Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
File: _SxsGlV_WItkfheRGmMA40LGYes.mft (raw, json)
Hash identifier: aSu4gzluscZUSUlvS7ltjlbCyhWok031gP4HzH1Cc54=
Subject key identifier: 3F:1E:63:85:23:A4:5B:33:39:5F:D4:9F:35:C9:DC:A3:93:5C:D3:E0
Authority key identifier: FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
Certificate issuer: /CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Certificate serial: 019EB62029D193833497D8A9A586711FEC3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
Manifest number: 1089
Signing time: Thu 11 Jun 2026 10:00:21 +0000
Manifest this update: Thu 11 Jun 2026 10:00:21 +0000
Manifest next update: Fri 12 Jun 2026 10:00:21 +0000
Files and hashes: 1: _SxsGlV_WItkfheRGmMA40LGYes.crl (hash: phtcDyExd1RGD6aCnzSRuxKQPKoa1RG/7VimFIgxMNw=)
2: ybz_LJxmvXeX0zTpU2lRHbVV5as.roa (hash: s/QbbRettUJpmi4/wPM4zY/mnziqrGPExrreuVQcjVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:20:29:d1:93:83:34:97:d8:a9:a5:86:71:1f:ec:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Validity
Not Before: Jun 11 10:00:21 2026 GMT
Not After : Jun 12 10:00:21 2026 GMT
Subject: CN=3f1e638523a45b33395fd49f35c9dca3935cd3e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:af:e0:88:ca:6a:05:45:db:e5:6c:5c:62:0b:
8a:26:0a:0a:cc:12:41:08:51:64:e4:06:4e:57:4a:
a0:d4:fe:76:c1:b8:9d:f6:15:f6:fb:e5:c9:8c:a3:
9d:af:da:0f:16:15:2b:b8:15:df:33:3e:7b:4d:d4:
25:89:7a:d2:58:8b:49:2b:fa:61:81:95:51:6e:65:
e3:83:8b:9d:93:88:08:e3:d2:5d:0d:d9:d2:ee:6e:
ab:3e:87:d2:8f:ec:35:fc:96:42:81:02:4b:9f:8c:
d6:bc:07:b2:e9:58:41:de:ec:fd:ac:28:3a:4d:02:
fe:3b:ae:8d:64:5e:ba:24:7e:9d:3e:b9:71:aa:cd:
9e:d1:86:7a:f1:19:72:6b:c6:53:5f:98:4c:cd:46:
2f:92:cd:e9:17:78:9d:e9:5c:55:74:a3:44:4c:5f:
d0:75:81:66:32:c1:12:d9:af:7e:12:93:fc:76:e7:
47:28:74:ad:e9:89:80:ae:4a:8e:79:cb:54:6e:5b:
d0:1e:27:29:e5:32:62:ac:f6:d9:43:c8:63:30:d2:
d6:da:dc:fa:9b:15:fe:45:42:c8:01:77:97:34:5a:
bf:ad:ca:f3:80:7c:39:e3:5d:70:62:fc:3e:e7:6e:
f1:35:c5:14:e2:d5:21:9f:7f:06:04:a7:9c:39:d2:
23:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1E:63:85:23:A4:5B:33:39:5F:D4:9F:35:C9:DC:A3:93:5C:D3:E0
X509v3 Authority Key Identifier:
keyid:FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:44:ac:18:1f:86:7d:1a:ed:bb:c5:62:3f:a2:97:fe:29:ec:
b1:f8:f8:56:0e:c4:fd:82:8f:d4:cc:ed:96:0e:06:0b:ab:5b:
cb:14:59:7c:19:1e:54:f0:50:c9:93:cd:35:b7:49:f0:83:d1:
b5:7b:41:b4:5a:83:f1:ab:77:9a:ff:1c:b1:af:d8:84:50:ee:
c2:4a:03:dd:be:65:50:01:4b:e3:fc:61:7c:6c:52:7c:db:9a:
b6:95:9e:68:25:fd:4e:eb:5c:2e:e3:10:48:12:5c:f1:f2:01:
ab:46:b4:2f:c3:ad:a6:01:4c:93:d4:bf:38:d4:60:8b:c9:a9:
da:e1:77:17:1b:72:98:69:6e:01:05:9c:70:9a:fa:7c:00:7d:
4f:fd:7d:3b:8c:d6:54:29:a2:f0:0f:f2:9c:b1:37:b0:94:74:
a2:8d:26:ef:7e:ec:aa:89:06:7c:56:fe:9f:e4:9c:43:ca:7b:
5e:53:34:df:b2:2c:24:9d:3a:b9:d4:9d:41:d2:3a:f4:69:94:
95:53:16:46:e0:ee:e8:0c:8b:be:76:3e:39:f6:ba:53:12:e4:
01:e7:96:a5:a3:67:bb:31:ba:d5:76:cb:39:2e:8b:2b:01:2a:
50:d3:0d:98:a6:c6:26:70:29:2f:31:45:20:6d:59:ca:41:5e:
29:b1:55:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 13:05:52 2026 by rpki-client