Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
File: sxk4vHICgkRLq9OyazSStFats5c.mft (raw, json)
Hash identifier: eTTxlEGXUZ17Ol6CtqSXZfSb+nH5NFQaawMjayvlDQs=
Subject key identifier: CA:B8:AC:53:28:60:7C:BF:FF:19:E1:6D:97:D3:9B:07:00:2F:8C:07
Authority key identifier: B3:19:38:BC:72:02:82:44:4B:AB:D3:B2:6B:34:92:B4:56:AD:B3:97
Certificate issuer: /CN=b31938bc720282444babd3b26b3492b456adb397
Certificate serial: 019E2B82D18E88B6CB238F2CC375BE07C1F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
Manifest number: 0C2C
Signing time: Fri 15 May 2026 12:00:53 +0000
Manifest this update: Fri 15 May 2026 12:00:53 +0000
Manifest next update: Sat 16 May 2026 12:00:53 +0000
Files and hashes: 1: eaw_KDLii_O0OZBia4ceyJvvRgg.roa (hash: 785x1F9Iz8gQQoHICXoHX9Lh+Vh5PnxM3BQ0Ya5+hPc=)
2: sxk4vHICgkRLq9OyazSStFats5c.crl (hash: M8+OCizdbMgk0hPCScVpucuy1QVm4vscGAYAPhlzqZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:82:d1:8e:88:b6:cb:23:8f:2c:c3:75:be:07:c1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31938bc720282444babd3b26b3492b456adb397
Validity
Not Before: May 15 12:00:53 2026 GMT
Not After : May 16 12:00:53 2026 GMT
Subject: CN=cab8ac5328607cbfff19e16d97d39b07002f8c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:20:3b:c7:c6:63:45:e0:af:49:f7:ad:58:35:
fd:e6:fd:9c:1b:d8:28:04:98:81:76:77:42:1b:59:
28:b8:ee:36:63:3a:15:c0:bf:df:51:20:20:32:25:
b8:06:41:83:88:cd:c3:69:b2:46:7e:48:6c:83:9b:
cc:e3:15:6e:0a:38:dd:b2:8e:59:53:b7:9b:e0:f1:
3c:cb:b8:4e:7c:1c:a8:8a:ff:2b:bc:2b:cf:9c:e0:
f5:21:4b:55:d5:23:66:74:75:9a:c3:09:42:45:4b:
e7:1d:66:d1:bb:99:29:32:6d:37:4b:02:c1:25:70:
cc:38:31:15:db:ca:30:cf:a5:1f:e5:8d:79:db:c0:
96:44:24:3f:a9:c7:17:93:d1:5b:b8:52:f8:ce:59:
22:b2:3e:b6:98:4c:5b:5f:59:f8:b9:93:cd:80:8f:
b1:55:0b:80:81:c3:9b:ce:85:9e:7d:a5:86:50:6a:
0d:34:bf:9f:ee:e5:94:bb:22:46:aa:05:38:8c:68:
69:89:a5:5e:39:ef:26:b0:16:7d:d0:e0:f0:a1:8b:
90:57:db:ac:12:3c:c1:3b:e1:42:71:1e:2d:01:2b:
c1:8e:e1:6a:43:05:6f:a7:ef:34:0c:e8:9b:ab:82:
42:55:10:bd:4a:3d:5d:41:12:35:50:a5:8f:a7:4d:
bc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B8:AC:53:28:60:7C:BF:FF:19:E1:6D:97:D3:9B:07:00:2F:8C:07
X509v3 Authority Key Identifier:
keyid:B3:19:38:BC:72:02:82:44:4B:AB:D3:B2:6B:34:92:B4:56:AD:B3:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:5a:9a:db:0f:40:65:ad:63:67:dd:c0:f0:07:00:6e:22:b7:
36:d4:dd:cd:99:eb:2a:83:a3:c4:fa:92:e3:40:f5:b2:0c:ff:
97:06:d2:b0:b3:12:16:f3:07:21:ef:21:4c:44:fc:77:5b:b2:
ef:5f:94:2f:2a:3b:7e:d1:27:e7:3c:16:27:a6:c6:f2:ff:b2:
ef:df:87:54:5b:67:28:f1:cc:50:58:96:b1:e2:22:d1:50:98:
70:9a:36:a0:35:83:14:96:50:09:d3:7b:95:c8:4c:f8:a9:d6:
40:99:29:f9:c0:5f:33:d9:22:1a:f7:17:af:a3:57:4e:42:ad:
4a:ac:e9:65:50:6e:8d:b7:25:23:d0:82:32:ee:f9:76:7d:97:
96:90:0f:95:85:44:09:f3:5f:6d:ee:58:ac:ae:f4:db:97:16:
2e:6e:18:4a:b2:68:d4:3e:61:ae:ba:8e:1f:c8:d1:77:ac:0a:
f1:5b:d5:46:31:ee:2c:99:61:8b:9e:c9:6b:4a:a8:81:93:e2:
a9:2e:f3:6e:a2:c9:03:7f:35:0c:65:c6:8a:ca:bf:2b:25:21:
27:d7:cc:8d:4e:7a:0f:3b:46:78:9d:ca:50:33:09:23:46:da:
1d:ae:63:93:e7:39:93:84:ff:25:e5:cc:ed:08:bb:6d:81:1c:
88:d1:b8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 20:44:33 2026 by rpki-client