Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
File: sxxM5mPh7CRedHzYRvGmnduDSzs.mft (raw, json)
Hash identifier: 0ZyOZ4QnYKT0h5+59w8SbABhELqt5mk/dNX984CEygA=
Subject key identifier: C8:3A:1D:2F:7C:6E:47:1B:2B:30:39:6B:E8:58:73:43:C2:93:67:95
Authority key identifier: B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
Certificate issuer: /CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Certificate serial: 01A154AE93B51A86B7BE37B486B4FD7E53B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
Manifest number: 08AB
Signing time: Mon 19 Oct 2026 15:01:29 +0000
Manifest this update: Mon 19 Oct 2026 15:01:29 +0000
Manifest next update: Tue 20 Oct 2026 15:01:29 +0000
Files and hashes: 1: 4NbY3XQRACHwP_UPtv4NWet5gmA.roa (hash: 57bOc+VcBkdxcqNN2GfyfgxziXwQDXWTp5NFQ7+P+lk=)
2: 54cbX3-yOfJX4GZIWJiBOEs5WC4.roa (hash: oBq1x8bGZfgJOoRJVnELWpxM6oiDHIA1YLfoBrdqQuY=)
3: JSlJ5Kkw9KB2_LkNtS2R5YtwIFI.roa (hash: kLX9M81nDKcFoHg/EVvUnvLDWyGSEaaypinH5YoB/Hk=)
4: X0szM5xVddCf4IojmmM1AFZ8c5k.roa (hash: VE9ye/us+VMaqdru28BJEcJGi+J/T/vsAJ5+ZnETRfk=)
5: cmJJTDWqgSOxW7yilOgCjspit_M.roa (hash: JtXHhZpcZX8y0tLatDC4ANHAg9d4Px3tP60PWP3+pm0=)
6: n83aqxTaEMhEGFJGSC9vA4JeC9g.roa (hash: 7Y4CupQAeZgAFzyzdXSJ985jpNnivqbMfYe0+iFxI9E=)
7: rpWgq3ixdO75KNigE_o828ZAHmg.roa (hash: PfBbhFLcTyrnvntNvYASioVaXFbdMUeoy9uIiJMF1So=)
8: sxxM5mPh7CRedHzYRvGmnduDSzs.crl (hash: u8taUqPjt89BfCRNZsIXpDP7pgiHBci8lDJzpYHFBNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:ae:93:b5:1a:86:b7:be:37:b4:86:b4:fd:7e:53:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Validity
Not Before: Oct 19 15:01:29 2026 GMT
Not After : Oct 20 15:01:29 2026 GMT
Subject: CN=c83a1d2f7c6e471b2b30396be8587343c2936795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c3:3c:95:56:5f:10:0b:b3:74:86:01:98:09:
d7:0e:63:f7:25:04:9f:c2:cd:59:89:c8:0b:86:48:
9b:46:b8:a1:b2:fc:3f:be:a5:33:05:15:6b:5e:c3:
f0:74:f1:69:ed:11:9d:23:b5:10:eb:b0:70:10:06:
48:1f:0a:7a:6e:01:c0:3a:06:ef:3d:d8:ca:70:cf:
f9:63:42:9b:b8:1e:6e:ff:e3:b1:1b:1f:70:10:1c:
e1:dc:c4:ac:21:6c:97:85:eb:56:4a:f2:2a:19:f5:
d3:86:ee:a0:92:44:f1:c6:1b:56:bc:93:ed:18:7e:
1e:cf:23:b9:61:b8:d8:ed:a1:12:c5:9f:f9:30:2c:
0e:b6:01:2e:82:67:79:48:fa:2f:37:40:a1:be:17:
e5:3b:78:d4:b1:f0:f9:de:47:0c:5d:5b:19:7d:ef:
72:1d:1c:6b:51:5a:47:d0:2f:a6:87:33:ac:e0:65:
71:07:c1:ac:7c:86:6d:97:72:05:8c:44:d7:1f:0b:
47:c8:84:c2:1e:26:0c:09:af:d8:1f:9d:5e:ca:e3:
b6:de:ad:01:1b:de:d0:a1:c8:a0:b1:95:5c:9c:f4:
a5:4d:01:7f:66:85:d8:35:e1:ba:36:2a:49:35:b6:
92:67:7f:92:a3:39:0e:5f:9b:b3:12:de:74:2b:31:
0a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3A:1D:2F:7C:6E:47:1B:2B:30:39:6B:E8:58:73:43:C2:93:67:95
X509v3 Authority Key Identifier:
keyid:B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:57:63:37:25:a4:46:85:ae:de:ef:b7:60:e8:37:9b:0d:79:
eb:28:08:bc:42:00:f9:f6:5d:7f:2d:2f:9d:a4:38:1a:4e:5d:
5e:50:01:50:86:05:66:20:f9:b4:13:a0:b4:5b:f4:89:a0:df:
ef:88:81:7d:26:89:db:5f:d7:36:c9:af:cc:73:fc:44:c0:2d:
e8:79:5f:5c:c9:97:e7:9a:2f:e9:0e:a2:a4:40:f1:e1:eb:cc:
ef:f2:c8:f2:b8:62:23:4f:08:5c:fb:37:4f:2c:5f:78:79:a2:
8e:24:dd:db:17:81:ba:58:f8:4e:7f:09:0c:26:1f:5a:f0:c8:
d0:f2:51:f8:e3:4f:01:8f:69:80:8c:15:8d:39:f8:67:e5:04:
3d:82:76:8c:02:24:f8:ff:bf:c3:21:da:5d:1b:1d:d2:f8:d1:
5b:cb:c2:a9:11:d6:c6:3f:99:4e:0f:2b:a6:23:c8:8c:46:0c:
90:36:bc:01:29:f4:cb:ee:b5:02:22:7b:e9:a0:bb:89:6f:19:
4f:a0:b3:99:a1:9f:58:a0:7f:c4:c5:05:b7:da:a5:0a:c7:bb:
1e:4e:d3:66:da:72:ff:18:1b:84:63:76:b7:73:87:fc:a1:fe:
8b:d5:75:c2:2f:b3:ed:80:66:4b:89:3a:97:fc:4f:0f:a4:af:
5d:40:ca:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 02:41:04 2026 by rpki-client