Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
File: sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft (raw, json)
Hash identifier: 5Iv7dkVw2pb3T55d/1kAjDQycTttIm7GhEuj6HATSME=
Subject key identifier: 1A:63:75:0A:41:CE:8E:A3:1B:53:60:24:1E:E1:BA:AB:1A:F8:17:1F
Authority key identifier: B1:76:8F:0A:8D:1E:D1:17:3E:CE:DC:68:9C:17:7B:24:9E:E3:A6:8C
Certificate issuer: /CN=b1768f0a8d1ed1173ecedc689c177b249ee3a68c
Certificate serial: 019FA14E141D58A202DAAA8CFA937E7696A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
Manifest number: 0334
Signing time: Mon 27 Jul 2026 02:01:16 +0000
Manifest this update: Mon 27 Jul 2026 02:01:16 +0000
Manifest next update: Tue 28 Jul 2026 02:01:16 +0000
Files and hashes: 1: Evg5E-8VSXY1dFWe0dsHFW-O_Jo.roa (hash: Icoysq39tLxqHCpP3ABhw3yUgnv4HKO+EMDypdb4KPE=)
2: r-GapXK3JuL-T7M03ZC61uSVfyE.roa (hash: AG5Eg1DYw6Qc5ggeZMDpUWKtb6RLHqA8/H20Z17wo7s=)
3: sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl (hash: yztdphz+Fckn5OZR0JA8ufbnSMecdEwm6ysKS5leCaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4e:14:1d:58:a2:02:da:aa:8c:fa:93:7e:76:96:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1768f0a8d1ed1173ecedc689c177b249ee3a68c
Validity
Not Before: Jul 27 02:01:16 2026 GMT
Not After : Jul 28 02:01:16 2026 GMT
Subject: CN=1a63750a41ce8ea31b5360241ee1baab1af8171f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:45:7c:57:ed:3c:e7:8d:ac:99:59:84:a1:51:
dd:29:a3:2e:ba:b2:2c:62:92:e1:b6:18:c6:12:1a:
94:3b:48:66:64:76:c7:be:8b:5d:49:92:69:71:31:
c8:06:62:a4:5d:a1:82:14:b4:ec:dd:1d:34:a7:a0:
e8:12:bc:2d:3b:03:b3:0a:75:cb:2f:6f:f0:fa:41:
7b:a9:37:a6:0e:23:bb:6c:ba:0f:a3:c2:72:f0:ac:
18:49:e8:e6:11:fb:ae:1f:08:19:5e:39:de:6c:76:
a2:cf:5c:d8:4c:87:f1:d8:99:92:41:94:7b:e2:2f:
f8:69:25:62:b3:be:fc:68:db:23:ba:ac:b0:13:0d:
96:f3:ee:ee:41:51:c3:e7:c1:8d:3f:58:3b:02:bf:
06:fc:1f:2b:86:95:dc:c2:7f:20:ee:b3:6f:77:1f:
9c:7f:37:ef:81:03:51:de:fd:ac:58:31:fe:41:c5:
28:c5:1c:91:75:10:5d:7e:c4:4f:5e:17:ef:92:4b:
bf:30:c6:f7:54:be:e9:1f:27:14:f4:c2:ab:96:0e:
b0:68:00:00:66:4c:02:2b:55:f2:9a:0d:d3:c8:c5:
c0:ed:7f:7c:7c:04:57:b3:f4:c5:c3:7c:8b:65:88:
0c:5f:bf:f8:8a:b0:00:0d:9a:6a:8b:d9:8e:1d:33:
b9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:63:75:0A:41:CE:8E:A3:1B:53:60:24:1E:E1:BA:AB:1A:F8:17:1F
X509v3 Authority Key Identifier:
keyid:B1:76:8F:0A:8D:1E:D1:17:3E:CE:DC:68:9C:17:7B:24:9E:E3:A6:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e3:b9:be:29:78:f1:7b:d3:3f:aa:e9:45:5c:3e:7c:80:75:
41:9b:69:cc:18:cf:7b:75:92:26:f9:3a:4b:29:ce:cb:bb:f2:
c8:28:46:d0:ed:88:de:b7:1e:57:58:87:db:b2:e0:dd:56:cc:
76:7a:35:be:e5:58:39:7a:e1:16:b3:60:a1:f5:5b:f8:e7:74:
58:63:b2:b5:79:78:8e:b8:83:c8:8c:5d:c7:c9:33:11:a5:1c:
31:c2:d5:78:7b:08:77:db:7b:34:a4:37:4d:0a:bb:44:30:cf:
e7:8e:bd:ae:07:e9:72:b5:09:11:5b:1d:d6:9f:d3:f6:b4:d2:
32:4b:6f:0b:a0:ad:59:03:54:34:e0:9c:ca:bd:e1:b6:ae:f9:
75:5c:6e:5b:4f:62:8e:ac:23:32:fb:39:84:ea:e2:c8:59:a2:
b9:3a:e2:10:14:1a:36:3d:ae:09:d2:d1:3a:44:0d:c3:44:a9:
7d:38:7b:f9:aa:89:06:04:55:8d:31:09:c5:5f:6c:66:29:91:
97:65:fb:10:b4:c3:9a:a2:2a:d9:40:46:c3:b2:cb:20:b4:96:
2b:2a:e0:97:57:e4:c1:00:5f:f6:c2:d1:fb:cc:55:1d:cc:31:
dd:2f:2d:90:0f:70:3c:91:d4:f5:37:ab:e9:f0:c9:c2:df:fd:
a2:9c:90:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:23:26 2026 by rpki-client