Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
File: x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft (raw, json)
Hash identifier: 6JsSzfNjjNe9H7VUdPRuB+W4aXnoOe4Es/ubuM0edDs=
Subject key identifier: AA:38:7E:1B:54:F8:0D:FB:C8:AE:3C:DB:BF:16:3E:D8:CC:30:B0:BB
Authority key identifier: C7:D9:14:62:C4:DC:1D:F6:A8:A3:A9:7A:1A:EE:57:A0:CC:14:EF:BA
Certificate issuer: /CN=c7d91462c4dc1df6a8a3a97a1aee57a0cc14efba
Certificate serial: 019D284E35D0C09FEC14CDC0436A7D9D4C9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
Manifest number: 168A
Signing time: Thu 26 Mar 2026 04:01:47 +0000
Manifest this update: Thu 26 Mar 2026 04:01:47 +0000
Manifest next update: Fri 27 Mar 2026 04:01:47 +0000
Files and hashes: 1: XKs6KgfU6aQLIAOaUuz9aSWnClo.roa (hash: vxBudXeCf0peWMd7lO7aysk2NB+ZqNxmrMni5vjOPPQ=)
2: x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl (hash: WEv1jvVJYDxoHHiXbraVtkAdjt+H6qlQUWMN4WtxSTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:35:d0:c0:9f:ec:14:cd:c0:43:6a:7d:9d:4c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7d91462c4dc1df6a8a3a97a1aee57a0cc14efba
Validity
Not Before: Mar 26 04:01:47 2026 GMT
Not After : Mar 27 04:01:47 2026 GMT
Subject: CN=aa387e1b54f80dfbc8ae3cdbbf163ed8cc30b0bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:56:fd:ae:12:6a:c5:02:9c:14:66:eb:f7:9c:
f0:69:46:0c:e8:ef:e9:49:f0:76:2e:d1:d0:8b:58:
51:70:69:75:86:c8:3e:7a:e8:f9:9d:ae:c8:49:4f:
f5:70:d3:be:5f:27:3b:7c:ea:1c:0e:81:7a:d0:8e:
48:7d:e3:89:c8:45:91:45:d1:b1:2f:e3:94:6e:92:
ff:f9:ab:45:eb:de:16:cd:f4:c6:46:51:3d:42:f6:
5b:aa:5e:b1:ed:31:35:8b:2f:e4:24:a7:89:4b:98:
9c:2b:d5:59:6b:dc:6d:79:4d:73:22:c5:e7:91:e9:
b5:55:ee:99:06:ac:da:60:7d:51:7a:b2:71:e9:54:
3e:55:52:54:74:25:35:8e:f4:a3:6c:c5:cc:90:08:
3e:4f:5a:ed:54:92:48:28:b8:f7:a2:b8:51:ac:35:
a2:81:68:23:1f:86:1c:9f:f5:64:54:52:3b:fc:45:
6c:9f:1f:d9:f0:f4:19:99:94:e6:45:83:08:ad:f7:
aa:f3:ca:fd:5a:9e:41:ca:3a:17:f3:51:08:d6:13:
94:0e:c1:bf:ba:33:75:97:41:0a:63:56:71:e1:80:
37:40:67:28:4d:ae:c4:94:f0:03:08:df:7a:d6:c0:
ef:90:b3:fa:02:21:b5:99:72:6e:d8:40:04:d6:7e:
1a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:38:7E:1B:54:F8:0D:FB:C8:AE:3C:DB:BF:16:3E:D8:CC:30:B0:BB
X509v3 Authority Key Identifier:
keyid:C7:D9:14:62:C4:DC:1D:F6:A8:A3:A9:7A:1A:EE:57:A0:CC:14:EF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:47:5e:6a:b8:55:ca:82:0a:a4:05:e9:2a:f6:74:eb:50:6b:
3e:60:33:2f:bd:a9:3c:0e:e5:1d:7c:c2:58:65:fa:27:dd:2e:
58:b0:86:d1:3d:31:66:61:89:5c:fd:fb:88:75:65:0d:b3:c1:
e5:5e:3f:bc:7d:bc:6e:cf:4f:2f:e4:46:60:ca:49:8d:70:cb:
19:7e:72:6e:96:88:4b:d0:be:2c:54:15:ef:18:6e:1b:da:67:
39:19:5a:20:79:0d:3c:ce:2c:ad:b4:bc:15:3f:57:d9:66:44:
8c:79:b0:cd:4d:af:a6:50:78:28:db:48:48:36:df:cd:6c:82:
9a:16:c3:c6:f5:82:7d:84:cc:81:5f:d2:ea:4f:75:73:d8:81:
a9:83:0c:b0:10:a3:60:f1:0a:36:93:f9:ff:75:e9:1c:95:7a:
62:a3:91:3f:78:d1:3b:2e:17:89:51:66:d3:76:4c:44:90:13:
84:f0:76:a1:37:e3:37:df:d4:7a:42:fc:b6:3b:d6:28:3b:06:
5a:ec:a8:7e:b8:6a:e5:ef:53:24:0d:6a:d0:c0:47:11:49:0f:
0d:6d:7e:fa:35:1c:75:b0:05:76:e8:c7:18:49:01:62:c5:c3:
a6:2d:90:0e:63:cf:cd:d9:52:27:8d:e8:0c:fb:49:ef:32:00:
2f:e7:38:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:31:20 2026 by rpki-client