Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
File: sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft (raw, json)
Hash identifier: HTGkdimQOuNyc6+mHT8nF4rCNr61ZqxZexslxokQxeE=
Subject key identifier: 59:86:61:E4:F9:F4:EC:64:2C:79:EE:FB:98:03:0F:3C:84:BB:B2:9C
Authority key identifier: B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34
Certificate issuer: /CN=b312db95dfc3b31395e0ecb5ff26212d798de834
Certificate serial: 01A08C0D2588683D86BA2C28EDCF7F93D807
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
Manifest number: 17ED
Signing time: Thu 10 Sep 2026 16:01:06 +0000
Manifest this update: Thu 10 Sep 2026 16:01:06 +0000
Manifest next update: Fri 11 Sep 2026 16:01:06 +0000
Files and hashes: 1: X8tdXJvU9JJe77PtcT-JDwBOQi8.roa (hash: tVoeTVft5vKlrmkaWfTVngTflVy/IwyLYYQaNJOX868=)
2: sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl (hash: stJ1Pdx93DZRqWWnMHioCcY3P84iYABQMMN+nP5FYuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:25:88:68:3d:86:ba:2c:28:ed:cf:7f:93:d8:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b312db95dfc3b31395e0ecb5ff26212d798de834
Validity
Not Before: Sep 10 16:01:06 2026 GMT
Not After : Sep 11 16:01:06 2026 GMT
Subject: CN=598661e4f9f4ec642c79eefb98030f3c84bbb29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:84:df:b0:ff:c7:ba:05:25:50:88:c2:95:0d:
9f:cc:6a:7b:ab:71:04:08:e2:82:52:11:eb:39:fd:
17:a5:8a:e2:32:67:47:fb:e2:a1:59:87:01:68:42:
80:e9:33:a9:54:f3:3e:fa:8d:73:00:6c:a6:ce:21:
c6:12:54:56:cb:36:6b:3a:e4:2e:fc:a1:79:c2:9b:
ee:89:b7:56:a3:48:a3:22:c0:94:14:98:0d:b6:57:
d6:51:12:5a:1a:66:46:58:55:3f:ff:cb:fa:0a:6b:
98:bf:d3:8c:a1:85:73:05:d3:58:0f:f8:ab:a5:65:
00:74:7d:48:0a:74:52:7f:bb:df:6c:8d:34:22:e2:
e9:b1:af:71:8a:ec:5d:20:7a:16:6e:e1:69:3f:d1:
1e:12:de:4b:0e:70:fc:00:fe:82:9a:8d:5b:d1:1c:
7b:61:f5:d5:26:77:a2:93:9a:7b:04:04:cd:2c:a1:
0c:2f:27:52:4e:8a:53:7d:b9:ab:94:bb:c1:d9:ab:
74:7c:65:32:cc:b5:fd:d7:ce:64:b5:7a:f4:02:3f:
0e:13:5a:7c:2e:61:0f:a9:46:3e:94:66:23:1f:02:
14:bb:8b:90:ed:72:cb:af:c9:e9:f1:62:34:02:57:
30:d7:ff:ad:be:00:4a:f5:dd:16:80:f0:d0:6a:24:
b0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:86:61:E4:F9:F4:EC:64:2C:79:EE:FB:98:03:0F:3C:84:BB:B2:9C
X509v3 Authority Key Identifier:
keyid:B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:88:72:c5:26:f5:ab:e3:56:84:28:8a:57:97:12:59:c4:ac:
0d:ae:d5:aa:d9:49:2e:67:c3:ff:e0:5f:ce:3e:3b:4d:8d:ec:
0d:b3:4e:02:32:47:cc:69:ed:24:36:93:77:d6:a1:34:fa:bf:
13:68:7a:7f:b8:04:3e:ed:de:c4:4c:2c:7d:cd:e6:07:ca:62:
c1:43:fb:44:71:f9:91:c5:0d:ac:09:59:70:05:47:3d:94:cf:
6c:3f:54:c5:db:25:8b:bc:44:9e:21:6d:c7:92:5a:c9:7c:20:
62:7b:e8:f4:ae:7c:a7:b3:98:d8:64:c7:d3:3e:b3:eb:0c:ff:
fc:ff:b5:ab:33:eb:22:2f:cb:53:21:00:68:92:c1:ba:91:4a:
ad:7d:f8:92:ad:12:39:49:2e:51:e0:d9:1e:12:0f:5d:aa:8c:
7d:08:5e:4b:7a:40:18:d9:0a:00:22:6e:21:04:69:44:5c:8c:
38:68:39:9d:bc:33:04:76:5f:01:8a:87:e7:3f:ae:29:df:16:
02:b4:67:c2:4c:54:83:90:4d:a8:4d:36:61:67:b0:c3:1b:4c:
02:68:fc:3c:e4:03:ff:46:8a:74:dc:4f:67:74:4c:16:9a:83:
a5:7e:6a:76:7a:5f:85:7c:7b:6d:19:4a:fb:ad:1e:0e:17:b1:
71:29:c4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:38:40 2026 by rpki-client