Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
File: sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft (raw, json)
Hash identifier: wGx7mqsfTQa6mwNGMhCY/eKh78ZVcy7bZS5D46WyKcM=
Subject key identifier: 90:5E:41:45:88:73:12:9D:AF:3B:56:6F:79:0F:37:9E:D1:08:B7:0D
Authority key identifier: B1:76:8F:0A:8D:1E:D1:17:3E:CE:DC:68:9C:17:7B:24:9E:E3:A6:8C
Certificate issuer: /CN=b1768f0a8d1ed1173ecedc689c177b249ee3a68c
Certificate serial: 01A08AFABC18A51C15D9444716764E4F3870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
Manifest number: 03AD
Signing time: Thu 10 Sep 2026 11:01:22 +0000
Manifest this update: Thu 10 Sep 2026 11:01:22 +0000
Manifest next update: Fri 11 Sep 2026 11:01:22 +0000
Files and hashes: 1: Evg5E-8VSXY1dFWe0dsHFW-O_Jo.roa (hash: Icoysq39tLxqHCpP3ABhw3yUgnv4HKO+EMDypdb4KPE=)
2: r-GapXK3JuL-T7M03ZC61uSVfyE.roa (hash: AG5Eg1DYw6Qc5ggeZMDpUWKtb6RLHqA8/H20Z17wo7s=)
3: sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl (hash: kNmh2QDMBiR7x3AUnndOQIeie9hovLUYiDRbUQOy7cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:bc:18:a5:1c:15:d9:44:47:16:76:4e:4f:38:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1768f0a8d1ed1173ecedc689c177b249ee3a68c
Validity
Not Before: Sep 10 11:01:22 2026 GMT
Not After : Sep 11 11:01:22 2026 GMT
Subject: CN=905e41458873129daf3b566f790f379ed108b70d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:85:df:f6:d1:8c:09:66:0f:43:0f:6d:3d:5c:
11:72:3a:70:38:86:bb:07:45:b7:2f:1e:82:2b:60:
22:e4:16:71:f3:ae:e8:9d:22:8a:2b:71:b0:c7:87:
55:ab:17:b1:78:04:18:2f:71:f6:a2:d4:aa:0e:4e:
b4:b2:61:b6:ee:71:2e:81:09:f9:23:89:83:f1:ed:
f3:2c:59:b4:3a:b3:f1:4b:ae:60:71:7c:ca:98:7c:
58:d7:7f:27:b4:4b:82:41:cd:58:8f:28:61:c9:da:
fe:64:97:04:1e:04:5c:0d:41:64:e9:9e:15:76:95:
27:4c:16:b4:4e:7e:0c:cb:dd:f0:c3:31:d4:14:34:
ce:3c:85:4d:b5:3e:b3:2f:e6:0f:f3:39:65:8c:4a:
e0:1f:19:23:bd:98:6f:0e:e2:6b:43:b9:e4:9f:67:
58:c6:61:b4:fc:9b:62:94:b2:5c:e2:18:6a:29:c6:
5b:50:90:65:15:09:7b:3a:1b:fc:03:30:d7:e8:2f:
4d:70:a2:33:bd:c2:c7:78:dc:10:f8:11:64:ba:28:
b4:39:11:d5:52:82:ad:76:6a:4e:18:30:06:b7:f4:
f4:2a:70:6f:7c:30:5f:a6:e8:a4:d5:56:4e:e2:53:
94:26:c4:ef:e5:0e:cb:68:08:d6:61:55:1b:89:cb:
7d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5E:41:45:88:73:12:9D:AF:3B:56:6F:79:0F:37:9E:D1:08:B7:0D
X509v3 Authority Key Identifier:
keyid:B1:76:8F:0A:8D:1E:D1:17:3E:CE:DC:68:9C:17:7B:24:9E:E3:A6:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:03:5b:f6:d0:72:77:ca:3c:9d:c7:8f:26:6c:98:b2:03:cf:
0f:74:41:93:6f:bc:19:79:18:1a:6d:ef:0e:6e:ed:b5:71:b0:
09:e9:9d:00:cd:24:bf:ab:70:1c:13:cb:5b:ce:1b:11:3f:a9:
dd:3b:da:69:b0:77:b2:67:3a:d5:8b:4d:5f:6c:25:ff:42:e0:
79:c3:2f:0d:41:10:3b:fc:73:b9:db:91:45:b5:61:a0:58:d8:
ce:46:e3:f0:be:fc:e7:25:82:6b:6e:a2:ec:68:3a:cc:bb:14:
a1:43:b1:67:2e:e0:6d:1a:9c:61:a1:c9:41:e1:be:08:b0:a8:
62:3a:a7:5f:86:36:6f:a4:8f:a6:ee:b8:3d:1c:5b:b8:cf:29:
7f:4c:d6:b4:39:f3:bc:41:68:6a:4a:1b:f6:66:0f:06:73:a3:
6f:8a:56:60:70:20:80:a6:b0:51:82:37:1e:78:b6:a6:18:6c:
cb:16:1b:f8:3c:d9:24:8d:0f:86:46:b9:5f:09:71:e1:00:14:
9b:77:99:8f:ff:56:11:cf:73:09:97:81:63:4b:d5:90:2b:06:
ea:39:f6:05:08:a3:aa:a4:e9:a5:f0:df:a2:12:40:d6:10:81:
1f:08:7b:27:73:7f:4f:29:44:e3:39:4e:f9:eb:54:89:a9:b2:
d6:c7:54:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:08:01 2026 by rpki-client