Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
File: xzic6Ca8jSaGm0UvPNk2kCxVL78.mft (raw, json)
Hash identifier: w4576HjienshG+r3rGFSgnt/Tr4a1ctJ0QIhjdE83SQ=
Subject key identifier: B5:56:F1:CB:A5:9E:35:00:F8:D0:66:5E:1E:4F:EE:49:D9:2A:DA:B8
Authority key identifier: C7:38:9C:E8:26:BC:8D:26:86:9B:45:2F:3C:D9:36:90:2C:55:2F:BF
Certificate issuer: /CN=c7389ce826bc8d26869b452f3cd936902c552fbf
Certificate serial: 019D2628435890043F1405B4B9E729F61CE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
Manifest number: 0DFA
Signing time: Wed 25 Mar 2026 18:01:05 +0000
Manifest this update: Wed 25 Mar 2026 18:01:05 +0000
Manifest next update: Thu 26 Mar 2026 18:01:05 +0000
Files and hashes: 1: AsK2uztnxQm7GmE36ie8VWKszqc.roa (hash: MmG9MMdxlYTR95FSVo5MmqnSkxmRmjdkjXGjYjlA1cA=)
2: xzic6Ca8jSaGm0UvPNk2kCxVL78.crl (hash: yVKwSEvPqGPJxr/PGgD8UYQYRsTpBOeLELoIpaHZ3wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:43:58:90:04:3f:14:05:b4:b9:e7:29:f6:1c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7389ce826bc8d26869b452f3cd936902c552fbf
Validity
Not Before: Mar 25 18:01:05 2026 GMT
Not After : Mar 26 18:01:05 2026 GMT
Subject: CN=b556f1cba59e3500f8d0665e1e4fee49d92adab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e9:af:e4:02:7d:47:d4:c8:b4:11:e8:13:2a:
06:df:5e:4a:ed:2b:a7:4c:a6:7b:c0:68:ac:e0:8c:
b3:43:a0:a9:6c:62:87:bf:84:7e:03:0e:5d:52:2e:
6d:dd:ad:02:99:49:45:5f:82:87:9a:9f:52:ab:90:
82:77:93:a0:e4:3a:e5:0c:53:3b:80:60:a3:5a:2d:
7f:b7:46:b1:59:4a:c3:80:b3:8e:90:4d:31:f4:71:
71:57:4d:72:4d:16:b2:68:19:07:a3:de:e1:8a:2e:
1c:94:f5:9c:a6:af:32:06:2b:e6:87:b7:e8:c4:e0:
7f:98:57:ff:a1:07:c3:cb:ec:cf:4a:b5:9c:ce:94:
80:c1:c8:57:fc:e3:b9:56:1d:3c:e4:43:3b:16:07:
64:6e:c5:ae:22:9e:7b:a2:8c:20:ba:e7:be:1d:a6:
28:6f:91:32:6b:69:ca:19:00:7d:49:d9:c3:4b:b0:
27:77:33:8c:bf:c2:46:df:23:a4:e9:06:e6:0b:dc:
ec:88:bc:ab:d1:b9:25:44:db:b4:73:fc:67:82:e7:
58:8b:83:c3:1e:11:49:4b:25:ff:ad:64:fb:7c:28:
6f:a5:76:31:ae:df:15:98:5c:40:a7:31:68:0c:69:
f4:38:59:da:e4:1b:f7:64:0a:f4:9a:2b:60:91:79:
d5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:56:F1:CB:A5:9E:35:00:F8:D0:66:5E:1E:4F:EE:49:D9:2A:DA:B8
X509v3 Authority Key Identifier:
keyid:C7:38:9C:E8:26:BC:8D:26:86:9B:45:2F:3C:D9:36:90:2C:55:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:77:b7:cc:d1:f2:c1:58:12:da:6e:1f:ef:24:ca:30:c2:b1:
a5:18:4e:ce:cf:71:7c:9c:2c:06:5f:c5:7f:7e:e7:47:82:ae:
24:92:15:c3:5c:10:27:73:76:ac:62:6c:06:82:12:62:41:be:
23:27:7d:2a:bb:5d:61:e3:f8:24:35:7c:14:b0:23:cd:e6:83:
6d:fb:3b:0c:ad:59:4f:15:02:29:7e:54:57:e0:1d:e3:2d:08:
d0:72:3e:50:e9:11:79:0a:de:2e:8c:84:86:a7:03:ad:fb:55:
62:59:af:62:a4:cb:35:aa:02:ea:bc:df:0b:a4:ca:f6:8b:08:
c0:74:81:ff:7d:31:cc:f8:3a:81:ef:5a:1e:f9:ca:4f:4f:13:
77:ee:55:e1:7b:a7:76:62:90:ee:e5:95:39:c9:aa:da:af:4e:
3a:fd:9a:75:7f:30:d5:57:ae:6c:6d:04:16:8c:08:82:28:a1:
a0:50:02:04:05:fc:bb:c5:cb:82:bb:50:e5:53:95:70:cf:e3:
a1:0a:6f:b2:79:44:aa:f6:40:9e:ac:85:10:f0:17:cf:40:db:
16:5e:75:d8:19:d6:b3:93:55:bb:3f:8e:88:eb:87:f6:9e:7c:
51:3d:dc:8c:4e:e4:c0:9b:c8:42:94:07:f4:a9:0f:59:02:ed:
55:0c:ce:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:41:15 2026 by rpki-client