Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
File: sxxM5mPh7CRedHzYRvGmnduDSzs.mft (raw, json)
Hash identifier: xIwrUuFqtG/zJEXgbKZTCL7TMil3haG1S/GkPQ+ksbU=
Subject key identifier: 06:83:86:58:55:F9:B5:19:60:59:40:04:56:A3:33:B6:25:81:60:4A
Authority key identifier: B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
Certificate issuer: /CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Certificate serial: 01A06D5DA8E2C524D09E48DD8C61B042539B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
Manifest number: 082F
Signing time: Fri 04 Sep 2026 17:00:49 +0000
Manifest this update: Fri 04 Sep 2026 17:00:49 +0000
Manifest next update: Sat 05 Sep 2026 17:00:49 +0000
Files and hashes: 1: 54cbX3-yOfJX4GZIWJiBOEs5WC4.roa (hash: oBq1x8bGZfgJOoRJVnELWpxM6oiDHIA1YLfoBrdqQuY=)
2: KV9d7BSlB2bKlwJY62KIXsG4Wz0.roa (hash: R5kvK926QqdFk8i2+ipQZcd5Ih9FO34LMPFzB8nRWl4=)
3: sxxM5mPh7CRedHzYRvGmnduDSzs.crl (hash: E3dDPbSy+km/bb+zCrjVGhbaeUPM5fgrrk6qkFTiFHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:5d:a8:e2:c5:24:d0:9e:48:dd:8c:61:b0:42:53:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Validity
Not Before: Sep 4 17:00:49 2026 GMT
Not After : Sep 5 17:00:49 2026 GMT
Subject: CN=0683865855f9b5196059400456a333b62581604a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:28:c8:78:0d:67:a6:91:e1:1a:9a:f8:e8:3f:
ec:f2:a6:5f:9d:ef:70:5d:1d:c5:28:be:46:2a:b9:
07:00:6d:4a:d2:28:9f:c6:16:f0:db:d8:03:12:50:
fa:be:26:08:5f:0c:52:60:e4:f1:ae:74:2e:5a:df:
a9:fe:01:a0:60:b5:00:84:80:55:42:67:79:c5:3a:
c4:6d:02:0f:aa:85:6c:96:e0:3a:14:d7:d4:5b:c6:
bb:58:15:d7:fe:09:cf:c1:31:59:06:28:55:8d:87:
59:b9:9c:a8:5a:f1:19:d3:da:95:2c:4f:8b:4a:24:
81:8c:c1:f3:f4:7d:97:e7:1e:e3:36:4f:79:7e:44:
94:c9:db:a9:21:c7:0e:97:53:3a:8c:4c:9a:35:69:
fb:c6:56:28:b0:fe:f0:7d:36:1f:90:38:b9:fe:80:
aa:07:31:a6:ab:c6:af:0c:f6:d2:e1:0f:f2:45:fb:
61:40:02:b8:de:ee:87:2d:3f:92:45:88:06:51:2c:
8b:00:ed:7d:19:bd:82:fe:9a:29:e3:d0:1b:9c:5d:
c2:d0:6b:b4:2b:c8:de:29:6c:55:4a:e5:f7:b0:5d:
e6:cf:28:31:0d:f4:64:40:ad:09:43:26:40:9f:5c:
9f:10:c6:1a:4f:21:5b:f6:f9:b4:86:fb:dd:6c:7d:
01:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:83:86:58:55:F9:B5:19:60:59:40:04:56:A3:33:B6:25:81:60:4A
X509v3 Authority Key Identifier:
keyid:B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:f3:ea:b8:5e:f1:bf:30:10:de:f3:38:6e:e4:e5:b0:43:85:
94:fd:9b:05:48:3b:f9:d2:c1:8e:c9:dd:b2:c1:b4:b7:90:72:
af:09:9e:95:ab:d8:12:08:90:49:d0:0f:19:69:43:5c:f5:18:
9d:7e:81:bd:6e:77:e4:20:be:33:e5:44:26:a7:bc:25:86:38:
2b:49:6b:43:35:01:07:f8:d1:81:0a:e2:14:cd:3e:75:ff:b2:
f5:b6:42:a1:75:ce:06:ad:47:62:5e:98:46:85:69:70:5b:d6:
51:a9:5d:61:ea:a4:7f:2a:d4:bc:19:e8:f5:5b:1b:a8:d4:6e:
59:98:7c:08:e9:01:eb:31:15:3e:35:b0:b3:e5:0b:13:c9:d3:
1e:43:b0:44:e9:1f:7d:72:d2:7d:2c:2d:da:45:4e:fe:7e:db:
14:1f:2e:8c:c3:35:41:d8:a2:7e:3d:ca:0f:4c:de:f1:10:71:
e5:fe:c2:b0:98:ec:5f:3b:33:04:93:7b:57:e3:1e:0d:26:82:
67:a0:09:6c:81:31:66:4f:1d:fc:75:89:a8:a0:0a:50:52:80:
ce:d7:29:a2:7c:c8:f0:8c:88:57:8f:b9:09:70:72:13:ba:ca:
48:92:cf:59:4a:80:c4:bb:c0:74:c0:b3:07:c2:7d:43:d6:6e:
38:74:b5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:01:17 2026 by rpki-client