Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
File: SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft (raw, json)
Hash identifier: X58aUR8J6VofsqXCB/qNsNj9CiYTkRCAQKK2Ay+B1x8=
Subject key identifier: 99:C6:FA:F6:91:D9:06:53:89:32:16:9A:25:8A:E4:84:87:CB:B0:5B
Authority key identifier: 4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB
Certificate issuer: /CN=4b1a238e043fe063a723b63159015393a64afceb
Certificate serial: 019D38D2B3AAA5A7EFB5154E3CEC51FB6FF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
Manifest number: 07BB
Signing time: Sun 29 Mar 2026 09:00:25 +0000
Manifest this update: Sun 29 Mar 2026 09:00:25 +0000
Manifest next update: Mon 30 Mar 2026 09:00:25 +0000
Files and hashes: 1: L4GTgn9egBv7X8ozBy3W1tdX8eU.roa (hash: WLET1VlxTbzpa1IgY9ty4OjbAIQ5DWuzb+zM7ZHvhBc=)
2: SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl (hash: S+R0RC5WUYy9CeocYZ8QUMtWpGIdwkxABJO9yzCR/U8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:b3:aa:a5:a7:ef:b5:15:4e:3c:ec:51:fb:6f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b1a238e043fe063a723b63159015393a64afceb
Validity
Not Before: Mar 29 09:00:25 2026 GMT
Not After : Mar 30 09:00:25 2026 GMT
Subject: CN=99c6faf691d906538932169a258ae48487cbb05b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3d:66:af:f2:2d:5d:4e:30:12:c5:01:72:90:
0a:27:b2:a6:55:d6:fd:b7:e2:1f:ee:97:84:4f:f0:
7a:f2:6b:59:52:29:b1:2e:ca:3c:60:f5:d9:f2:e9:
a3:14:dd:82:a9:b9:c6:af:d1:78:12:21:54:0b:44:
ad:80:08:cf:21:42:c8:b2:9f:63:d4:2a:85:ee:e3:
be:36:39:ee:6e:3e:76:57:68:b6:67:9c:8b:ee:81:
1c:c1:c4:8a:97:38:9c:37:91:65:d0:86:cc:43:86:
19:0d:00:20:60:ab:93:97:b9:f1:5b:f2:3c:b4:cc:
ee:5f:db:ff:c5:fa:c9:2b:ff:ff:95:8e:fc:d2:ed:
b7:0e:82:cc:b4:3b:5e:7f:60:39:a5:c0:d4:54:97:
62:59:9f:7d:32:45:8f:1f:8d:3d:c2:81:9d:cb:c5:
27:54:9f:7e:c8:68:32:00:fa:35:20:9d:cd:ce:96:
3f:6b:96:af:6c:77:2c:a8:e3:3d:fb:af:25:0a:30:
ac:4b:d9:fc:e6:f6:23:a2:0b:08:be:60:cd:6d:f6:
2d:b5:bd:ea:10:a1:e0:a4:a6:bd:17:32:b3:33:cc:
4b:85:a5:d9:68:4e:92:5d:ee:c7:5d:eb:64:ce:87:
cb:47:24:72:82:44:92:86:88:d2:5b:b0:aa:ba:98:
ca:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C6:FA:F6:91:D9:06:53:89:32:16:9A:25:8A:E4:84:87:CB:B0:5B
X509v3 Authority Key Identifier:
keyid:4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:30:01:0e:b5:3d:ee:ab:e3:28:4b:46:e0:4b:4d:9d:f7:95:
67:75:44:c0:c0:86:6f:34:7a:9a:85:4c:55:42:8c:5d:c4:27:
