Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
File: sxU2q-49e1S4MDubxpqKq76XAOQ.mft (raw, json)
Hash identifier: yrHesR70gyvaTnMPxeJad5oSMn79Z0wqkDOrnpIlVAI=
Subject key identifier: 35:96:33:5C:5C:4A:99:A4:43:82:C1:33:38:5E:9F:F6:00:43:77:69
Authority key identifier: B3:15:36:AB:EE:3D:7B:54:B8:30:3B:9B:C6:9A:8A:AB:BE:97:00:E4
Certificate issuer: /CN=b31536abee3d7b54b8303b9bc69a8aabbe9700e4
Certificate serial: 019D37890A73CDFD056783DE45B63CE6C7F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
Manifest number: 0AA4
Signing time: Sun 29 Mar 2026 03:00:21 +0000
Manifest this update: Sun 29 Mar 2026 03:00:21 +0000
Manifest next update: Mon 30 Mar 2026 03:00:21 +0000
Files and hashes: 1: AZQrl-Fp_XZDQj5jRrIIFtOdVJY.roa (hash: kcWKwgXv8rCa1D22N2vYzSu4ZKjgkLNHlxiOMaTJr0g=)
2: sxU2q-49e1S4MDubxpqKq76XAOQ.crl (hash: l/IpwT3prqiU4bTkCDBeieKEpgGvi+AOmUeLeYZ4kUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:0a:73:cd:fd:05:67:83:de:45:b6:3c:e6:c7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31536abee3d7b54b8303b9bc69a8aabbe9700e4
Validity
Not Before: Mar 29 03:00:21 2026 GMT
Not After : Mar 30 03:00:21 2026 GMT
Subject: CN=3596335c5c4a99a44382c133385e9ff600437769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cb:63:02:7b:59:c2:e9:32:47:d9:66:d5:d9:
40:df:9d:9f:83:6e:3b:14:6b:d9:eb:ee:39:53:49:
8e:d9:39:65:20:85:34:3c:50:86:86:af:e1:a0:78:
8c:f9:9b:28:3c:4e:aa:37:4d:f4:b7:a4:0d:62:db:
d3:e3:86:5a:32:3f:ec:8e:d8:16:e0:53:6f:66:61:
c9:09:b0:ee:31:99:86:00:91:51:4d:76:da:ca:4d:
c2:f3:59:ed:4f:82:45:74:48:5d:cb:19:4a:a7:54:
47:9f:a6:9f:49:ca:25:aa:da:a0:f7:84:6b:13:02:
d4:b9:6c:c8:24:da:3d:25:8f:aa:43:d0:74:8e:ee:
e7:a2:eb:ad:bf:f5:b0:8c:d9:f0:37:b8:3e:cb:46:
72:bd:67:b5:a9:23:aa:8f:27:73:f3:ad:63:1a:7d:
91:da:17:30:d7:1a:1c:20:65:ad:1c:53:eb:6b:e9:
8b:66:65:3b:1e:fc:d8:c1:09:78:4b:15:a9:23:0e:
71:f1:01:0c:a2:3e:c0:27:68:16:dd:49:ee:9c:c1:
13:59:1a:00:32:8c:cf:57:c7:75:8f:53:3b:ea:49:
c5:1b:1f:a3:e0:89:9a:91:f2:39:ca:1c:fd:7a:84:
62:95:13:16:c1:88:33:1a:87:05:48:71:ba:67:65:
27:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:96:33:5C:5C:4A:99:A4:43:82:C1:33:38:5E:9F:F6:00:43:77:69
X509v3 Authority Key Identifier:
keyid:B3:15:36:AB:EE:3D:7B:54:B8:30:3B:9B:C6:9A:8A:AB:BE:97:00:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:df:d0:f2:60:e1:32:ad:9e:29:5a:d7:41:bf:f0:9c:ab:0b:
57:3f:20:f5:97:6e:f8:8f:54:06:5b:60:31:02:2c:d7:67:49:
18:b2:55:e7:4a:03:d8:f1:75:c1:a3:4f:72:ec:ae:66:e8:05:
7b:af:87:43:93:35:a3:37:57:e2:59:90:87:fe:05:a5:cd:93:
54:b7:90:48:82:13:42:50:dd:a9:2e:87:ce:dd:4a:b9:71:9a:
b6:d8:5a:b4:9e:81:96:e7:b3:11:d0:07:4f:0d:3e:b8:7b:46:
c5:2a:ca:ab:d0:b8:b5:78:81:d3:0d:7d:cc:5c:0e:c8:72:33:
7d:39:ea:2b:8d:86:32:c2:02:78:94:82:1d:2d:44:b8:7a:9c:
92:e0:f5:ab:c1:93:91:a6:e7:f7:70:87:f5:0b:b5:a1:96:04:
ea:b3:1b:62:aa:d6:ac:92:99:5b:c9:77:d6:50:27:b2:f8:bf:
67:02:90:7e:7b:f0:22:b8:e2:b8:86:42:72:47:52:84:a1:3d:
50:ca:78:3f:9f:b8:f9:a8:90:64:62:bd:4e:ff:37:bf:73:de:
50:8e:4c:d8:69:61:b3:af:e3:fa:c0:fa:f7:3c:6d:ff:bb:89:
de:cb:69:3f:d2:b4:b4:9e:02:a3:c6:25:7d:66:70:ed:81:a5:
2e:a5:1f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:20 2026 by rpki-client