9d:60:63:49:
a9:58:da:b6:7f:d5:c3:eb:e0:fe:1c:96:36:9d:e0:c7:80:2d:
a5:6c:1d:ef:51:02:7d:3e:93:15:3e:d1:5d:e0:48:9f:b4:87:
70:a1:90:7b:c3:3f:a1:b3:ce:3a:dd:79:ce:0c:2b:50:97:90:
5e:9a:4b:6c:30:ee:fb:c4:fd:fa:f7:26:66:59:f8:67:b0:1c:
9d:94:a1:86:f8:68:c2:63:c7:c0:ae:22:f1:7b:0f:8a:5a:89:
88:f0:a3:06:5c:b2:2b:ac:48:0a:d5:47:27:11:73:57:5b:c2:
16:73:22:ad:ba:22:75:95:e2:29:5b:c6:a9:36:84:7a:2f:73:
08:22:db:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:40:17 2026 by rpki-client