Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
File: sx0cKJHYgEaaINi38Y5M2GVDAEY.mft (raw, json)
Hash identifier: MB1eS1Mi+peRjGsJdDrwuGTWYzVbUMiHRKDlnkcyu7Q=
Subject key identifier: 37:EA:3B:15:6A:48:8D:FE:68:C6:F8:1A:25:FC:E3:F6:32:68:77:DA
Authority key identifier: B3:1D:1C:28:91:D8:80:46:9A:20:D8:B7:F1:8E:4C:D8:65:43:00:46
Certificate issuer: /CN=b31d1c2891d880469a20d8b7f18e4cd865430046
Certificate serial: 019E498E4E25E3011C7EB6BF92C06B42A86F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
Manifest number: 05FF
Signing time: Thu 21 May 2026 08:02:03 +0000
Manifest this update: Thu 21 May 2026 08:02:03 +0000
Manifest next update: Fri 22 May 2026 08:02:03 +0000
Files and hashes: 1: nZ-MC578XDNoxF9WT_GxSRoreCI.roa (hash: P9N+z+cz6t9cJMJHuc2G7Ay4P8kV4Zg2jsXlf/jTUFo=)
2: sx0cKJHYgEaaINi38Y5M2GVDAEY.crl (hash: PPWBffB2QlSgStNe0BZBXeohwlWCcpPysYW+bE8aRUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:49:8e:4e:25:e3:01:1c:7e:b6:bf:92:c0:6b:42:a8:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31d1c2891d880469a20d8b7f18e4cd865430046
Validity
Not Before: May 21 08:02:03 2026 GMT
Not After : May 22 08:02:03 2026 GMT
Subject: CN=37ea3b156a488dfe68c6f81a25fce3f6326877da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:08:1f:a4:ad:60:77:10:60:0b:23:33:01:b6:
13:e5:c6:a5:ff:e0:18:fa:4f:3c:5b:e1:d9:47:16:
76:33:f6:8e:40:1a:ac:a5:09:58:f4:7a:e1:37:2f:
d0:6c:ba:8a:28:f1:4d:64:f5:ef:f5:00:a0:ac:33:
23:fb:47:6b:fc:9c:9c:db:b1:a7:ec:92:ae:a8:58:
05:33:dc:15:47:73:98:e5:93:75:62:90:07:6e:4a:
01:2d:cb:37:45:a8:a7:8b:cb:56:f6:ca:f4:fc:3f:
e9:9e:24:e8:0e:12:c5:cd:99:f8:d3:07:98:d3:22:
62:c8:5f:a0:50:07:e1:9a:f4:bd:f1:96:81:ec:da:
5d:fc:db:b4:82:25:9e:9a:e9:ef:ec:6b:12:40:32:
14:40:c3:ad:d5:81:aa:de:b3:19:ca:4d:d6:87:ed:
46:ee:7d:91:ac:8e:e1:4c:c2:0d:0c:1e:19:6d:8c:
bf:b7:88:d7:b2:d7:08:e8:9c:8a:0b:17:88:b5:4b:
49:f2:db:96:c1:58:8a:90:1f:f0:de:73:68:ef:9b:
bb:c3:63:75:3d:c8:2c:d7:f3:8e:cd:ba:c6:64:9a:
02:37:ac:94:e4:5f:33:6e:7c:4c:91:3f:41:5a:52:
d5:2f:53:3f:fc:c1:09:14:73:32:2e:0c:ec:8f:c5:
f3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EA:3B:15:6A:48:8D:FE:68:C6:F8:1A:25:FC:E3:F6:32:68:77:DA
X509v3 Authority Key Identifier:
keyid:B3:1D:1C:28:91:D8:80:46:9A:20:D8:B7:F1:8E:4C:D8:65:43:00:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ba:d9:fa:cf:6a:4e:4c:71:e1:2b:b5:d1:ed:e5:83:01:8a:
6e:19:5f:e8:9f:a4:67:af:6c:a3:40:14:03:fa:9e:a3:d6:43:
d7:94:8b:a9:0d:5c:8f:70:87:7c:00:6d:91:3b:17:3c:b3:0d:
cc:0f:43:68:d6:ac:b9:60:c7:e7:0e:bb:07:a6:d1:a7:df:4a:
25:f4:b4:1e:c9:8f:17:f7:45:bd:5e:92:3f:1b:bd:f6:9d:85:
96:28:cd:6f:c8:8d:96:bc:a2:5d:61:41:31:c9:4b:cf:86:5f:
b5:43:b5:0c:86:15:15:be:83:9b:57:24:9a:3d:69:d8:d4:18:
e6:39:7e:ca:a0:e7:b1:8b:6d:ef:96:8e:c5:dd:56:5d:73:57:
c4:2f:a0:35:46:a5:5c:b4:e5:c0:af:7d:70:1b:ae:b7:0f:3f:
98:af:ca:9c:cf:1d:ff:e4:28:1a:ff:6b:77:82:f2:5b:2f:bb:
cf:cf:3b:58:bc:a0:eb:71:25:ed:60:81:df:b1:57:66:00:59:
02:6a:d2:5a:04:ef:0a:f0:f2:73:0c:10:5f:98:a3:7b:23:07:
0e:59:73:ea:65:68:12:2a:6f:63:df:ee:be:91:0c:6d:2b:3e:
dd:88:73:f1:15:60:52:a7:38:dc:4e:8f:3d:36:b8:7b:34:ac:
7b:e9:b9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 13:23:45 2026 by rpki-client