Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft
File: xZttw7wi9sNqA5hVU0stQauxJCM.mft (raw, json)
Hash identifier: EQnvKZ90buuwh/aPfe79XV2LiZXLC0uREfMknzXOrbo=
Subject key identifier: 28:5A:F0:90:F6:11:1C:7E:E7:A7:FF:45:A8:BA:8E:A2:7C:98:89:3C
Authority key identifier: C5:9B:6D:C3:BC:22:F6:C3:6A:03:98:55:53:4B:2D:41:AB:B1:24:23
Certificate issuer: /CN=c59b6dc3bc22f6c36a039855534b2d41abb12423
Certificate serial: 019D27DFA2E188544E3CC39614E2AF619E80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZttw7wi9sNqA5hVU0stQauxJCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 02:01:00 +0000
Manifest this update: Thu 26 Mar 2026 02:01:00 +0000
Manifest next update: Fri 27 Mar 2026 02:01:00 +0000
Files and hashes: 1: XddFO1_V4vw4BFewS5a4h464RsI.roa (hash: 6STZFqkc7/OsVyHseLRUMCPEN6uwIoKNwxdIv1/YIe8=)
2: xZttw7wi9sNqA5hVU0stQauxJCM.crl (hash: LumfPN4MP/MQqM6XvM+GmoLoJJFBFyUqQf5LKdgi/jY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZttw7wi9sNqA5hVU0stQauxJCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:a2:e1:88:54:4e:3c:c3:96:14:e2:af:61:9e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59b6dc3bc22f6c36a039855534b2d41abb12423
Validity
Not Before: Mar 26 02:01:00 2026 GMT
Not After : Mar 27 02:01:00 2026 GMT
Subject: CN=285af090f6111c7ee7a7ff45a8ba8ea27c98893c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:34:a1:bf:de:1f:4a:a0:23:ff:d1:33:34:9a:
f5:78:27:79:5a:5a:59:5d:bc:29:3a:21:55:7f:ac:
2b:57:b4:ca:f1:5c:64:5f:e7:bf:d1:c2:ee:34:35:
8d:23:2b:87:1e:db:99:e9:60:01:1d:d9:9f:45:1c:
ed:cb:36:f8:02:0e:8b:ec:46:bb:3b:f3:4d:ea:5c:
1b:d0:c6:79:bc:0c:e5:62:1d:0d:7c:31:9f:8a:32:
83:7a:77:dd:b6:e9:b2:4c:e9:59:42:ab:5a:25:20:
71:63:a9:be:83:84:8a:9a:6a:11:d7:b1:79:02:18:
ba:8f:43:32:5f:73:2b:23:02:3c:a9:93:68:9f:f1:
2e:e0:5e:46:18:aa:d2:c3:2c:98:42:77:5e:41:b8:
f2:58:91:8b:fb:62:92:62:27:b8:2c:f9:aa:82:5e:
4e:58:ef:f1:65:ab:d0:7d:ed:f6:db:bf:f1:e7:7f:
f4:16:d4:c7:a0:e9:34:8a:0a:57:9a:56:ea:6a:f5:
7e:b6:31:e3:07:52:09:77:75:b5:eb:85:4a:b2:3c:
c8:8a:ee:f8:e4:ad:51:90:62:8f:7a:96:ee:88:e1:
5d:27:8c:06:ea:b7:87:01:f7:95:73:52:8a:61:56:
1b:d1:8e:e1:9f:4e:82:18:2c:25:79:a3:ac:b3:4d:
b1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5A:F0:90:F6:11:1C:7E:E7:A7:FF:45:A8:BA:8E:A2:7C:98:89:3C
X509v3 Authority Key Identifier:
keyid:C5:9B:6D:C3:BC:22:F6:C3:6A:03:98:55:53:4B:2D:41:AB:B1:24:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZttw7wi9sNqA5hVU0stQauxJCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:38:d6:9f:43:c6:65:06:51:d3:48:a5:aa:e9:a8:02:34:3a:
0b:a1:e2:95:e6:07:56:b0:f4:16:06:1b:01:79:01:dc:93:9b:
a8:97:5f:d9:a7:31:89:28:a0:a8:8b:e2:7b:c1:b1:69:f7:5e:
00:ab:8a:ef:65:2d:ab:4c:7b:12:ce:57:7a:ac:6f:96:68:66:
c7:c9:c7:50:35:e2:30:c3:71:3c:4a:5b:cb:81:d9:15:c4:af:
f5:e6:58:19:d2:ad:ba:4a:2a:0c:2b:f9:5b:e6:70:7c:60:35:
e5:9d:3c:33:ef:17:30:5c:ad:75:02:c5:bd:f8:81:7b:8f:51:
33:a9:37:d4:24:0f:a3:f8:2e:e0:2e:13:4d:4c:b6:9b:76:c0:
49:2f:e6:c9:9a:07:86:5a:27:c5:f8:63:60:94:b0:fe:ce:d5:
eb:e8:98:da:5f:d5:7d:6a:95:a3:ee:b3:b2:82:d0:49:c6:0f:
4f:7d:16:54:5d:3c:db:65:0f:30:6c:6c:e5:b5:03:29:26:97:
42:99:aa:3b:0e:e0:d7:c7:93:37:33:cf:ff:10:09:fc:80:31:
0d:46:8a:bc:42:a9:cb:52:83:e1:6a:9b:88:d2:35:18:43:c0:
9d:73:f5:e4:44:43:ba:3b:53:c4:64:d5:40:cb:08:1a:f8:24:
d3:c0:30:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:30:36 2026 by rpki-client