Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
File: xg8yRv3WG6G1eS_hrsStypjXWlw.mft (raw, json)
Hash identifier: XcY8hDJU8udDVzLkEXOTLR7lvkLAemOLg/s06862c2g=
Subject key identifier: A1:83:B7:9B:C0:73:4C:89:28:83:4A:5B:34:0C:BD:62:50:DE:9E:62
Authority key identifier: C6:0F:32:46:FD:D6:1B:A1:B5:79:2F:E1:AE:C4:AD:CA:98:D7:5A:5C
Certificate issuer: /CN=c60f3246fdd61ba1b5792fe1aec4adca98d75a5c
Certificate serial: 019D29CE5FCC8899CC888636EEA416CA4C4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
Manifest number: 0269
Signing time: Thu 26 Mar 2026 11:01:23 +0000
Manifest this update: Thu 26 Mar 2026 11:01:23 +0000
Manifest next update: Fri 27 Mar 2026 11:01:23 +0000
Files and hashes: 1: MmQGKSoH5LF3BVkr3ibrE-H9I9E.roa (hash: yWJCfOrBqqRptAvrnSvVrhM/S/WywcoV/IXeHHMd0es=)
2: xg8yRv3WG6G1eS_hrsStypjXWlw.crl (hash: egQT/i228cvjH2R0XNyPI8lNgklYQT8YZWCMRgDBwgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:5f:cc:88:99:cc:88:86:36:ee:a4:16:ca:4c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c60f3246fdd61ba1b5792fe1aec4adca98d75a5c
Validity
Not Before: Mar 26 11:01:23 2026 GMT
Not After : Mar 27 11:01:23 2026 GMT
Subject: CN=a183b79bc0734c8928834a5b340cbd6250de9e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a6:36:de:6a:c7:00:32:44:81:e7:bc:e1:a3:
4b:87:27:4b:94:5b:8b:21:79:db:98:2f:b5:e4:9b:
dc:98:9f:d8:9b:3c:1e:57:3b:da:30:8f:b9:80:9f:
3e:23:e4:41:b9:4f:9f:13:48:60:7d:ed:c8:bb:d7:
89:31:b2:0b:12:cb:bc:3e:c1:9c:77:19:1d:4a:0c:
a0:2c:d4:f1:28:90:02:7d:05:07:88:4b:5d:86:b9:
76:b4:da:b6:ee:67:93:b9:8d:81:01:05:57:90:54:
96:6e:dc:5a:98:dc:ea:8d:b3:c8:a9:c5:ad:e8:92:
83:71:d1:7a:6c:3c:be:f9:4f:43:94:27:b0:01:55:
c4:30:fc:41:03:f2:81:79:e1:4e:49:c0:1c:4a:21:
38:06:01:f2:23:cb:6c:ee:79:86:b1:af:75:05:69:
b2:47:cc:1a:47:31:92:f3:9e:2d:3d:ff:cf:d6:a4:
84:69:bc:e6:c2:82:75:1a:e8:9b:56:7a:28:0b:bc:
91:18:55:9a:f2:b5:c6:11:10:e6:12:4f:6f:b3:8c:
91:a5:f9:2c:e5:4d:86:a8:28:73:78:54:f3:e9:1d:
27:20:9e:f0:ab:26:0a:99:a3:42:70:66:66:9b:20:
0a:fc:af:ea:f3:a0:c2:33:ac:c6:78:c6:a9:8e:6e:
53:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:83:B7:9B:C0:73:4C:89:28:83:4A:5B:34:0C:BD:62:50:DE:9E:62
X509v3 Authority Key Identifier:
keyid:C6:0F:32:46:FD:D6:1B:A1:B5:79:2F:E1:AE:C4:AD:CA:98:D7:5A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b3:1b:cc:15:b4:ba:11:13:8c:af:ce:bd:3c:fd:59:e0:a4:
ec:6b:16:61:4f:c8:0d:97:8c:4e:ec:da:aa:9e:94:33:05:98:
3a:87:a1:56:39:f3:4a:9c:9e:60:1e:14:70:f8:25:a3:c5:6b:
e0:19:e8:c5:b5:86:6c:56:f4:06:45:9e:aa:70:85:a7:f1:9c:
88:98:42:70:2a:76:07:f0:3c:c3:ba:e9:e5:ed:61:cb:8f:70:
7c:57:df:45:04:27:14:d4:4f:ea:aa:38:d7:c0:e1:26:67:58:
ff:b5:0c:98:1f:3b:a9:02:77:44:9c:29:40:da:3b:8b:19:b7:
89:d9:1f:a0:7e:18:26:e2:ae:f2:83:bd:3b:49:5e:0e:75:47:
bc:74:2f:1a:4c:24:d8:b1:91:8b:d2:b7:ce:aa:cc:ef:53:6b:
1e:51:80:9c:0f:23:41:8c:a8:11:44:d3:12:88:62:cc:44:7a:
43:1d:da:77:26:91:44:e3:aa:fa:7e:72:0f:0e:10:3b:53:1b:
ff:cc:c5:00:4f:fc:64:94:14:ff:b3:6e:f0:eb:e1:21:fa:f6:
64:c2:b0:f1:6e:49:80:e0:34:08:98:9a:3b:82:cc:9f:f7:af:
a6:31:7e:06:a5:0f:3d:cb:dd:c1:ea:64:ce:74:71:e8:db:e5:
85:41:58:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:26:32 2026 by rpki-client