Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
File: sxk4vHICgkRLq9OyazSStFats5c.mft (raw, json)
Hash identifier: takP5p7WKsrMsV9lbXymDlx/HYEbPUaUxuXDJk6OaU4=
Subject key identifier: 3F:1F:82:0C:F3:8D:9D:7D:2E:71:0A:91:98:20:E1:45:33:5F:D6:E8
Authority key identifier: B3:19:38:BC:72:02:82:44:4B:AB:D3:B2:6B:34:92:B4:56:AD:B3:97
Certificate issuer: /CN=b31938bc720282444babd3b26b3492b456adb397
Certificate serial: 019D382E9E3C26C88FC28C34967211CAC985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
Manifest number: 0BAE
Signing time: Sun 29 Mar 2026 06:01:12 +0000
Manifest this update: Sun 29 Mar 2026 06:01:12 +0000
Manifest next update: Mon 30 Mar 2026 06:01:12 +0000
Files and hashes: 1: eaw_KDLii_O0OZBia4ceyJvvRgg.roa (hash: 785x1F9Iz8gQQoHICXoHX9Lh+Vh5PnxM3BQ0Ya5+hPc=)
2: sxk4vHICgkRLq9OyazSStFats5c.crl (hash: FlEQSkYj5SZ5FMadi5PVg++AUJ+lefdDiLxACGK7hgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:9e:3c:26:c8:8f:c2:8c:34:96:72:11:ca:c9:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31938bc720282444babd3b26b3492b456adb397
Validity
Not Before: Mar 29 06:01:12 2026 GMT
Not After : Mar 30 06:01:12 2026 GMT
Subject: CN=3f1f820cf38d9d7d2e710a919820e145335fd6e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:07:d2:be:26:51:b8:f5:82:35:4c:77:b5:55:
d0:35:28:6d:b9:bc:83:d2:1d:05:53:50:9b:84:1a:
ed:7f:d6:cf:2f:8a:c5:ca:cd:c1:ef:8c:ab:f7:46:
19:2e:04:5c:32:f6:38:a1:4e:6e:17:71:be:86:de:
21:a4:96:6e:ce:b0:c9:8a:07:46:b9:1d:18:f3:d0:
27:50:59:27:0f:51:10:06:74:a4:32:75:28:9f:56:
f5:bc:c2:db:b5:db:85:1b:94:0a:7f:c0:2f:1e:37:
67:b3:a4:fa:71:51:2d:2f:77:ae:d6:0e:77:82:d3:
43:89:c7:c3:5d:d9:53:e3:31:ea:c0:15:7f:da:4b:
a0:16:44:ba:ae:73:e5:81:51:3f:89:d7:5e:86:99:
36:48:e1:6f:cc:f6:21:90:ae:c0:33:a7:fa:0c:3d:
a5:9c:21:5b:cf:62:36:a5:41:5c:2b:f3:c5:97:94:
55:7e:aa:9e:77:f5:fc:68:c1:95:45:7c:6e:50:33:
b3:ff:8c:77:50:3b:dc:8b:2b:cb:01:6b:15:c5:3b:
64:e3:b3:23:55:00:e9:df:6c:5b:93:33:c0:60:b8:
96:33:f6:b8:c0:73:17:03:38:86:62:af:9c:a9:c7:
6e:db:08:be:bb:b0:61:d2:f2:8d:18:19:66:80:fc:
a2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1F:82:0C:F3:8D:9D:7D:2E:71:0A:91:98:20:E1:45:33:5F:D6:E8
X509v3 Authority Key Identifier:
keyid:B3:19:38:BC:72:02:82:44:4B:AB:D3:B2:6B:34:92:B4:56:AD:B3:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:f4:64:a5:97:c6:d9:6e:02:4c:1c:20:50:2b:74:d9:4a:9f:
