Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft
File: x5d6en0rE11ac3kcp889mtpYj2s.mft (raw, json)
Hash identifier: KwtR6ey41/wWU2G/0W0bobvnyj+2vAUB8RuPEPpnTOk=
Subject key identifier: 1A:97:B3:42:38:25:2C:02:4F:CE:3C:F8:DE:3D:BD:38:BF:ED:44:A3
Authority key identifier: C7:97:7A:7A:7D:2B:13:5D:5A:73:79:1C:A7:CF:3D:9A:DA:58:8F:6B
Certificate issuer: /CN=c7977a7a7d2b135d5a73791ca7cf3d9ada588f6b
Certificate serial: 019D29CED9C9EA617CC692BA30B20ABFB507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5d6en0rE11ac3kcp889mtpYj2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 11:01:55 +0000
Manifest this update: Thu 26 Mar 2026 11:01:55 +0000
Manifest next update: Fri 27 Mar 2026 11:01:55 +0000
Files and hashes: 1: obbIRXSf7o8eyn8AX9K_sXlcOOA.roa (hash: ju/bIy7nXAPL/xatGDGkzr+qevUa2q9qUxQ/kQdO+6k=)
2: x5d6en0rE11ac3kcp889mtpYj2s.crl (hash: g6YzJUMQOZVFIpugEt+9As0wbyuxi/K3xRBsQPpNd0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/x5d6en0rE11ac3kcp889mtpYj2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:d9:c9:ea:61:7c:c6:92:ba:30:b2:0a:bf:b5:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7977a7a7d2b135d5a73791ca7cf3d9ada588f6b
Validity
Not Before: Mar 26 11:01:55 2026 GMT
Not After : Mar 27 11:01:55 2026 GMT
Subject: CN=1a97b34238252c024fce3cf8de3dbd38bfed44a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ab:00:36:60:db:c7:75:e2:c8:44:b6:97:a6:
7c:ac:19:a4:95:a1:d7:5e:a9:61:fc:fd:72:5c:f8:
0e:dc:e4:e1:a0:f4:7a:21:05:6c:ca:d2:01:0f:49:
cb:ea:15:1a:89:aa:01:3c:46:8d:01:90:13:2f:09:
0f:34:23:01:a5:4f:1c:7a:fd:44:bd:40:9f:8c:8f:
c7:6c:4a:b2:6f:cc:e6:2b:d6:f4:56:0d:29:83:27:
a1:b4:ac:e9:3c:e8:4c:ae:53:05:a0:5e:c9:4a:83:
00:e6:1a:19:01:f9:6d:c5:93:20:3f:c2:3a:71:05:
b9:34:39:3d:ef:56:a1:b1:19:69:93:74:f3:8d:39:
56:38:b9:0f:5c:e1:08:1e:8e:d7:0c:22:e7:e8:59:
6a:1d:c5:0f:70:5e:13:5d:48:ac:09:f9:0a:96:3f:
03:9c:d7:76:b1:2a:79:2e:7a:7e:02:20:3c:2e:0a:
06:5c:19:db:55:7c:25:9a:76:a1:25:36:7c:37:35:
0b:2e:48:aa:e1:93:69:e2:a8:09:45:6d:77:35:a6:
7f:b9:61:e5:40:e6:51:2d:b2:c2:6b:77:1b:cb:ee:
76:88:9a:c3:ed:86:02:b4:94:a0:b8:95:03:5f:fb:
af:4b:12:39:1c:77:d8:aa:91:cc:ab:72:d7:09:55:
bf:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:97:B3:42:38:25:2C:02:4F:CE:3C:F8:DE:3D:BD:38:BF:ED:44:A3
X509v3 Authority Key Identifier:
keyid:C7:97:7A:7A:7D:2B:13:5D:5A:73:79:1C:A7:CF:3D:9A:DA:58:8F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5d6en0rE11ac3kcp889mtpYj2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:03:f0:7b:28:96:2f:36:c0:cc:b8:04:25:24:f0:b5:f5:7a:
cd:bf:43:44:7a:39:95:58:c0:06:3c:2c:c3:7e:ce:74:c9:2a:
33:08:fc:e3:be:a5:12:e0:57:4f:86:78:8a:86:25:fc:22:aa:
33:7a:35:42:13:53:41:aa:27:d2:7a:c6:a0:4f:af:06:cf:6a:
13:1c:5d:d9:29:5c:9e:d9:86:a9:7a:f8:53:1e:2f:2c:43:f5:
22:d6:27:2b:87:cf:f5:1e:0a:2e:91:1a:29:ac:54:f3:76:a1:
f7:e9:50:c0:1d:5b:a8:40:8a:9a:c7:e9:19:6e:8d:2a:24:6d:
58:9f:fa:ba:e7:1b:b5:8d:2d:6b:bf:05:03:7a:15:d7:e0:14:
88:8f:ea:41:14:05:d2:88:d8:ca:99:ec:b0:36:e8:ef:6f:8d:
8d:64:32:4b:03:94:06:2d:91:bb:8d:ad:cc:70:04:15:35:b7:
7f:05:b4:51:a8:4a:81:7d:e9:d0:d3:2a:d5:5c:d3:8f:d5:d3:
00:5a:f6:cb:15:e8:08:8a:ee:ff:ea:80:f6:c7:43:7f:8e:e7:
3b:c6:13:e4:af:65:28:99:6d:3c:e7:f0:dc:4a:22:16:23:ed:
da:7a:89:1c:ef:a0:f9:a3:18:bf:eb:91:e4:69:7e:4e:f7:13:
d4:28:e6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:28:46 2026 by rpki-client