Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
File: SXioZBznhb40aFAwUncj5f3OVio.mft (raw, json)
Hash identifier: RCA6kB7Dp+Kbf6qKT+CuJAQrM9s8SNf/EC328h5eLQU=
Subject key identifier: 70:A4:54:09:AD:8E:FD:6F:70:8C:47:28:E2:80:1E:20:77:63:1B:87
Authority key identifier: 49:78:A8:64:1C:E7:85:BE:34:68:50:30:52:77:23:E5:FD:CE:56:2A
Certificate issuer: /CN=4978a8641ce785be34685030527723e5fdce562a
Certificate serial: 019D2A72AA29A9456F80E1385E578A857820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXioZBznhb40aFAwUncj5f3OVio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
Manifest number: 08C4
Signing time: Thu 26 Mar 2026 14:00:50 +0000
Manifest this update: Thu 26 Mar 2026 14:00:50 +0000
Manifest next update: Fri 27 Mar 2026 14:00:50 +0000
Files and hashes: 1: MihSKG7X7G5hbWHLKrg3NwyaRV8.roa (hash: pifaWr0Q6EtkAgB5G0YP5mWdeXXsBTXipgMqv9n85pY=)
2: SXioZBznhb40aFAwUncj5f3OVio.crl (hash: ig9ufbQ6CNS7g6ttienoaWupuwttqF4NCiURswucOdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
rsync://rpki.ripe.net/repository/DEFAULT/SXioZBznhb40aFAwUncj5f3OVio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:aa:29:a9:45:6f:80:e1:38:5e:57:8a:85:78:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4978a8641ce785be34685030527723e5fdce562a
Validity
Not Before: Mar 26 14:00:50 2026 GMT
Not After : Mar 27 14:00:50 2026 GMT
Subject: CN=70a45409ad8efd6f708c4728e2801e2077631b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e8:c1:e5:b5:56:76:82:b6:b1:a0:60:44:58:
11:93:69:d7:32:21:9c:f2:9e:da:6c:d1:d0:43:34:
e0:80:40:a4:04:52:f2:13:32:97:7c:62:a7:e4:bc:
e9:f4:79:00:c0:47:5f:8c:25:7e:5a:72:17:87:c0:
63:ee:7f:60:cc:1a:c3:5d:73:1a:bc:3d:28:73:42:
62:6c:cb:dd:e6:6d:01:de:4e:79:26:bd:12:fa:b5:
6f:e3:26:da:11:6e:8e:00:47:fb:e4:cb:ef:1f:fb:
7c:e3:a8:ba:d8:9a:c6:fb:ba:fc:5b:43:bc:8d:fe:
04:4e:25:bc:6b:c7:85:6b:9b:5f:85:75:cc:8c:6a:
fc:d0:8e:1a:71:88:ef:bf:09:85:16:f5:71:e7:50:
2d:0e:4a:b1:f1:d2:7d:1d:df:9c:29:3f:bc:da:7b:
68:50:8d:b6:af:aa:68:30:60:54:c8:48:c1:e0:f9:
6e:89:b0:6f:fe:dc:c8:6f:c1:9b:ec:51:d6:4c:43:
d0:73:97:d3:ea:1d:6f:2c:b0:1d:0c:64:d0:63:d2:
72:5e:3d:d2:76:1d:5c:46:f9:fb:22:0a:d3:e5:cf:
2f:99:4e:c8:86:39:05:7e:8e:c2:27:b5:3d:47:e6:
58:ac:55:96:52:6a:98:9b:10:94:41:0b:a6:cb:23:
a1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A4:54:09:AD:8E:FD:6F:70:8C:47:28:E2:80:1E:20:77:63:1B:87
X509v3 Authority Key Identifier:
keyid:49:78:A8:64:1C:E7:85:BE:34:68:50:30:52:77:23:E5:FD:CE:56:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXioZBznhb40aFAwUncj5f3OVio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:68:85:38:bd:2d:97:90:86:65:46:1c:1e:9e:97:a4:0d:43:
a4:f3:cc:41:88:96:fb:47:4e:ee:b5:31:39:ff:f2:e8:33:96:
51:3b:4f:31:c0:4f:1a:64:0c:82:f2:c7:e5:dc:49:2e:9e:a3:
fb:6b:45:dd:b5:e8:c3:0b:de:d9:7d:50:b3:94:fb:06:de:f6:
b9:84:5a:ce:53:b8:0f:93:b5:15:38:b8:2a:da:50:26:3d:87:
43:7d:6d:90:92:09:bf:85:1e:1e:80:67:ab:8a:40:fc:7c:7e:
b0:ab:80:62:69:7c:13:4d:2a:61:3b:36:70:db:64:14:cc:da:
19:4f:f7:1d:d8:0b:bd:ba:49:7e:90:84:00:e8:8b:0c:74:b8:
66:95:3a:fb:0f:12:99:f6:ac:ba:1b:ba:62:80:ef:9a:31:95:
19:48:83:40:5b:b0:f2:72:f1:d6:4f:bd:0b:1e:91:f1:23:4f:
29:45:c9:bd:4b:f0:68:de:3b:72:44:2f:04:0c:7d:05:36:68:
2d:c1:37:b1:da:98:dc:56:63:1a:26:93:51:34:2f:1c:49:46:
63:19:f2:55:a1:99:48:24:cb:94:e5:30:bb:53:cc:c0:73:3a:
26:a7:9c:74:39:16:7f:f1:81:64:ba:b9:bd:7c:91:ed:cc:64:
c2:46:50:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:14:46 2026 by rpki-client