Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft
File: SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft (raw, json)
Hash identifier: /pyEN7CVYPb2IGVYV+2HMlkpPQV6pzV4D35PPagbv5c=
Subject key identifier: A5:93:22:51:AC:F6:54:E6:19:32:69:6E:9E:E6:54:0B:4B:E4:5B:F8
Authority key identifier: 4B:1C:DC:B9:0B:98:32:01:67:48:A7:E2:68:CC:1E:FF:23:92:62:F8
Certificate issuer: /CN=4b1cdcb90b9832016748a7e268cc1eff239262f8
Certificate serial: 019D386581B7A41092A27A2B01CEF542A9F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft
Manifest number: 15CC
Signing time: Sun 29 Mar 2026 07:01:09 +0000
Manifest this update: Sun 29 Mar 2026 07:01:09 +0000
Manifest next update: Mon 30 Mar 2026 07:01:09 +0000
Files and hashes: 1: HVNyPpshDup5-VV20Zvos0kqjfw.roa (hash: feauyuxnsf6ozUYlBnDdKhJOIjOdxAMV8HCT2qzKw9w=)
2: SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl (hash: P6hAqx89DYe2Eo0PyFvx3pkhnW723GdQyS01KY6Fu9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:81:b7:a4:10:92:a2:7a:2b:01:ce:f5:42:a9:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b1cdcb90b9832016748a7e268cc1eff239262f8
Validity
Not Before: Mar 29 07:01:09 2026 GMT
Not After : Mar 30 07:01:09 2026 GMT
Subject: CN=a5932251acf654e61932696e9ee6540b4be45bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:26:70:ef:fa:78:be:bb:89:f4:94:f4:e6:6f:
93:e0:8f:9f:3c:b7:8a:46:a9:e7:86:4b:4b:a2:fc:
7e:46:c4:ca:d6:15:f6:1d:3d:15:e0:e3:22:63:3a:
61:76:da:c4:fe:6c:95:a1:94:fd:c0:0b:0d:81:f8:
71:39:20:ac:8d:6e:53:66:6d:05:ea:35:e9:e9:bf:
34:dd:49:be:07:78:6f:64:84:ba:d6:cd:95:16:90:
39:6f:74:a0:90:b2:85:4c:ff:a0:f8:85:e9:6b:53:
4e:ec:81:f7:e5:bc:bf:60:2a:24:2c:4a:f8:7d:f1:
dd:b1:7d:6b:c9:69:f5:f8:3b:bd:52:55:8f:77:96:
cc:a4:94:67:96:4c:00:b5:af:ac:c4:19:88:00:51:
e0:65:3f:72:5d:13:3c:6f:b5:e4:7c:54:a7:4f:4b:
e0:06:e5:ee:09:32:03:c0:03:3c:a0:69:ac:26:87:
4d:91:a1:1c:15:7a:44:6f:3a:81:0a:d1:88:e4:5a:
e3:25:72:cd:26:59:21:47:97:87:b9:c5:1a:8f:f7:
43:48:25:3d:6a:de:3f:ff:99:72:4c:e5:d9:31:9c:
90:6c:e4:ff:af:fc:66:ee:f0:d0:7f:d0:59:92:32:
3b:d3:c2:c4:69:9a:a0:f3:f4:86:09:2b:16:6e:c1:
d0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:93:22:51:AC:F6:54:E6:19:32:69:6E:9E:E6:54:0B:4B:E4:5B:F8
X509v3 Authority Key Identifier:
keyid:4B:1C:DC:B9:0B:98:32:01:67:48:A7:E2:68:CC:1E:FF:23:92:62:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:00:9f:04:f6:64:1d:4f:56:77:c7:6e:b7:fe:f3:0e:85:49:
17:f3:19:19:8e:ba:3d:f2:1e:55:a6:ef:26:95:18:e4:ee:5e:
bd:98:90:18:68:09:4d:b7:5b:12:a4:f1:e8:fa:6b:55:89:e3:
0f:b4:cc:88:52:a9:6c:cf:cf:2f:bb:1f:49:ef:70:40:72:66:
df:d1:2b:0a:dc:88:51:86:bb:2f:88:1b:65:4f:5b:62:b3:c2:
95:4b:2f:50:5e:2b:75:a4:a2:55:df:51:91:e2:ed:6d:33:99:
61:6e:cd:f2:d7:c4:dc:91:9e:ea:c6:99:58:19:cf:2c:48:0f:
be:c4:da:5b:b7:56:7e:f5:ea:13:53:9f:cc:fe:9c:61:ad:fc:
1d:6f:4b:06:a4:dd:23:04:f8:ff:3e:a3:10:9e:6d:ad:21:cb:
82:5f:b8:12:32:18:02:91:1e:6f:20:9c:b5:b9:77:07:bf:b0:
f7:53:04:73:1b:9d:e8:81:b6:8b:08:39:b5:0d:d9:b8:a3:fe:
de:5e:d4:0c:a5:f0:03:72:a9:a9:0d:89:f3:10:fc:b5:43:89:
78:47:60:cc:51:4b:17:61:6f:e5:50:d4:75:a3:40:88:5f:0d:
5b:25:65:d6:2f:c8:01:09:02:69:d8:b7:ab:d2:8a:26:c0:94:
be:96:ff:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:25:05 2026 by rpki-client