63:69:06:49:88:2c:b6:8d:20:f5:67:85:30:4c:1d:5c:01:34:
69:6d:b3:46:39:8d:92:e3:e8:47:26:56:ff:19:d6:ae:f7:c8:
08:91:c7:44:15:62:ae:2c:e2:8a:f8:d6:54:0f:2b:e5:63:19:
29:3a:3b:2c:7c:44:ea:28:e9:23:0c:f8:b7:bc:d6:f2:59:ba:
d0:15:4a:b5:bb:fa:0d:1f:6b:59:03:2e:40:1c:9e:ea:38:8d:
73:2b:f2:9b:08:50:6b:e2:bb:63:0c:3f:eb:80:09:6c:59:c6:
98:5b:e0:64:de:78:4a:44:79:a2:4f:3c:f0:bc:7e:e1:19:49:
5b:b8:4a:30:06:3b:d3:3f:a4:e2:dc:29:8d:69:0a:82:c2:82:
f0:32:3f:62:94:b8:b7:6e:d6:e8:c0:67:07:8a:2b:b7:ee:42:
15:98:9c:50:51:ee:77:91:4b:fd:06:26:36:41:c6:04:2b:e4:
0c:5e:38:b7:8b:01:6e:fb:90:95:52:5b:ab:f4:1c:da:d6:33:
18:3c:9d:ac:63:64:90:f8:8c:c2:f7:02:bd:b9:46:e0:41:e9:
00:38:3a:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040rOqpafvtRVOPOxR+2/2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMWEyMzhlMDQzZmUwNjNhNzIzYjYzMTU5MDE1MzkzYTY0
YWZjZWIwHhcNMjYwMzI5MDkwMDI1WhcNMjYwMzMwMDkwMDI1WjAzMTEwLwYDVQQD
Eyg5OWM2ZmFmNjkxZDkwNjUzODkzMjE2OWEyNThhZTQ4NDg3Y2JiMDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjz1mr/ItXU4wEsUBcpAKJ7KmVdb9
t+If7peET/B68mtZUimxLso8YPXZ8umjFN2CqbnGr9F4EiFUC0StgAjPIULIsp9j
1CqF7uO+Njnubj52V2i2Z5yL7oEcwcSKlzicN5Fl0IbMQ4YZDQAgYKuTl7nxW/I8
tMzuX9v/xfrJK///lY780u23DoLMtDtef2A5pcDUVJdiWZ99MkWPH409woGdy8Un
VJ9+yGgyAPo1IJ3NzpY/a5avbHcsqOM9+68lCjCsS9n85vYjogsIvmDNbfYttb3q
EKHgpKa9FzKzM8xLhaXZaE6SXe7HXetkzofLRyRygkSShojSW7CqupjKDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnG+vaR2QZTiTIWmiWK5ISHy7BbMB8GA1UdIwQY
MBaAFEsaI44EP+BjpyO2MVkBU5OmSvzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3hvampnUV80R09uSTdZeFdRRlRrNlpLX09zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi85YTFlNmYtMmUxYy00NzQzLWE3YTYt
MDZmMzY2MjhjOGExLzEvU3hvampnUV80R09uSTdZeFdRRlRrNlpLX09zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi85YTFlNmYtMmUxYy00NzQzLWE3YTYtMDZmMzY2MjhjOGEx
LzEvU3hvampnUV80R09uSTdZeFdRRlRrNlpLX09zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwDABDrU9
7qvjKEtG4EtNnfeVZ3VEwMCGbzR6moVMVUKMXcQnY2kGSYgsto0g9WeFMEwdXAE0
aW2zRjmNkuPoRyZW/xnWrvfICJHHRBViriziivjWVA8r5WMZKTo7LHxE6ijpIwz4
t7zW8lm60BVKtbv6DR9rWQMuQBye6jiNcyvymwhQa+K7Yww/64AJbFnGmFvgZN54
SkR5ok888Lx+4RlJW7hKMAY70z+k4twpjWkKgsKC8DI/YpS4t27W6MBnB4ort+5C
FZicUFHud5FL/QYmNkHGBCvkDF44t4sBbvuQlVJbq/Qc2tYzGDydrGNkkPiMwvcC
vblG4EHpADg6FQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:47 2026 by rpki-client