Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
File: xXHZWAqPAeScYcX8_f8uWJlTS48.mft (raw, json)
Hash identifier: 6QTM2L31W1woDivlp/gsrhALlj70s85ooRywUH3tPa4=
Subject key identifier: 71:20:F7:A2:13:14:AF:38:A5:3D:75:DA:F3:A0:5E:D1:81:9D:B1:4B
Authority key identifier: C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F
Certificate issuer: /CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f
Certificate serial: 019D2A3BA03F6D54CCB8F3AE4DE50B8BB72B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
Manifest number: 073C
Signing time: Thu 26 Mar 2026 13:00:43 +0000
Manifest this update: Thu 26 Mar 2026 13:00:43 +0000
Manifest next update: Fri 27 Mar 2026 13:00:43 +0000
Files and hashes: 1: uWNKx0IJVXvtTHYU4bkunZTjfuw.roa (hash: AUH4XmlqocQ9F/9lHvt0FvG+HzGfyUQaY0PdFUq9T4I=)
2: xXHZWAqPAeScYcX8_f8uWJlTS48.crl (hash: DCC+eH0aqxwo0TNbBE1mPK39Sh2QLGF2kLOo19JwjSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:a0:3f:6d:54:cc:b8:f3:ae:4d:e5:0b:8b:b7:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f
Validity
Not Before: Mar 26 13:00:43 2026 GMT
Not After : Mar 27 13:00:43 2026 GMT
Subject: CN=7120f7a21314af38a53d75daf3a05ed1819db14b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fe:fd:7c:9c:16:15:8a:0f:34:af:e9:fd:6e:
44:c9:35:85:e7:92:d9:8c:e7:10:fb:dc:7f:42:86:
0e:82:32:27:12:c9:08:47:a5:e1:5b:c3:01:01:f4:
84:ca:21:3d:4f:52:96:6e:00:45:33:85:2a:a0:61:
0d:28:95:f9:d4:8a:f2:ed:57:ac:25:c2:c2:e7:9f:
e7:c4:e1:88:9f:f7:2e:56:26:9c:e5:c8:59:ff:cc:
b3:24:61:8a:c0:72:66:8d:64:6e:3b:06:35:7c:0e:
60:2c:d2:84:1c:b7:ad:2b:8d:83:8e:44:93:f2:c6:
24:21:77:8e:1b:41:35:28:40:11:87:a3:35:15:be:
bf:a5:56:9a:67:ec:eb:b1:20:71:87:5b:b8:a8:67:
76:4d:89:b3:39:2c:40:c2:02:e2:a5:16:53:78:f5:
8f:86:76:cf:ce:10:bd:71:66:91:f6:f3:ea:20:c2:
24:5c:5f:07:49:63:f1:4d:d1:55:99:04:55:de:1f:
ea:65:2a:ac:8c:5a:81:84:50:5b:6e:df:5c:e1:48:
40:52:35:3a:8d:19:74:04:32:01:f5:e4:c7:86:c9:
cf:74:6d:1c:c4:a7:49:f3:c3:6b:f8:85:60:35:c0:
39:6e:2c:b3:9f:89:87:6c:93:e3:01:6a:75:4f:ad:
39:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:20:F7:A2:13:14:AF:38:A5:3D:75:DA:F3:A0:5E:D1:81:9D:B1:4B
X509v3 Authority Key Identifier:
keyid:C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:1a:77:9b:62:a0:38:4c:00:df:8a:f8:5e:d9:31:d5:46:7d:
e7:e5:ff:78:a3:18:4c:89:c4:bc:c9:5b:80:80:8b:0c:9b:7e:
34:50:17:e2:06:7b:ed:6e:06:c8:a8:e7:df:fc:dc:d8:f5:e9:
fe:2d:09:9a:b6:7a:9b:42:35:33:c2:ef:22:c4:81:58:c9:28:
ab:f4:9e:91:f8:ac:db:61:e6:50:61:71:37:d2:c0:b3:2f:c4:
d8:68:f3:08:a5:11:38:4d:cd:78:52:82:4d:98:71:f7:8d:da:
20:55:4e:ca:06:55:c2:09:59:b8:e6:37:ff:af:71:e6:59:07:
46:3e:db:c3:42:2e:c7:34:af:73:72:d1:bd:6d:d7:73:df:82:
0e:38:59:b9:dd:08:dd:41:2f:f0:2f:f4:b4:42:75:5a:f9:af:
2e:06:a6:aa:3a:f8:5a:7c:7b:8c:c4:74:57:16:1a:f1:4c:e1:
12:c5:bd:4b:69:a6:7b:aa:b9:7b:d4:f0:b0:0a:38:d6:53:b3:
c4:f8:26:90:0b:83:42:19:7c:2d:15:28:d3:3f:ca:8e:4d:35:
33:b4:89:60:7d:4e:0c:a9:f8:81:c9:21:1a:48:dc:66:4f:44:
66:71:43:8b:15:1f:be:b2:48:52:b0:17:0d:5c:bb:b7:71:c1:
0b:66:78:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:22:43 2026 by rpki-client