Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft
File: XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft (raw, json)
Hash identifier: A6JDo40szBo/u3tg0XLf85xBEkdgQNLPVkGM3zYLbZ4=
Subject key identifier: 6A:CE:AD:74:9D:50:31:9D:23:DC:F8:A1:E7:3A:D6:88:12:40:D6:F1
Authority key identifier: 5C:8E:DA:6F:EA:6B:18:F1:0D:FD:6A:FC:0D:83:BE:FB:AA:69:C1:34
Certificate issuer: /CN=5c8eda6fea6b18f10dfd6afc0d83befbaa69c134
Certificate serial: 019D277254F99CF9938FD438D1531AC72E41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XI7ab-prGPEN_Wr8DYO--6ppwTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft
Manifest number: 03C9
Signing time: Thu 26 Mar 2026 00:01:37 +0000
Manifest this update: Thu 26 Mar 2026 00:01:37 +0000
Manifest next update: Fri 27 Mar 2026 00:01:37 +0000
Files and hashes: 1: XI7ab-prGPEN_Wr8DYO--6ppwTQ.crl (hash: NcaqaZs/vwNrHHQ8ujssfmp5uszo31T2cnV9bHep6TM=)
2: me98_wsRR7Dre8BQObFIjOvSk10.roa (hash: IWaVGy6xlS7+7awuDuk9s6GrzSOf2jIVIAxnChH+pBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XI7ab-prGPEN_Wr8DYO--6ppwTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:54:f9:9c:f9:93:8f:d4:38:d1:53:1a:c7:2e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c8eda6fea6b18f10dfd6afc0d83befbaa69c134
Validity
Not Before: Mar 26 00:01:37 2026 GMT
Not After : Mar 27 00:01:37 2026 GMT
Subject: CN=6acead749d50319d23dcf8a1e73ad6881240d6f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b6:fd:38:4d:19:36:68:5f:ba:80:45:10:57:
ba:33:30:b9:7a:c4:b7:17:33:2f:c3:0e:4e:66:cf:
e3:ad:d2:c5:d8:4a:41:a5:ef:c3:a7:3a:76:44:c1:
b7:cf:9f:f1:b3:b8:5b:9a:1d:58:a3:99:e5:fa:10:
1f:cb:fc:3c:b2:7a:51:70:f8:7a:13:08:9c:2c:a5:
49:9a:57:ec:3b:49:3a:12:64:a2:5e:cd:d0:45:80:
82:a3:b9:bf:81:b0:69:b2:5e:ee:d2:f9:0e:ec:3b:
56:73:e6:a8:08:6c:62:08:79:2b:ff:94:52:80:f4:
20:23:0c:1f:42:c3:21:4c:58:e1:1d:c8:79:fd:4e:
83:a0:e7:5f:3f:45:be:b1:f3:09:38:97:3e:39:9e:
5d:49:26:0e:b9:8d:15:59:f1:9e:e2:13:6b:46:cc:
f1:64:89:ac:4b:90:08:28:ae:a4:61:22:47:40:b6:
ce:bf:67:68:33:b1:5a:8a:73:81:34:ca:53:8e:96:
6e:6a:2b:3a:8e:31:2f:32:7e:b4:de:ca:52:06:22:
c3:25:aa:a2:15:32:41:d7:68:28:08:ac:d5:81:e7:
2a:89:73:da:51:18:f6:6d:27:77:7e:73:e9:43:93:
02:da:2a:d5:b4:a8:16:7e:4f:17:46:b4:c1:f9:33:
b6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:CE:AD:74:9D:50:31:9D:23:DC:F8:A1:E7:3A:D6:88:12:40:D6:F1
X509v3 Authority Key Identifier:
keyid:5C:8E:DA:6F:EA:6B:18:F1:0D:FD:6A:FC:0D:83:BE:FB:AA:69:C1:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XI7ab-prGPEN_Wr8DYO--6ppwTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:7a:ab:d5:9b:01:68:eb:ad:be:a3:12:91:80:87:34:c7:10:
52:79:05:29:bb:4e:e3:d2:06:63:b3:34:27:39:e0:c4:96:f0:
40:23:2b:5c:4c:ee:54:d5:26:ab:13:df:b3:f6:6f:26:b1:5a:
da:06:56:da:95:16:f3:ae:e1:a9:3f:90:b0:11:d9:57:c0:dc:
8e:67:15:29:1a:ef:63:84:92:3a:8c:09:a8:3c:4a:70:3d:6b:
de:3a:30:f9:f7:81:c4:d2:bc:f0:13:34:b1:46:b3:49:e5:ed:
87:55:35:19:41:e0:e3:57:70:7e:59:09:e0:fe:e5:5a:4f:c1:
8c:53:b5:d9:fe:cc:de:1b:58:a1:ea:d8:59:d1:f3:51:b9:56:
00:8b:f5:86:3b:16:1f:d7:4b:67:74:0a:4e:c4:c0:3c:86:18:
8f:1d:66:0e:2c:b1:72:fd:dc:5c:9b:67:21:df:af:bd:c7:e8:
03:ca:b1:8a:75:87:e3:d2:b8:aa:19:79:c4:f4:b7:0a:30:af:
5e:83:ca:56:78:71:89:f4:cd:66:26:7b:df:52:d4:2a:85:71:
0b:bd:2e:67:04:b5:60:d6:7b:80:e7:57:d0:3f:cf:f2:f6:c2:
16:13:f2:53:b3:91:49:4a:e3:0b:f0:64:e6:7d:47:f7:1f:cb:
e1:67:2e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:49:19 2026 by rpki-client