Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
File: sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft (raw, json)
Hash identifier: yp1vHEftKkLEc1Q5uU3509TDzqYwL7PnlpR310PDX/k=
Subject key identifier: 72:BA:E7:52:6A:02:95:1F:3E:04:EE:D5:EF:5B:F2:44:1F:6A:AF:AA
Authority key identifier: B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34
Certificate issuer: /CN=b312db95dfc3b31395e0ecb5ff26212d798de834
Certificate serial: 01A175B9728863B5790B4B66126FAF3FB414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
Manifest number: 1866
Signing time: Mon 26 Oct 2026 01:00:50 +0000
Manifest this update: Mon 26 Oct 2026 01:00:50 +0000
Manifest next update: Tue 27 Oct 2026 01:00:50 +0000
Files and hashes: 1: X8tdXJvU9JJe77PtcT-JDwBOQi8.roa (hash: tVoeTVft5vKlrmkaWfTVngTflVy/IwyLYYQaNJOX868=)
2: sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl (hash: wDd871Dm/MxRRWR3A4Cp4TrQN4JEs2PNsMTqq7AGKlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:b9:72:88:63:b5:79:0b:4b:66:12:6f:af:3f:b4:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b312db95dfc3b31395e0ecb5ff26212d798de834
Validity
Not Before: Oct 26 01:00:50 2026 GMT
Not After : Oct 27 01:00:50 2026 GMT
Subject: CN=72bae7526a02951f3e04eed5ef5bf2441f6aafaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ee:1a:b4:21:d5:15:b8:6c:5f:80:8b:75:62:
c0:61:b0:9a:e8:8c:83:27:2d:18:2d:87:18:c4:31:
0b:11:6c:48:72:79:77:c6:40:d7:e0:5a:34:c6:f3:
92:66:45:b5:90:84:94:85:2c:7c:bc:ac:ab:8c:c0:
68:f5:68:60:64:8c:48:5c:aa:f3:e0:a4:16:fd:8b:
df:d1:e6:25:06:7d:cf:d5:7c:c6:e6:2a:66:bf:9a:
b2:aa:6e:46:45:6c:9d:ae:2a:3a:22:e8:7a:67:5b:
2d:24:f3:31:62:d3:31:97:cc:44:ec:bd:0d:86:48:
95:88:3c:28:02:1b:e8:36:32:b9:ca:6c:b1:25:d9:
02:4c:04:1a:03:82:a4:5c:ee:96:f9:1f:3e:a2:80:
68:aa:7f:ed:7e:b1:df:21:6e:24:c7:08:c3:83:0b:
b2:9f:5c:f7:1f:47:32:1e:d1:4f:10:20:2e:a5:e9:
45:00:06:bc:02:b3:82:e7:5f:95:17:51:46:90:23:
26:d5:d2:43:2b:99:0e:09:6f:3c:c3:5e:5a:e5:6a:
a5:ef:8f:a1:11:41:16:e0:a1:2c:e7:c1:11:35:90:
19:ee:f6:1c:ca:ad:15:96:b0:e3:65:51:d9:93:cc:
db:c2:c4:e4:98:a1:85:85:4f:ab:30:f8:70:39:80:
8f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:BA:E7:52:6A:02:95:1F:3E:04:EE:D5:EF:5B:F2:44:1F:6A:AF:AA
X509v3 Authority Key Identifier:
keyid:B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:21:99:94:5c:7a:bc:42:cb:c2:1a:d9:07:e8:82:ee:7c:7f:
a1:74:52:31:9c:49:e3:93:6a:21:81:56:52:98:7f:03:46:c1:
7a:01:41:84:b8:4b:d6:a5:d0:3f:2a:00:65:5e:d2:87:32:98:
73:bd:24:d7:00:be:64:e5:bc:7e:5a:04:25:1e:a4:13:42:01:
a5:97:2e:25:38:d4:12:3e:9e:cd:6e:97:77:b8:73:1c:2d:fc:
76:2f:d2:88:95:aa:68:ce:58:75:1d:02:9e:2d:15:55:1e:07:
22:d4:73:e4:43:a7:e9:83:5b:52:e8:1e:61:0f:52:3c:f1:58:
91:5f:cd:ec:eb:ad:0b:97:0e:07:2b:bf:91:e6:fe:a9:4a:b9:
9c:b1:89:55:89:d6:21:39:8a:e3:1e:d1:97:18:35:c7:3a:3b:
72:55:71:47:35:83:1f:f2:17:0c:6c:c8:10:59:94:59:70:1d:
cf:fe:60:1e:7f:0c:10:06:88:84:33:0e:7d:44:7e:e5:f5:e1:
c8:21:27:b5:ef:ec:93:06:be:a1:84:9c:21:8a:92:56:43:09:
b3:5f:bd:7b:cb:4f:19:53:6b:c8:5b:8e:ad:fd:68:17:d6:14:
96:78:61:4f:d5:98:94:d8:b8:9e:73:82:a3:f7:f9:ea:93:89:
c5:9e:bc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:23:25 2026 by rpki-client