Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
File: sxk4vHICgkRLq9OyazSStFats5c.mft (raw, json)
Hash identifier: sMGKcJBTc+RvXaBy4BxomrL7i9Q1tYDZ3gL6ifAN0Rc=
Subject key identifier: E7:66:F0:00:F5:7E:1E:1E:01:8B:D4:8F:40:FD:B5:74:32:11:E5:56
Authority key identifier: B3:19:38:BC:72:02:82:44:4B:AB:D3:B2:6B:34:92:B4:56:AD:B3:97
Certificate issuer: /CN=b31938bc720282444babd3b26b3492b456adb397
Certificate serial: 019F190D3CE8D2C6C23EF465F0F418A9E584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
Manifest number: 0CA7
Signing time: Tue 30 Jun 2026 15:02:05 +0000
Manifest this update: Tue 30 Jun 2026 15:02:05 +0000
Manifest next update: Wed 01 Jul 2026 15:02:05 +0000
Files and hashes: 1: eaw_KDLii_O0OZBia4ceyJvvRgg.roa (hash: 785x1F9Iz8gQQoHICXoHX9Lh+Vh5PnxM3BQ0Ya5+hPc=)
2: sxk4vHICgkRLq9OyazSStFats5c.crl (hash: Ujolnl8upi+2DD6XZM+JsboMfWrKe0TIpYOP9yX6hbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0d:3c:e8:d2:c6:c2:3e:f4:65:f0:f4:18:a9:e5:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31938bc720282444babd3b26b3492b456adb397
Validity
Not Before: Jun 30 15:02:05 2026 GMT
Not After : Jul 1 15:02:05 2026 GMT
Subject: CN=e766f000f57e1e1e018bd48f40fdb5743211e556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:10:b7:67:52:06:cd:3f:0d:af:38:94:53:70:
0d:ab:4a:c9:db:01:19:00:50:ad:9d:dc:48:d2:22:
e1:43:32:be:98:e4:12:1b:8e:72:8e:dd:4c:cf:bd:
e9:ca:75:68:ba:b1:8e:90:65:e3:b1:76:75:de:48:
20:07:61:25:25:39:c9:19:e9:a4:fd:dd:a1:e5:4f:
08:f5:96:2d:46:fd:6d:7d:4d:12:15:52:43:c4:94:
f3:17:0e:85:a0:90:fe:83:83:55:88:13:f3:62:e9:
13:cb:16:09:1a:02:b6:41:32:f1:37:22:99:fc:19:
b2:ae:b3:4e:df:a8:f3:c7:79:63:b1:f7:cb:b3:0a:
7e:df:75:c6:dc:ee:5a:82:4a:b5:eb:86:84:15:87:
41:02:6b:6f:78:99:6e:ef:72:78:d5:50:ee:87:aa:
45:98:81:59:5c:7d:2a:b5:98:1a:d2:94:b3:93:bd:
b1:b2:93:8c:03:ff:1f:b2:d0:3c:f9:45:d0:fc:11:
13:cb:82:79:bb:56:0a:5e:9e:68:6c:67:76:a1:49:
2b:a7:77:99:18:18:b1:4f:83:53:62:f4:53:d3:4d:
18:d6:4e:ef:ab:89:10:dd:b1:78:44:ab:1d:d1:2b:
4f:dd:d6:6b:06:64:60:e1:f6:3c:a3:93:33:1f:b3:
29:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:66:F0:00:F5:7E:1E:1E:01:8B:D4:8F:40:FD:B5:74:32:11:E5:56
X509v3 Authority Key Identifier:
keyid:B3:19:38:BC:72:02:82:44:4B:AB:D3:B2:6B:34:92:B4:56:AD:B3:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:51:33:e5:7f:9f:f3:46:5e:ce:cc:e3:5c:89:72:12:58:0a:
f0:c0:db:92:a3:68:cf:ff:48:92:af:35:01:53:14:cd:f5:46:
f2:3f:51:94:3b:79:e4:5f:9c:0d:61:7d:cf:e0:ed:99:fc:68:
75:fc:27:11:bd:e4:58:96:36:e2:2d:df:aa:36:ef:e5:6d:e5:
a6:28:cf:96:47:fd:1c:df:f0:10:51:b0:3f:51:e8:1e:68:32:
f1:71:2c:ed:eb:2f:e5:44:93:55:8f:dc:a0:26:9a:9a:f3:78:
cc:58:09:55:7b:23:74:0b:21:c3:49:5d:37:48:3d:b9:03:09:
3e:f2:34:29:ae:47:ec:ca:26:33:97:1f:03:cb:87:fc:dd:4e:
b7:b6:04:3b:73:2b:ef:18:b4:a9:6d:b1:61:61:4f:15:38:3c:
e3:d3:56:0f:74:db:77:39:f7:a4:58:e9:92:f2:35:5d:b9:99:
29:1f:27:e2:e7:74:48:32:a4:68:1c:d1:42:54:5b:fd:b3:61:
d9:1c:9f:b4:03:33:58:55:05:02:69:d0:96:d9:ec:aa:1a:d7:
42:f1:73:ab:be:a1:24:d2:4a:ae:0f:35:bd:8b:94:20:3f:75:
72:6d:05:b6:45:26:7f:c8:c8:22:53:d9:27:06:99:86:e4:ac:
a4:3f:f6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:18:08 2026 by rpki-client