Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
File: sxk4vHICgkRLq9OyazSStFats5c.mft (raw, json)
Hash identifier: ThJudyRC6SBVeXzNy/TthJoIP9FP6+BoRPae+R5Yia0=
Subject key identifier: B2:A4:9F:75:C4:D4:FA:3D:C5:9C:A7:5A:DC:E0:6F:12:F3:9C:E1:7C
Authority key identifier: B3:19:38:BC:72:02:82:44:4B:AB:D3:B2:6B:34:92:B4:56:AD:B3:97
Certificate issuer: /CN=b31938bc720282444babd3b26b3492b456adb397
Certificate serial: 01A12C1FE477A39F566DEC2693D54D24570A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
Manifest number: 0DBA
Signing time: Sun 11 Oct 2026 18:00:49 +0000
Manifest this update: Sun 11 Oct 2026 18:00:49 +0000
Manifest next update: Mon 12 Oct 2026 18:00:49 +0000
Files and hashes: 1: eaw_KDLii_O0OZBia4ceyJvvRgg.roa (hash: 785x1F9Iz8gQQoHICXoHX9Lh+Vh5PnxM3BQ0Ya5+hPc=)
2: sxk4vHICgkRLq9OyazSStFats5c.crl (hash: +EScjYZHp9gm7D2LB4SOJSEQpTs1Y1tc7DFHSEa86sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:1f:e4:77:a3:9f:56:6d:ec:26:93:d5:4d:24:57:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31938bc720282444babd3b26b3492b456adb397
Validity
Not Before: Oct 11 18:00:49 2026 GMT
Not After : Oct 12 18:00:49 2026 GMT
Subject: CN=b2a49f75c4d4fa3dc59ca75adce06f12f39ce17c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b6:42:53:f0:87:2d:df:f1:65:84:ca:82:e8:
5e:42:46:0c:d3:83:93:c7:21:02:b8:a2:59:06:ef:
c1:58:01:cf:69:31:d0:83:74:77:2a:7b:83:98:d0:
d5:a5:6f:02:6a:8a:5c:0c:c0:1e:78:83:51:5e:c4:
9f:ed:1f:53:a8:c7:8e:cd:a5:c5:0d:77:2f:ad:32:
16:90:68:97:75:51:04:97:5a:0b:53:07:0b:ec:72:
08:ad:77:ca:e0:99:31:dd:e9:79:e4:35:68:69:8c:
38:af:ab:08:91:c9:f1:e9:7e:53:f7:24:54:a8:65:
7b:1a:32:10:70:a7:56:e5:48:21:e1:88:b1:aa:31:
4b:da:ab:79:4a:70:4e:19:03:e4:d4:78:48:d3:c0:
4d:7c:d8:92:2f:04:f7:9d:28:d8:5f:7f:ae:97:8f:
13:1b:6d:11:e4:2d:51:08:b5:c6:f4:bf:fc:bb:df:
51:ba:26:f9:5c:5a:a6:3c:15:d4:03:e6:30:14:23:
f0:bf:fa:bd:82:91:23:92:0c:56:3f:ab:83:18:5c:
99:0d:10:9c:93:57:dd:bc:48:18:92:7d:09:f8:4a:
76:f4:45:43:d0:d4:48:5f:e3:2d:11:b4:03:e8:af:
dd:dd:40:aa:c4:01:68:bb:d8:25:ed:aa:47:eb:28:
32:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A4:9F:75:C4:D4:FA:3D:C5:9C:A7:5A:DC:E0:6F:12:F3:9C:E1:7C
X509v3 Authority Key Identifier:
keyid:B3:19:38:BC:72:02:82:44:4B:AB:D3:B2:6B:34:92:B4:56:AD:B3:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6e:b8:ab:ba:bc:58:3d:c9:8f:9c:aa:96:04:f4:d5:f5:8f:
