Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
File: sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft (raw, json)
Hash identifier: ZYNfzPZRZcaM2mYXGsQ56JarsVyTiaOj3kAL7aYRjsw=
Subject key identifier: 60:E0:9C:D5:3D:30:66:CB:44:0F:F4:93:B9:25:05:3B:1A:1D:EE:FE
Authority key identifier: B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3
Certificate issuer: /CN=b31f0671f399e4da20a48bd327c47afa4a41ffc3
Certificate serial: 019D36E569688C157D39EAFC795EBE4BB7A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
Manifest number: 1822
Signing time: Sun 29 Mar 2026 00:01:37 +0000
Manifest this update: Sun 29 Mar 2026 00:01:37 +0000
Manifest next update: Mon 30 Mar 2026 00:01:37 +0000
Files and hashes: 1: YxQQWDg_coyEB6pTn4AJqkDaXAs.roa (hash: FxWNGXvs3glxGeqRKNIBrVgkNIhHyCpETztEe1qzaRU=)
2: sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl (hash: KaNPVGYdoFjyz4n8pmIOTRib7dOd7izAS8Fqg/zA4fY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e5:69:68:8c:15:7d:39:ea:fc:79:5e:be:4b:b7:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31f0671f399e4da20a48bd327c47afa4a41ffc3
Validity
Not Before: Mar 29 00:01:37 2026 GMT
Not After : Mar 30 00:01:37 2026 GMT
Subject: CN=60e09cd53d3066cb440ff493b925053b1a1deefe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4e:64:46:c3:07:a9:70:34:c5:bb:b8:16:f0:
08:8b:8e:26:d7:a1:d5:dd:d9:7a:9a:6d:2f:be:7c:
1c:65:ad:93:6c:ae:0d:0b:a0:24:ba:07:34:d5:9b:
b7:35:f6:93:7a:1c:0f:cf:38:e8:b5:93:6d:df:d6:
9f:fa:3c:ac:2a:0e:fa:f5:9f:ef:58:ec:0a:e8:f7:
93:3b:2d:86:09:79:82:1f:57:19:83:79:89:3e:ad:
ec:83:ba:c1:6d:46:0c:a4:b5:78:23:4f:cb:90:0a:
dc:98:82:55:63:80:da:fa:45:f3:26:ad:75:3f:75:
35:39:70:f4:85:76:86:e8:34:dc:a6:3c:6f:f4:d9:
14:82:91:37:cf:24:17:3b:ca:8f:d7:3a:52:fe:ee:
f7:96:ce:a7:3f:e5:3d:c8:ea:7d:cf:06:e1:1f:c9:
7c:ac:a9:4e:09:68:f5:3d:81:58:89:74:55:d9:7d:
34:36:39:88:82:b4:dc:a0:ee:53:40:02:4f:3d:d0:
c4:2b:e6:c6:80:4c:93:d1:14:bd:3b:0b:66:2b:63:
b3:2c:52:0f:a7:32:41:8b:12:4e:8d:79:fa:96:12:
16:91:0c:9d:38:8f:09:fa:a2:50:76:19:da:76:25:
97:ed:eb:b3:28:ae:00:b2:dc:5c:3b:be:3c:f7:31:
5a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E0:9C:D5:3D:30:66:CB:44:0F:F4:93:B9:25:05:3B:1A:1D:EE:FE
X509v3 Authority Key Identifier:
keyid:B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:99:78:5b:ea:6b:22:16:97:79:b0:c0:eb:9c:7f:fc:81:7d:
fc:c8:91:16:fe:3e:6c:65:ec:1e:de:e7:86:0c:a1:45:13:af:
70:9d:61:02:50:39:98:28:cb:fc:57:d2:15:08:5e:d6:8d:95:
51:da:5e:22:66:b9:43:04:7e:79:33:4e:71:53:1f:f2:a4:79:
9c:04:cc:bb:01:57:44:c5:e2:1c:fe:73:14:d4:4a:0c:12:e7:
88:51:af:4a:c8:d6:21:97:61:cd:29:7e:aa:ba:e0:72:14:e8:
bd:e9:e8:70:98:f0:2b:29:6a:61:0c:4c:7e:24:09:70:55:d2:
8c:51:30:9d:01:71:13:4a:8e:1e:37:c8:67:12:9d:75:34:b8:
06:30:08:63:96:ed:e7:51:56:62:27:96:d2:61:cc:01:5b:26:
47:84:5c:46:bc:49:3c:c1:de:e6:79:b7:af:4a:18:e8:50:3f:
99:fa:d4:6b:f0:b4:a3:a3:4f:e9:db:b6:f8:5c:90:ac:1a:aa:
69:c7:05:a7:42:74:c5:59:08:29:6a:15:13:44:67:0f:77:3e:
88:eb:63:df:13:3e:cf:82:5a:1a:eb:5b:95:93:42:c1:77:bc:
a7:a6:45:47:10:a4:e2:50:42:66:24:14:87:9c:e0:ce:60:f2:
d7:6d:89:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 03:13:09 2026 by rpki-client