2e:d0:9d:5e:4b:eb:e5:9f:1c:9f:6b:1f:7c:69:7a:d5:6a:e7:
50:4a:a2:94:f7:9f:77:88:0f:fb:0b:1f:4b:64:6a:cd:0b:65:
66:e3:b0:5f:4f:f8:2a:f0:39:a8:80:cd:99:ce:fa:77:7d:ae:
ca:ca:ad:98:1c:31:ed:6c:9e:4d:f4:a4:57:f3:05:81:f9:fc:
03:c6:1c:21:7c:72:17:f7:75:0b:75:f0:2d:65:9f:54:ac:90:
ec:64:e1:92:bc:cc:39:4a:24:e0:84:f9:6a:85:54:50:dd:e5:
e0:d8:c1:51:c8:a6:07:4f:da:29:1f:f9:9b:63:ac:d5:db:0f:
92:0c:58:b5:aa:cc:80:c4:bc:82:e1:c6:81:b3:30:9e:e0:04:
ef:00:06:0e:8a:a8:6d:48:bd:8c:3e:3d:c0:33:15:ef:bb:96:
87:89:68:78:24:83:6b:3a:ba:d5:bd:b1:a4:d7:20:8c:50:14:
12:4e:13:97:ab:fd:c2:cc:83:66:b1:96:4c:71:84:4c:65:89:
df:c0:05:53:5a:1d:be:fb:3d:db:d4:68:57:d2:d2:fc:79:84:
7e:5d:5c:8d:ed:b2:fd:1b:78:d5:21:9d:bd:34:95:94:23:17:
b4:6f:fe:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Lp48JsiPwow0lnIRysmFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMTkzOGJjNzIwMjgyNDQ0YmFiZDNiMjZiMzQ5MmI0NTZh
ZGIzOTcwHhcNMjYwMzI5MDYwMTEyWhcNMjYwMzMwMDYwMTEyWjAzMTEwLwYDVQQD
EygzZjFmODIwY2YzOGQ5ZDdkMmU3MTBhOTE5ODIwZTE0NTMzNWZkNmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswfSviZRuPWCNUx3tVXQNShtubyD
0h0FU1CbhBrtf9bPL4rFys3B74yr90YZLgRcMvY4oU5uF3G+ht4hpJZuzrDJigdG
uR0Y89AnUFknD1EQBnSkMnUon1b1vMLbtduFG5QKf8AvHjdns6T6cVEtL3eu1g53
gtNDicfDXdlT4zHqwBV/2kugFkS6rnPlgVE/iddehpk2SOFvzPYhkK7AM6f6DD2l
nCFbz2I2pUFcK/PFl5RVfqqed/X8aMGVRXxuUDOz/4x3UDvciyvLAWsVxTtk47Mj
VQDp32xbkzPAYLiWM/a4wHMXAziGYq+cqcdu2wi+u7Bh0vKNGBlmgPyiVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8fggzzjZ19LnEKkZgg4UUzX9boMB8GA1UdIwQY
MBaAFLMZOLxyAoJES6vTsms0krRWrbOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3hrNHZISUNna1JMcTlPeWF6U1N0RmF0czVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83NWRlZGUtNTQ0OS00ZDQ3LTliNTEt
OWI1ZGY4NWMxMTQwLzEvc3hrNHZISUNna1JMcTlPeWF6U1N0RmF0czVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC83NWRlZGUtNTQ0OS00ZDQ3LTliNTEtOWI1ZGY4NWMxMTQw
LzEvc3hrNHZISUNna1JMcTlPeWF6U1N0RmF0czVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJvRkpZfG
2W4CTBwgUCt02UqfLtCdXkvr5Z8cn2sffGl61WrnUEqilPefd4gP+wsfS2RqzQtl
ZuOwX0/4KvA5qIDNmc76d32uysqtmBwx7WyeTfSkV/MFgfn8A8YcIXxyF/d1C3Xw
LWWfVKyQ7GThkrzMOUok4IT5aoVUUN3l4NjBUcimB0/aKR/5m2Os1dsPkgxYtarM
gMS8guHGgbMwnuAE7wAGDoqobUi9jD49wDMV77uWh4loeCSDazq61b2xpNcgjFAU
Ek4Tl6v9wsyDZrGWTHGETGWJ38AFU1odvvs929RoV9LS/HmEfl1cje2y/Rt41SGd
vTSVlCMXtG/+Hg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:49:58 2026 by rpki-client