Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
File: x6TS9okT6s5sn1CSvcfdIPV09Dg.mft (raw, json)
Hash identifier: SqcYdNP1VmtJQsO1c3u8vasxlZyyVaLeTbEaF8YY1zo=
Subject key identifier: 32:67:4D:9F:B8:9D:3C:AF:C1:F3:A4:F2:2E:0D:CC:35:2A:C9:03:9B
Authority key identifier: C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38
Certificate issuer: /CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438
Certificate serial: 019D25BA66D1ABDDEA740527B50C8345CCCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
Manifest number: 188C
Signing time: Wed 25 Mar 2026 16:01:06 +0000
Manifest this update: Wed 25 Mar 2026 16:01:06 +0000
Manifest next update: Thu 26 Mar 2026 16:01:06 +0000
Files and hashes: 1: FXTyPwjMGAiU5KxW_Bfbg2AROHw.roa (hash: OnE+aJgFklXNXWETHHDMbnfVlcK0uF/bBVveHl9Em7A=)
2: T3lGsdRYO3Jiv8YeumY1-URxH8k.roa (hash: 2iZU0Zg9KB5iXER8e3UtbINmEwCtWsu/Q8hRWGFKAwI=)
3: x6TS9okT6s5sn1CSvcfdIPV09Dg.crl (hash: DcINNTwzfw1nyF1f5jq00/rBZpiWqa4S4XtjsqWTw3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:66:d1:ab:dd:ea:74:05:27:b5:0c:83:45:cc:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438
Validity
Not Before: Mar 25 16:01:06 2026 GMT
Not After : Mar 26 16:01:06 2026 GMT
Subject: CN=32674d9fb89d3cafc1f3a4f22e0dcc352ac9039b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:28:49:83:50:e8:a8:0d:2b:26:13:3b:27:18:
92:df:8d:07:a0:64:74:02:d0:06:a7:65:c8:59:06:
7b:ad:66:fe:29:37:65:91:a8:ff:d7:fb:74:89:f6:
00:3e:6e:ac:fb:81:fd:06:aa:52:6c:fa:95:a4:1b:
0a:94:aa:01:47:dd:b1:da:a8:72:d2:b5:5a:a7:a8:
16:9a:9c:8a:f1:c7:8a:9a:51:00:db:29:1b:96:68:
84:26:72:87:db:68:03:50:68:6f:4b:dc:9d:9f:b1:
a5:69:ba:9b:3a:88:d1:56:02:2d:75:5f:2b:fb:e1:
f3:98:3b:bb:a9:96:84:b0:02:0f:8b:66:d9:64:81:
e2:cc:0f:1c:42:5e:8e:2e:e2:f2:23:cb:33:b3:48:
f8:cd:6d:9d:4d:e9:9f:90:2f:13:8a:4e:bd:2f:17:
b4:0d:60:30:a8:ce:8b:14:6e:1d:c2:db:09:b5:46:
f5:05:9d:e6:8d:1f:58:5b:27:9a:77:6c:e3:eb:07:
c2:1a:fd:cf:7b:d7:8f:b1:77:19:5e:8f:09:a7:ad:
ae:86:7e:8c:e0:60:26:ac:16:02:f4:74:c8:6b:56:
93:20:86:28:74:f9:fe:81:e1:b9:65:8c:0f:13:eb:
9c:ab:0a:e2:4c:6f:9c:f9:26:80:c2:d0:5b:46:c4:
a8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:67:4D:9F:B8:9D:3C:AF:C1:F3:A4:F2:2E:0D:CC:35:2A:C9:03:9B
X509v3 Authority Key Identifier:
keyid:C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:29:09:35:e5:f6:c7:74:ab:68:82:5d:b3:7d:e0:dc:49:00:
79:39:ae:f5:50:d2:ba:05:54:25:df:12:af:85:8d:90:f9:b5:
53:97:ba:a0:2d:e2:20:ac:64:4f:f9:0d:ea:2b:91:08:29:5d:
31:d8:6a:53:c8:75:6a:39:86:00:9b:ac:8d:93:05:d0:07:e3:
d5:2d:58:ed:9f:b3:36:40:90:c7:45:31:11:b9:91:a8:67:02:
96:01:4f:e7:67:05:21:d1:be:a8:ec:0c:50:da:b2:eb:d5:d1:
9d:b2:a9:43:13:e5:87:9e:c4:79:09:8a:00:8f:92:b6:e6:8d:
71:49:be:c3:70:06:83:2a:f2:8f:18:fb:92:88:3c:e1:77:07:
61:8a:de:a6:4d:50:be:89:08:af:84:a4:74:5d:f5:fb:a9:e3:
59:bf:12:03:b9:29:67:1b:4a:ac:8d:80:21:22:d7:ed:d5:2c:
4d:e2:ff:05:b1:d6:1b:18:39:85:5f:3f:f9:53:4a:0b:9a:cb:
44:e1:19:8e:16:42:b7:b3:89:47:e9:92:5c:de:f9:c3:c6:dd:
ff:72:ab:bf:59:dd:fd:21:96:03:97:55:75:b9:b1:55:e2:6e:
fc:7d:83:24:1a:30:05:2d:b6:3f:0b:5c:c5:be:e4:f3:b3:45:
e8:3e:1f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:46:50 2026 by rpki-client