Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
File: _SxsGlV_WItkfheRGmMA40LGYes.mft (raw, json)
Hash identifier: usWDncmY3DKMH74RPZ84O8m55IGfbYZixImfu/nr01E=
Subject key identifier: 27:9A:B2:50:F7:E8:89:C2:E6:9E:05:41:25:DF:0C:27:9E:23:D4:6C
Authority key identifier: FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
Certificate issuer: /CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Certificate serial: 019D39AF1CCC52D1864C1BB3C9D70FC6EE9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
Manifest number: 0FC4
Signing time: Sun 29 Mar 2026 13:01:10 +0000
Manifest this update: Sun 29 Mar 2026 13:01:10 +0000
Manifest next update: Mon 30 Mar 2026 13:01:10 +0000
Files and hashes: 1: _SxsGlV_WItkfheRGmMA40LGYes.crl (hash: 7x9RXI8Pb/zHd1Lc/JEhLYT51rYbtFTV3XWfk/QixFE=)
2: ybz_LJxmvXeX0zTpU2lRHbVV5as.roa (hash: s/QbbRettUJpmi4/wPM4zY/mnziqrGPExrreuVQcjVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:1c:cc:52:d1:86:4c:1b:b3:c9:d7:0f:c6:ee:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Validity
Not Before: Mar 29 13:01:10 2026 GMT
Not After : Mar 30 13:01:10 2026 GMT
Subject: CN=279ab250f7e889c2e69e054125df0c279e23d46c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d6:7c:19:ab:37:dd:da:df:e2:ca:fb:9f:02:
df:bf:4d:f0:92:45:b2:bb:d6:7a:a3:4d:58:ce:0b:
3a:0c:10:1a:b7:14:3d:77:98:c7:50:d0:b2:b5:1d:
d8:12:c2:fd:62:28:e5:e7:f2:6e:db:df:08:86:9c:
31:5b:70:3e:76:8f:80:26:44:dd:ff:58:3b:21:88:
e0:03:63:f5:f4:db:96:9b:f1:47:6c:7e:58:f9:7a:
d5:06:32:09:a6:01:62:22:c5:04:f5:08:da:93:c0:
d0:fb:c2:15:2f:35:fe:a3:1f:60:17:db:9f:4d:1d:
2b:cd:e3:a2:25:56:78:02:d0:83:b6:59:26:fa:bc:
68:2f:15:69:34:c5:ff:a9:77:24:6f:e2:64:cc:29:
2b:fb:c0:94:38:d3:eb:c2:53:26:00:3f:d1:9f:34:
ab:d6:08:5a:92:6f:41:3e:c3:f2:2c:9a:07:ac:50:
e6:64:3d:e7:e6:68:df:de:85:03:cf:91:71:ed:f1:
6f:2f:6e:4f:a9:f8:7f:07:3e:79:db:1b:c8:ca:05:
5d:07:db:e6:89:b5:6e:b9:3c:e2:fa:e2:92:61:b2:
c6:3d:3d:41:26:d7:d0:cf:02:f3:39:a0:3a:05:7f:
43:ae:40:06:a6:fc:4f:e0:d4:9e:cf:70:da:b7:61:
75:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9A:B2:50:F7:E8:89:C2:E6:9E:05:41:25:DF:0C:27:9E:23:D4:6C
X509v3 Authority Key Identifier:
keyid:FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:13:b7:17:8d:32:bc:fa:6d:9f:b3:f1:a2:68:a0:8d:2a:13:
e7:9c:af:a4:1a:a6:99:99:9d:6b:24:3a:bf:ec:d3:26:07:b3:
8d:a8:69:1b:ad:03:60:91:64:bc:7f:2b:47:87:51:68:b0:f4:
e4:cc:68:29:a7:2b:15:d3:7f:dd:11:ba:cc:b8:10:01:05:44:
cc:7e:8d:03:17:ae:f9:ce:d9:c9:54:87:6f:5c:88:f2:f7:1d:
bc:3b:79:a5:ae:a0:b5:dc:5e:25:aa:48:2b:9f:16:b1:4a:5c:
94:22:a6:84:cc:08:4b:ad:07:1f:89:6c:f4:7b:31:17:a0:53:
d5:52:6c:24:b8:87:db:30:1c:5c:02:24:a9:c6:f6:80:1b:f6:
86:fd:9c:4d:5d:6e:a8:50:8a:79:b2:58:2d:c2:57:11:87:b9:
e8:30:25:5f:f6:ad:ec:f0:05:15:6f:04:37:f7:39:d6:20:a0:
31:1f:cb:25:a8:90:3f:8c:75:55:9e:69:3b:8a:0e:2f:81:fb:
7a:3e:c8:3e:bc:86:ad:e1:08:13:c1:75:df:55:eb:38:0f:8b:
9f:df:6c:89:7d:e0:87:2d:ab:b8:b1:79:80:5a:d5:53:86:a4:
f9:38:c2:47:2b:38:70:09:50:ca:00:b9:6c:72:b9:8f:44:4a:
61:10:bd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:53:47 2026 by rpki-client