Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
File: x2sILxfCC126JFzqbk5unGCZzvc.mft (raw, json)
Hash identifier: F/1gjTSR+wXxG/HMFevuwlQRKDTO9K08D5JaIiMB6Zk=
Subject key identifier: C9:1A:87:62:EC:83:6E:3A:F3:22:77:A1:E5:2F:32:FE:A0:B8:58:7E
Authority key identifier: C7:6B:08:2F:17:C2:0B:5D:BA:24:5C:EA:6E:4E:6E:9C:60:99:CE:F7
Certificate issuer: /CN=c76b082f17c20b5dba245cea6e4e6e9c6099cef7
Certificate serial: 019D284D3C508FF2CE1DC431EF2F213825AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
Manifest number: 0B64
Signing time: Thu 26 Mar 2026 04:00:43 +0000
Manifest this update: Thu 26 Mar 2026 04:00:43 +0000
Manifest next update: Fri 27 Mar 2026 04:00:43 +0000
Files and hashes: 1: cnFiZY7qwJbMwSvpZZiZsqKr_Do.roa (hash: 48IPezm1nI8pkv7kwBfhTKNFTjJ1YkJ3TGASpAZ4rvY=)
2: x2sILxfCC126JFzqbk5unGCZzvc.crl (hash: 895qjRwuyIk20Sipv0md7WXQMoz3MaONVgeS4vx74hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:3c:50:8f:f2:ce:1d:c4:31:ef:2f:21:38:25:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76b082f17c20b5dba245cea6e4e6e9c6099cef7
Validity
Not Before: Mar 26 04:00:43 2026 GMT
Not After : Mar 27 04:00:43 2026 GMT
Subject: CN=c91a8762ec836e3af32277a1e52f32fea0b8587e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:20:34:a3:45:12:a9:e7:2c:99:6d:da:b8:a6:
96:c5:5e:d4:41:11:66:db:1f:9b:8a:e9:db:f8:91:
86:51:c8:b4:c3:9e:41:be:0c:55:70:68:10:44:6f:
42:65:52:c5:be:69:69:be:58:73:5d:28:81:be:60:
a2:12:b7:b5:fc:30:e8:f2:15:f0:e0:09:bc:4b:0f:
4a:0b:21:f3:d5:73:3a:24:57:ea:fe:75:93:1a:b9:
d3:a5:b5:88:f0:d7:c2:4d:98:f5:a0:14:f3:ba:9b:
5a:90:f3:74:54:fe:1f:65:ce:e5:ce:13:e2:01:3c:
ac:28:4c:5a:40:1a:f1:c9:39:57:6a:ba:e6:22:5e:
7b:48:0d:14:9a:6f:15:a8:4f:14:82:8f:24:30:d6:
48:4e:b3:a0:00:ec:7a:a4:12:6c:fc:33:a4:97:da:
d0:d3:8b:1c:da:cc:05:bc:80:e5:68:b4:c2:44:60:
4f:d7:b7:b3:b3:29:f9:d8:7e:51:5b:f6:7f:25:14:
0f:c7:48:ea:44:7e:af:3b:90:e9:18:ca:5b:fb:6e:
9e:77:90:06:61:2d:0f:49:8d:3c:32:cc:f7:0d:6d:
d4:7f:6e:bc:41:8f:67:04:a0:91:af:15:7c:00:32:
b4:ff:c1:be:9b:92:9a:45:aa:2a:dc:64:ab:bd:19:
6a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1A:87:62:EC:83:6E:3A:F3:22:77:A1:E5:2F:32:FE:A0:B8:58:7E
X509v3 Authority Key Identifier:
keyid:C7:6B:08:2F:17:C2:0B:5D:BA:24:5C:EA:6E:4E:6E:9C:60:99:CE:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:99:1b:8d:59:48:48:64:6e:ac:c6:a8:b1:ca:5b:e9:c6:6e:
e5:63:40:1e:5c:40:f8:1a:49:f5:8e:c3:60:9a:f1:c6:be:5d:
ba:81:3f:51:bc:b4:43:99:ff:33:46:d6:e9:6f:bc:70:f4:d7:
75:cc:02:91:fb:f8:52:91:2f:6e:7a:a6:17:6e:ea:f8:54:28:
4b:ee:b8:59:d9:ab:00:33:8f:10:36:97:4f:0d:e6:be:88:c2:
81:a6:4f:71:7d:24:b6:3a:b3:db:1b:48:8b:5b:9a:8c:a2:b7:
9a:f2:70:17:08:f9:b7:e3:cc:2c:25:f5:21:74:aa:48:72:1f:
ce:aa:d2:7b:30:dc:b9:55:05:b0:c9:03:b5:f6:74:5a:56:26:
73:94:23:1b:a1:e3:20:5c:32:34:3d:a5:7c:ea:7d:1d:9c:22:
7b:f6:7a:83:1f:80:d6:f0:d0:3f:6f:85:3a:fa:6f:45:ba:b4:
de:7b:45:7f:1a:c7:ce:5a:32:89:09:4c:a0:37:a3:40:5b:03:
e8:19:5e:71:fa:71:4a:e0:b5:1c:91:8e:c9:43:6d:10:0f:1b:
25:e9:db:ef:a0:8d:ff:6f:4c:d4:8d:84:40:97:1d:6f:95:4c:
8b:d0:6e:96:bf:41:6a:03:04:20:ca:d2:12:c7:5d:e5:43:2d:
58:ae:15:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:39:40 2026 by rpki-client