Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
File: sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft (raw, json)
Hash identifier: P8THs6PJ/18xdmg5yTKtxwEdW9OukRaqLiXNVFocEK0=
Subject key identifier: 9A:8A:1C:6D:B2:71:F2:A9:5A:4B:EC:09:29:48:A4:14:F8:45:62:E5
Authority key identifier: B1:76:8F:0A:8D:1E:D1:17:3E:CE:DC:68:9C:17:7B:24:9E:E3:A6:8C
Certificate issuer: /CN=b1768f0a8d1ed1173ecedc689c177b249ee3a68c
Certificate serial: 019EB7A15D85F63A97E054A8C57B3A31AA50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
Manifest number: 02BB
Signing time: Thu 11 Jun 2026 17:01:06 +0000
Manifest this update: Thu 11 Jun 2026 17:01:06 +0000
Manifest next update: Fri 12 Jun 2026 17:01:06 +0000
Files and hashes: 1: Evg5E-8VSXY1dFWe0dsHFW-O_Jo.roa (hash: Icoysq39tLxqHCpP3ABhw3yUgnv4HKO+EMDypdb4KPE=)
2: r-GapXK3JuL-T7M03ZC61uSVfyE.roa (hash: AG5Eg1DYw6Qc5ggeZMDpUWKtb6RLHqA8/H20Z17wo7s=)
3: sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl (hash: Dxv/g8aMqQlvGJ9aLuKuYEKiL8P3GHg5nU3ttCfVplo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a1:5d:85:f6:3a:97:e0:54:a8:c5:7b:3a:31:aa:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1768f0a8d1ed1173ecedc689c177b249ee3a68c
Validity
Not Before: Jun 11 17:01:06 2026 GMT
Not After : Jun 12 17:01:06 2026 GMT
Subject: CN=9a8a1c6db271f2a95a4bec092948a414f84562e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c0:75:2e:02:d2:e7:b6:72:dc:67:bc:db:05:
f1:ad:6e:56:0b:08:2d:8a:db:f9:03:db:09:a7:53:
ac:32:e0:83:a4:d6:cb:d9:46:94:ff:93:0b:e3:0b:
cf:d8:24:bf:7e:43:ab:a8:7f:8c:f6:97:f8:ea:6e:
b9:8d:2d:c3:ec:f6:e2:bf:20:45:b1:d4:cd:03:14:
df:c5:06:95:a7:a8:6d:00:56:d0:74:2e:1c:e6:37:
37:08:28:e0:d7:c1:e5:a5:46:e7:4a:31:d4:6b:f6:
fe:bd:77:c8:ce:2a:d6:6c:c6:6a:0c:14:78:02:38:
6a:74:39:7f:95:61:0a:a4:1f:2a:11:6c:1a:0d:15:
b3:08:a1:b0:10:21:d5:ac:43:61:a0:66:84:46:c0:
b4:df:5e:23:5c:7e:42:aa:1a:6d:99:58:6e:ee:d6:
0d:0e:d3:00:52:fc:a6:a1:f3:68:54:c2:f4:77:b2:
99:91:ce:53:15:a8:92:d2:1a:de:5c:3d:36:27:e7:
18:76:4b:b8:45:e0:3b:2c:bb:a7:41:99:8b:59:88:
a7:27:86:af:c5:73:c9:85:c3:b9:8a:07:41:ee:76:
3c:46:d9:74:ed:1a:14:63:43:fa:ff:4f:7c:3d:85:
42:82:20:7b:6f:08:20:94:f9:b8:65:ce:91:b1:ca:
1e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8A:1C:6D:B2:71:F2:A9:5A:4B:EC:09:29:48:A4:14:F8:45:62:E5
X509v3 Authority Key Identifier:
keyid:B1:76:8F:0A:8D:1E:D1:17:3E:CE:DC:68:9C:17:7B:24:9E:E3:A6:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f6:7c:70:38:9d:5b:f2:cf:58:3b:69:05:53:bb:0f:ad:d4:
32:61:6d:8a:d4:5e:fb:88:da:a0:fe:34:67:6b:5b:23:47:7f:
78:00:09:32:ca:4e:a1:49:99:a3:50:94:08:b9:3c:7b:17:f9:
30:61:82:2a:35:f8:c8:00:ef:01:75:7e:ff:2e:47:d3:48:a8:
a6:c2:b0:c9:07:14:81:af:32:25:fa:64:1c:96:93:3c:83:4a:
53:b4:b1:ed:bb:17:3a:e9:10:ff:6b:8b:1e:4b:35:2f:88:e2:
0b:4b:c7:0a:79:1e:aa:b1:f1:5c:02:8e:14:1d:81:f9:73:c7:
69:e5:57:02:3a:cd:f6:08:3e:0c:8a:47:f7:76:02:5b:b1:c0:
f1:e7:5c:a2:31:cd:db:58:92:14:94:1b:8a:6c:d5:47:f8:53:
91:a5:97:bc:96:9b:18:bc:8c:a0:08:5e:98:d0:a4:96:9f:d7:
40:12:92:27:4d:02:71:0e:24:fc:4b:ac:f3:fc:0c:70:d9:76:
0d:2d:fb:7b:c3:1e:4e:8d:cc:b3:69:9d:e6:6b:d3:a8:58:86:
b3:67:b8:b1:ae:46:f4:d9:7b:5d:59:b5:07:37:74:f0:d9:72:
f4:5a:41:bf:35:44:b2:a2:03:62:18:fb:af:76:30:e2:1e:5e:
40:db:d3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:04:19 2026 by rpki-client