Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
File: sx0cKJHYgEaaINi38Y5M2GVDAEY.mft (raw, json)
Hash identifier: V1Mm9O+gR6PNbIwhp0PDF/yKTyiA4nKJQuTiXrzTAfw=
Subject key identifier: 43:E2:28:FD:76:15:AF:4D:2C:AB:9F:C2:19:BA:7E:DB:5E:CB:CE:CB
Authority key identifier: B3:1D:1C:28:91:D8:80:46:9A:20:D8:B7:F1:8E:4C:D8:65:43:00:46
Certificate issuer: /CN=b31d1c2891d880469a20d8b7f18e4cd865430046
Certificate serial: 019D39419284293858BA4AA4E0EE0FB1D5DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
Manifest number: 0572
Signing time: Sun 29 Mar 2026 11:01:31 +0000
Manifest this update: Sun 29 Mar 2026 11:01:31 +0000
Manifest next update: Mon 30 Mar 2026 11:01:31 +0000
Files and hashes: 1: nZ-MC578XDNoxF9WT_GxSRoreCI.roa (hash: P9N+z+cz6t9cJMJHuc2G7Ay4P8kV4Zg2jsXlf/jTUFo=)
2: sx0cKJHYgEaaINi38Y5M2GVDAEY.crl (hash: KX3DQV0wwMSHcX3raC6yA2y2oE3PrA7gWSzaMG/hbiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:92:84:29:38:58:ba:4a:a4:e0:ee:0f:b1:d5:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31d1c2891d880469a20d8b7f18e4cd865430046
Validity
Not Before: Mar 29 11:01:31 2026 GMT
Not After : Mar 30 11:01:31 2026 GMT
Subject: CN=43e228fd7615af4d2cab9fc219ba7edb5ecbcecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e8:0c:49:82:ea:50:da:e6:95:0b:03:38:51:
4e:d7:ed:cb:5d:88:d1:59:d8:02:db:f5:c9:e6:5e:
a7:73:6b:c4:32:c9:71:59:c5:b5:71:7e:4e:0e:0b:
7f:93:34:a8:02:66:1c:90:cb:c3:14:b7:4b:ae:1b:
6e:32:d3:e4:d3:9c:bb:ec:75:02:8d:87:26:2c:ef:
ed:33:c0:07:70:13:57:22:3c:7c:13:c2:81:01:a3:
1a:4e:94:3c:6a:ca:78:71:b0:b4:6b:0e:28:56:bf:
c6:0d:38:80:58:ca:c9:be:4f:61:2f:69:55:73:63:
2c:36:42:ce:b1:b1:42:5a:2b:79:3b:50:f2:d0:f3:
a0:8c:53:21:cc:01:9c:31:21:8e:b6:82:fa:78:46:
33:64:cc:c2:0c:d2:03:82:7c:c4:ef:ee:e7:fd:88:
ee:35:30:77:c7:a3:81:c2:ca:77:10:b3:c4:17:ad:
ac:0d:1c:cc:52:b1:ac:36:e2:91:96:69:d1:da:6b:
9d:81:28:30:ac:87:d4:f1:bc:15:dd:e7:bd:8f:a9:
cf:ee:43:a0:5f:e5:fb:7d:60:9d:45:95:ff:59:10:
84:21:4d:b8:a3:1c:17:05:09:72:3f:2b:26:14:f6:
e8:6c:23:da:be:09:4d:5f:4e:c4:8a:1b:74:8b:b7:
6e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E2:28:FD:76:15:AF:4D:2C:AB:9F:C2:19:BA:7E:DB:5E:CB:CE:CB
X509v3 Authority Key Identifier:
keyid:B3:1D:1C:28:91:D8:80:46:9A:20:D8:B7:F1:8E:4C:D8:65:43:00:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b8:96:ed:25:b3:59:50:f3:c5:2b:58:3a:9a:5c:1e:0e:33:
2a:4e:a1:5b:41:5b:e5:00:e5:9d:29:a0:2d:ed:ed:1f:f5:e1:
45:9c:8c:f2:1b:96:27:46:a3:e2:ab:9a:12:28:37:d0:c4:32:
38:b2:f1:fc:09:75:ee:0f:4d:73:d6:b2:cf:1d:df:15:e3:71:
2b:bb:8d:74:db:f7:43:a6:35:c5:ad:e8:12:ba:64:0a:51:4a:
58:38:00:a5:69:fb:09:89:8a:ae:5b:97:88:ba:01:87:4f:c1:
01:f1:af:44:44:14:f2:29:6e:d4:f2:41:d0:c2:16:ff:0a:d6:
8d:95:ff:5a:5b:ef:68:84:e3:a1:71:2c:eb:2a:2d:c0:9c:94:
9a:68:ca:c1:6c:14:6e:b6:11:71:7c:11:12:26:3e:35:5f:61:
cf:75:94:e8:ab:95:f6:f7:18:eb:84:88:df:9b:a5:02:88:f3:
ce:72:9d:a7:83:ba:bc:9d:3e:0b:0c:84:0b:26:60:69:d9:21:
37:b6:54:14:96:89:1c:23:b5:95:02:65:57:77:b3:2e:f5:81:
f0:e5:29:a5:fb:8d:dc:01:04:f2:d2:8b:59:b4:ba:19:a6:d8:
0e:63:eb:88:5c:d9:ce:fe:fd:6e:03:47:0c:a6:34:4f:d1:34:
6a:44:b4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:43 2026 by rpki-client