02:be:72:cb:36:d8:dc:d0:54:50:19:a8:1a:e9:72:e8:54:8f:
46:a9:9f:f1:23:85:56:dc:20:67:f1:42:35:8f:51:82:37:52:
bd:21:b8:31:b1:5f:bb:11:ee:c5:a6:db:37:64:0a:79:22:d5:
b1:d8:f8:2d:71:83:eb:c2:87:ea:f5:fc:c3:04:fc:63:36:b4:
ed:5f:b5:f1:9a:33:c3:23:4b:74:12:d9:95:66:91:cc:99:05:
9a:4a:04:fe:53:97:1d:3d:37:6f:41:0f:4e:e9:39:b6:89:41:
a2:99:3d:88:61:9f:ff:b5:86:1c:6a:49:af:aa:2a:b8:b3:ed:
03:41:82:e3:47:9b:25:1c:6a:ec:78:7a:68:17:72:5e:da:73:
21:68:d6:b5:37:5a:27:c3:1c:cb:33:38:c9:12:20:f7:a0:98:
ee:e5:b8:6b:8d:44:23:03:b7:24:61:79:71:f2:26:0f:18:7d:
02:b1:92:71:90:77:69:ec:31:4b:c4:16:4f:b7:08:3d:a4:e7:
eb:1e:58:0b:52:34:d1:78:69:67:5b:44:ea:fc:ee:ee:b1:38:
a7:d5:43:03:8a:b9:99:0d:3a:aa:42:ff:b5:fd:4e:13:ea:76:
07:eb:8b:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEsH+R3o59Wbewmk9VNJFcKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMTkzOGJjNzIwMjgyNDQ0YmFiZDNiMjZiMzQ5MmI0NTZh
ZGIzOTcwHhcNMjYxMDExMTgwMDQ5WhcNMjYxMDEyMTgwMDQ5WjAzMTEwLwYDVQQD
EyhiMmE0OWY3NWM0ZDRmYTNkYzU5Y2E3NWFkY2UwNmYxMmYzOWNlMTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLZCU/CHLd/xZYTKguheQkYM04OT
xyECuKJZBu/BWAHPaTHQg3R3KnuDmNDVpW8CaopcDMAeeINRXsSf7R9TqMeOzaXF
DXcvrTIWkGiXdVEEl1oLUwcL7HIIrXfK4Jkx3el55DVoaYw4r6sIkcnx6X5T9yRU
qGV7GjIQcKdW5Ugh4YixqjFL2qt5SnBOGQPk1HhI08BNfNiSLwT3nSjYX3+ul48T
G20R5C1RCLXG9L/8u99Ruib5XFqmPBXUA+YwFCPwv/q9gpEjkgxWP6uDGFyZDRCc
k1fdvEgYkn0J+Ep29EVD0NRIX+MtEbQD6K/d3UCqxAFou9gl7apH6ygy6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLKkn3XE1Po9xZynWtzgbxLznOF8MB8GA1UdIwQY
MBaAFLMZOLxyAoJES6vTsms0krRWrbOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3hrNHZISUNna1JMcTlPeWF6U1N0RmF0czVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83NWRlZGUtNTQ0OS00ZDQ3LTliNTEt
OWI1ZGY4NWMxMTQwLzEvc3hrNHZISUNna1JMcTlPeWF6U1N0RmF0czVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC83NWRlZGUtNTQ0OS00ZDQ3LTliNTEtOWI1ZGY4NWMxMTQw
LzEvc3hrNHZISUNna1JMcTlPeWF6U1N0RmF0czVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKm64q7q8
WD3Jj5yqlgT01fWPAr5yyzbY3NBUUBmoGuly6FSPRqmf8SOFVtwgZ/FCNY9RgjdS
vSG4MbFfuxHuxabbN2QKeSLVsdj4LXGD68KH6vX8wwT8Yza07V+18ZozwyNLdBLZ
lWaRzJkFmkoE/lOXHT03b0EPTuk5tolBopk9iGGf/7WGHGpJr6oquLPtA0GC40eb
JRxq7Hh6aBdyXtpzIWjWtTdaJ8McyzM4yRIg96CY7uW4a41EIwO3JGF5cfImDxh9
ArGScZB3aewxS8QWT7cIPaTn6x5YC1I00XhpZ1tE6vzu7rE4p9VDA4q5mQ06qkL/
tf1OE+p2B+uLpw==
-----END CERTIFICATE-----
Generated at Sun Oct 11 22:20:04 2026 by rpki-client