Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
File: _SxsGlV_WItkfheRGmMA40LGYes.mft (raw, json)
Hash identifier: kPFeUeiRKtAbGnufX5fgNI4JedfeHIvNeMcQFJx7dLY=
Subject key identifier: C9:2B:FA:A4:88:FB:09:49:58:47:C0:50:4A:0D:3E:D2:DA:FF:72:6C
Authority key identifier: FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
Certificate issuer: /CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Certificate serial: 019F9FCD5FD9AE419BBBE88B1769C856EACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
Manifest number: 1102
Signing time: Sun 26 Jul 2026 19:01:04 +0000
Manifest this update: Sun 26 Jul 2026 19:01:04 +0000
Manifest next update: Mon 27 Jul 2026 19:01:04 +0000
Files and hashes: 1: _SxsGlV_WItkfheRGmMA40LGYes.crl (hash: tMJ7wt3HluIlHypGo8ENj3eBGOtYG5HgP3sJI2+AGAc=)
2: ybz_LJxmvXeX0zTpU2lRHbVV5as.roa (hash: s/QbbRettUJpmi4/wPM4zY/mnziqrGPExrreuVQcjVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:cd:5f:d9:ae:41:9b:bb:e8:8b:17:69:c8:56:ea:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Validity
Not Before: Jul 26 19:01:04 2026 GMT
Not After : Jul 27 19:01:04 2026 GMT
Subject: CN=c92bfaa488fb09495847c0504a0d3ed2daff726c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2c:8c:c8:4b:f6:c5:b7:a0:e2:11:34:f3:ee:
8f:7b:f0:5b:11:ee:de:c2:e1:17:d1:9a:37:e2:af:
6b:08:50:26:71:ed:3c:f9:b7:18:8a:4a:ca:ec:ec:
b9:55:f2:ca:88:20:3f:77:b9:d7:46:4d:58:df:bd:
f4:71:30:ed:79:98:30:f3:6c:2a:96:87:e8:83:62:
3a:1b:1b:ce:4f:db:13:05:54:66:5f:0c:82:99:3f:
84:59:81:0d:ed:83:e4:a5:5d:e2:8b:5e:73:44:c1:
da:05:89:07:4b:27:0a:be:18:06:59:53:72:12:40:
d4:13:4e:ae:b4:af:e1:f0:77:e8:a1:7b:4d:e8:41:
0b:10:f1:3b:ac:3a:42:ba:ee:c1:f3:3a:bd:60:be:
ac:1f:48:bd:90:f2:8c:a4:75:a7:62:6f:c1:a5:f2:
1a:f5:f2:6c:8e:56:86:f7:63:21:10:5d:ab:ab:67:
c4:b4:9c:ab:f1:b3:41:0a:2a:bf:91:64:9b:95:7f:
19:68:a7:91:74:12:cd:7e:95:0e:7d:a3:cb:56:39:
d4:80:20:ff:86:fb:c5:c2:fa:42:87:f9:ad:f8:b5:
55:e7:2a:31:5c:12:63:67:a2:31:43:99:95:58:23:
55:ce:d3:a1:89:40:41:d2:0d:16:e2:48:7a:72:b2:
48:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2B:FA:A4:88:FB:09:49:58:47:C0:50:4A:0D:3E:D2:DA:FF:72:6C
X509v3 Authority Key Identifier:
keyid:FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:49:81:a2:92:d7:6e:c2:e9:55:f6:53:2f:e4:b2:1f:9f:b0:
a5:b4:0b:06:29:a0:69:14:2c:b5:f0:cd:cf:ca:54:7c:eb:c7:
de:77:26:15:a2:59:5c:77:ea:5b:e4:74:d3:06:e3:ac:f7:0c:
82:b7:89:b3:db:e8:91:fc:2e:b1:3f:09:cd:fa:59:d4:2f:63:
30:e1:fd:f6:51:b7:3c:1d:7d:fd:e3:80:b1:32:c2:09:31:a4:
aa:40:09:ea:eb:48:ae:89:06:4c:ce:d1:25:28:13:ef:ef:e3:
2e:31:e4:ab:e9:cc:de:87:70:3c:e1:61:df:b2:6b:c5:ca:a6:
a7:c8:aa:e9:0e:19:b6:f8:14:7c:e8:a8:34:64:35:d6:09:a7:
db:f6:18:e1:9b:9b:21:14:15:8e:b8:b0:0e:01:be:68:8e:72:
87:13:48:53:95:5d:ab:58:3d:d6:c9:f4:64:51:d5:11:8d:80:
96:95:b8:47:39:86:e1:80:e4:9d:70:d1:46:bb:b7:d7:82:6c:
68:11:f9:63:5f:ec:39:3d:a2:43:55:ee:a2:35:71:17:0e:bd:
63:f9:03:55:24:0a:e4:f3:d1:89:3f:3d:43:66:d3:55:e4:67:
47:39:9d:a2:35:93:73:30:b9:9f:d9:16:5a:e8:60:1c:5b:e5:
8c:e7:1e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:03:22 2026 by rpki-client