Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
File: SXIqDKi7yU1IpctIzMku_vhFp-M.mft (raw, json)
Hash identifier: lKqoiQ6EqlMM+0dhojeQN0B7ZmEzgGFJGeHqjY5Nfn4=
Subject key identifier: 98:20:A7:52:AB:BE:1C:02:B8:51:F6:B4:29:21:22:5F:8A:05:5E:8F
Authority key identifier: 49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
Certificate issuer: /CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Certificate serial: 01A175B9A3BE92F314FF8C5B8D807EC748EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
Manifest number: 1A7E
Signing time: Mon 26 Oct 2026 01:01:02 +0000
Manifest this update: Mon 26 Oct 2026 01:01:02 +0000
Manifest next update: Tue 27 Oct 2026 01:01:02 +0000
Files and hashes: 1: SXIqDKi7yU1IpctIzMku_vhFp-M.crl (hash: 0DNL6U4NlnKnbNwdpKqwi5lElKSsN7LymEz6W+elJSA=)
2: Y7BflHpDTlEOWh8-FjDosgwANDI.roa (hash: BNh1IcHDcawtVTnT8ZLo5aKLUrVIe97SR3mZxwBAYlo=)
3: kfeH-aHyiZ_llhlDCtwr8YeqKuk.roa (hash: 4qeVrLsRX3PjbQ9N5eaGFDLDZ8tMOqdmxHU/M5zIjWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 01:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:b9:a3:be:92:f3:14:ff:8c:5b:8d:80:7e:c7:48:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Validity
Not Before: Oct 26 01:01:02 2026 GMT
Not After : Oct 27 01:01:02 2026 GMT
Subject: CN=9820a752abbe1c02b851f6b42921225f8a055e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:82:d2:8e:e4:94:70:b5:ed:56:14:b1:21:33:
a0:17:21:d1:58:da:a0:bd:08:b6:88:8d:c0:56:b8:
b0:ac:52:ea:78:e5:9a:c2:47:71:07:ce:35:67:ba:
a7:f7:53:b9:55:72:b1:7d:f4:26:93:9c:c7:12:e4:
4c:ec:3e:9b:7b:1e:05:9f:bf:9e:49:98:6b:59:0e:
c7:43:f1:7c:ab:df:a7:df:c2:ce:39:fa:3c:5f:ea:
37:6c:2e:c8:01:a6:e2:a0:40:fa:7a:01:14:39:4e:
a2:38:d4:23:2a:21:fc:08:e1:d4:b8:fa:68:ed:aa:
b9:8a:c8:9d:b8:80:6c:ab:21:ed:4f:31:61:7b:61:
67:f0:e7:dc:af:fd:e0:64:ee:72:c2:f2:fb:d8:66:
71:cb:c2:ed:bc:9d:23:d9:16:b3:04:20:a0:e4:1d:
0b:3b:eb:93:da:49:60:a0:79:b4:50:cb:25:6f:b0:
c4:b2:59:d2:60:ef:58:96:18:66:31:6b:0f:ef:9d:
dc:2a:00:6f:0c:bd:e1:62:d7:25:81:39:17:49:c7:
aa:f4:71:d0:d2:9c:8a:6a:5c:84:c9:6a:22:e5:24:
fb:56:97:af:d3:e8:ae:f0:9f:3f:30:ef:53:aa:5b:
c4:45:24:e5:43:a2:ea:b2:56:90:1b:e2:5c:15:59:
83:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:20:A7:52:AB:BE:1C:02:B8:51:F6:B4:29:21:22:5F:8A:05:5E:8F
X509v3 Authority Key Identifier:
keyid:49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:e5:2b:19:14:a6:3a:4a:b3:f7:34:82:5b:aa:ae:c3:20:52:
6a:a2:69:d2:ab:44:26:8c:34:81:a3:9e:91:2a:fb:de:d1:53:
b5:19:e2:2b:a8:38:a4:d0:61:8e:46:d7:e6:17:4d:c3:f9:3d:
15:44:25:5c:e7:e1:08:fc:a0:46:c2:41:21:b5:8b:92:a6:be:
2d:85:08:65:71:9d:7e:cd:c7:52:6f:2d:f2:a3:92:8e:71:4c:
61:5a:12:18:d4:ea:19:89:ce:73:7d:63:df:25:20:b8:71:39:
2d:33:61:5e:c4:df:ad:8b:2f:d1:9d:30:6f:58:47:b3:b8:a7:
77:5c:ef:0a:6d:42:a2:f3:b2:2d:3f:90:1d:36:37:f7:60:8a:
64:0e:1e:14:d1:c9:ed:d0:84:be:ac:9e:6d:af:b1:16:25:59:
72:40:91:8e:de:b6:ae:4a:9d:1c:f5:86:83:65:6d:69:5c:d7:
b1:a0:a6:f4:86:38:14:40:8e:7f:ee:9a:3b:74:04:50:62:f1:
eb:c3:e3:b1:af:03:f6:25:e9:4c:06:5c:5a:33:67:6e:a3:92:
e2:12:f1:b7:cc:d8:24:c2:24:e0:77:5e:6c:79:2e:0c:27:25:
6c:fd:fc:2e:71:2f:34:ee:50:02:0f:09:9d:a4:73:6c:11:b8:
95:77:d4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:14:10 2026 by rpki-client