Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
File: sxxM5mPh7CRedHzYRvGmnduDSzs.mft (raw, json)
Hash identifier: ZRaQyod0Ov3cRX4X6K76OLGphti63zmRJXe6f7Uf9xM=
Subject key identifier: C4:2F:B5:AB:60:9F:1E:FB:EE:06:87:E7:98:D6:E0:39:B7:08:C4:14
Authority key identifier: B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
Certificate issuer: /CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Certificate serial: 019CC9ACB055454B345B6EB8D62406A2FB26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
Manifest number: 064A
Signing time: Sat 07 Mar 2026 19:01:03 +0000
Manifest this update: Sat 07 Mar 2026 19:01:03 +0000
Manifest next update: Sun 08 Mar 2026 19:01:03 +0000
Files and hashes: 1: 9ab9SzC0OpWVbVEzFAJlY3uXcBE.roa (hash: Hwfx1OavP79t3IGKe+XxghvhkOaiLTfmmJfTNk5J5Tw=)
2: KV9d7BSlB2bKlwJY62KIXsG4Wz0.roa (hash: R5kvK926QqdFk8i2+ipQZcd5Ih9FO34LMPFzB8nRWl4=)
3: sxxM5mPh7CRedHzYRvGmnduDSzs.crl (hash: 5kyqQ3gflJbHVoc6NgdgP1dye+kKaygs0t4XqcAUO0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 19:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c9:ac:b0:55:45:4b:34:5b:6e:b8:d6:24:06:a2:fb:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Validity
Not Before: Mar 7 19:01:03 2026 GMT
Not After : Mar 8 19:01:03 2026 GMT
Subject: CN=c42fb5ab609f1efbee0687e798d6e039b708c414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:01:af:a1:d6:e4:51:1a:0d:a4:e3:11:db:be:
36:25:b5:cf:4f:fa:87:2e:cf:d2:fe:2b:8a:0c:70:
12:87:18:17:de:0f:c3:50:ba:09:db:5d:aa:b3:cb:
57:3f:70:16:05:5a:c6:2c:46:7d:79:e5:de:a2:da:
7c:97:9b:26:78:ee:02:a5:ff:a1:79:67:99:e8:b2:
34:24:68:33:1b:27:39:d3:4a:a0:00:b6:1e:ee:e6:
89:63:9a:91:24:02:e2:3f:8c:00:3e:fa:6f:fe:95:
73:03:9f:dc:84:14:ca:82:ab:26:77:c4:d1:39:33:
a9:e3:c4:13:2e:db:f9:8b:5e:ed:a7:66:60:18:5f:
48:04:65:ad:36:40:4e:67:b0:3b:4d:e7:60:70:48:
3c:b6:9a:8e:e8:c6:34:0e:e7:de:73:5e:c6:68:7e:
1f:3b:13:f4:4d:5b:51:05:d2:3f:ad:b1:a3:6f:1d:
f4:b0:1b:a7:01:54:7b:d7:b7:a5:b2:a1:a1:45:91:
c3:60:94:7a:fc:83:bf:95:db:94:6e:00:e3:bc:92:
8a:6e:4b:ef:7e:21:2b:b4:e9:73:db:7d:af:60:f3:
4d:a1:54:31:66:5b:34:5e:09:ce:9e:f8:1e:cb:7e:
85:ee:b8:33:68:be:2b:a5:92:2b:e8:66:12:c8:a9:
2d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2F:B5:AB:60:9F:1E:FB:EE:06:87:E7:98:D6:E0:39:B7:08:C4:14
X509v3 Authority Key Identifier:
keyid:B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:cc:ca:cf:68:ce:69:7c:15:ad:38:ae:06:3a:15:8c:40:22:
40:bd:2f:d4:1b:e3:66:88:52:53:6e:2d:76:a1:33:cb:69:79:
19:d0:8a:2a:e6:a3:c7:f6:7a:f6:45:47:a5:0b:90:5b:eb:0c:
c9:43:77:16:c1:81:91:98:09:f4:68:53:c3:64:d7:22:90:b3:
a1:6d:03:7b:cc:ca:fd:32:9d:db:a9:d0:30:0c:ea:ed:fb:ac:
c9:94:29:49:26:20:96:bd:0f:12:d9:96:24:97:4d:59:72:75:
4b:ac:3b:35:42:07:21:fa:9a:a5:06:c8:50:25:48:14:4c:b6:
6a:ac:4b:dc:cb:fb:e9:f9:5c:59:88:d5:be:e4:40:07:17:8b:
bb:83:39:31:be:05:b7:fd:d9:45:f2:5e:d4:51:72:2d:66:d9:
bb:8d:76:9d:42:4a:08:d2:a3:6e:09:a2:6f:69:88:b0:5a:58:
3a:f2:c9:e2:a9:e6:b1:44:67:e6:cc:d2:aa:d0:98:6c:d9:47:
8e:0e:27:ef:fa:d1:c9:86:68:e3:84:e9:d3:00:6b:bc:13:6e:
4b:60:ff:d6:a8:10:14:27:26:fe:b3:97:28:9c:47:f3:a8:6a:
43:8c:aa:a5:25:a2:9a:10:b8:07:25:07:44:e9:5f:39:cd:76:
82:8d:39:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 02:10:06 2026 by rpki-client