Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
File: sXtEkEx2lKVAig0pcsOf8LGwPqU.mft (raw, json)
Hash identifier: lh4Gr65g0FjkQoAUcQ7/eeNgSdM9BMpfQUegkK5CKyA=
Subject key identifier: AB:02:A3:F8:9E:9B:4F:98:CF:A5:26:A9:E4:DB:77:A2:C9:D2:3B:B4
Authority key identifier: B1:7B:44:90:4C:76:94:A5:40:8A:0D:29:72:C3:9F:F0:B1:B0:3E:A5
Certificate issuer: /CN=b17b44904c7694a5408a0d2972c39ff0b1b03ea5
Certificate serial: 019FA1BBE5E227E60DB2C3CA9F0642D9E745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
Manifest number: 1219
Signing time: Mon 27 Jul 2026 04:01:13 +0000
Manifest this update: Mon 27 Jul 2026 04:01:13 +0000
Manifest next update: Tue 28 Jul 2026 04:01:13 +0000
Files and hashes: 1: _RUk9FpS67FmhL3-cjuZddAmpdk.roa (hash: B9UAAuPL9bMWFoRGXof1Klm+Lwvuj9esb9qSVPpnlxw=)
2: sXtEkEx2lKVAig0pcsOf8LGwPqU.crl (hash: AQMbEXlf89b1IAxtyvFg9sIhDdx6R9aljc3zGfXyByY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:e5:e2:27:e6:0d:b2:c3:ca:9f:06:42:d9:e7:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b17b44904c7694a5408a0d2972c39ff0b1b03ea5
Validity
Not Before: Jul 27 04:01:13 2026 GMT
Not After : Jul 28 04:01:13 2026 GMT
Subject: CN=ab02a3f89e9b4f98cfa526a9e4db77a2c9d23bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4e:fc:3f:2b:9b:d1:b8:8a:72:fb:26:15:fe:
b2:39:ef:62:a0:8a:f5:91:84:94:95:06:00:d6:49:
ad:2a:04:ac:86:e6:53:48:63:f2:39:51:a3:2e:71:
bb:90:74:c4:5d:52:9e:bf:c0:62:1f:35:84:71:14:
83:ae:df:ca:1f:5c:fb:56:f6:d5:be:10:98:6c:02:
0f:dc:fd:75:5f:f5:77:a4:2e:03:b7:52:64:3c:a9:
7a:ca:ab:6e:13:e7:b6:34:dc:1b:08:db:b5:81:ba:
3e:7f:44:c0:0f:34:f2:70:92:96:99:da:71:34:ab:
d8:5d:30:c6:fe:3d:ca:bd:e6:16:e7:6d:30:21:26:
f4:bc:4c:a6:e2:c1:a0:02:09:1f:0d:e7:ea:49:fe:
98:4f:7f:2f:b8:35:7c:df:78:af:c7:73:18:39:9f:
3d:fa:92:ac:58:a7:0c:29:36:a1:01:04:25:57:5d:
2e:36:bd:3d:fd:e9:28:a2:d0:b7:15:3b:91:73:e0:
46:46:34:86:21:f4:2e:63:d3:a8:4a:aa:4c:48:69:
4d:32:f1:b3:19:f0:80:c6:18:f7:d1:f2:08:c8:bb:
5b:5f:c9:b9:c6:00:65:12:aa:d0:71:3b:ee:eb:b5:
9d:49:d3:3d:34:87:d0:c1:e6:35:bc:c6:1b:fd:e5:
16:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:02:A3:F8:9E:9B:4F:98:CF:A5:26:A9:E4:DB:77:A2:C9:D2:3B:B4
X509v3 Authority Key Identifier:
keyid:B1:7B:44:90:4C:76:94:A5:40:8A:0D:29:72:C3:9F:F0:B1:B0:3E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:15:50:e2:3b:dd:19:56:55:30:51:e4:7a:3d:c8:0e:45:ac:
cd:73:c3:51:31:e4:29:6d:b0:79:4c:eb:0a:1d:dc:a2:94:f3:
ee:5f:5d:3a:01:63:1d:09:1d:a0:ef:58:36:bc:57:42:6e:dc:
34:0a:94:11:8d:f8:49:41:3f:d8:f5:2d:52:d8:ca:ec:0f:20:
29:8b:7a:fd:2e:71:f4:53:3a:79:33:a7:9f:5d:71:d6:0b:a2:
00:d8:84:91:53:ae:57:89:0f:84:22:5a:90:23:81:fb:0b:28:
7c:55:50:b3:98:85:36:66:89:9f:ee:69:75:79:a0:9e:77:c6:
0d:74:ab:04:10:f4:0d:c6:98:4a:59:fd:40:ff:ad:fa:ef:72:
ca:32:e3:8c:c1:1e:14:09:27:26:54:e0:58:26:05:43:02:31:
11:d3:90:da:77:9d:58:c0:4e:9c:df:75:c4:b7:d7:e8:e5:40:
d3:88:a1:ec:6d:9c:fb:9a:1c:aa:d8:de:25:3e:e3:69:a4:ca:
cd:70:4e:42:1e:49:9c:70:e9:95:56:b9:34:b9:19:38:17:51:
82:a6:02:fc:a1:0f:9f:74:31:a5:28:ca:ae:fb:19:71:38:42:
07:0b:3f:9b:63:92:cf:31:7e:3d:43:86:5e:21:bd:c1:18:a9:
d2:44:6d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:18:30 2026 by rpki-client