Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
File: xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft (raw, json)
Hash identifier: s8FWVznpDVZds5RgKoxOU7ICUqWwnlpRZvbL6qfMSL8=
Subject key identifier: 4A:5F:AA:6E:BA:30:95:86:BF:81:4F:63:63:52:34:8F:D7:0C:19:D5
Authority key identifier: C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4
Certificate issuer: /CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
Certificate serial: 019D27DF93D45E92CE5678A4016B3A75211D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
Manifest number: 097F
Signing time: Thu 26 Mar 2026 02:00:56 +0000
Manifest this update: Thu 26 Mar 2026 02:00:56 +0000
Manifest next update: Fri 27 Mar 2026 02:00:56 +0000
Files and hashes: 1: DXdb0QbgjHMGHimqfVTZInAkH0I.roa (hash: zClF7sUyyb6keJxNkbEQRGoa69WKNSmQnfjqa4nnCv8=)
2: rDKGPxVegdVjKSh5RnICAFOVm5s.roa (hash: Xcgmgg/GuSeVcsd6rM/OBeKREsZ93Yvuqbvwr0v7xYc=)
3: xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl (hash: oHnGtjCcRMgqzcf5voBafpd4hf+YkoL8gX4osTGUF+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:93:d4:5e:92:ce:56:78:a4:01:6b:3a:75:21:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
Validity
Not Before: Mar 26 02:00:56 2026 GMT
Not After : Mar 27 02:00:56 2026 GMT
Subject: CN=4a5faa6eba309586bf814f636352348fd70c19d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d1:0c:6a:14:8f:90:1e:ad:fe:c3:ec:87:7d:
aa:4f:1c:06:d0:27:e7:8d:d0:38:26:ca:64:a7:39:
e2:92:0a:7e:fc:47:fe:5c:65:29:82:78:f5:10:bc:
73:0a:41:df:d2:b4:8b:37:89:d7:f3:8f:46:c3:64:
eb:8d:c7:db:c9:11:b7:0e:96:4a:db:1e:98:6d:21:
dc:dc:14:ca:b5:ed:56:c1:9f:32:13:e9:ec:33:92:
d4:17:71:8f:0f:e6:ef:05:9b:eb:82:7d:bf:86:77:
1c:80:23:fb:08:b4:41:15:4a:d5:0d:2f:90:b0:9b:
b1:94:52:fd:d7:bd:de:04:77:ba:82:4a:7f:8b:3e:
e9:eb:0f:c1:ef:72:ed:96:21:60:d3:dd:c4:c2:fa:
07:0c:e2:0b:64:c1:1f:58:d1:89:2a:95:30:92:28:
1d:ee:1d:58:7e:5e:31:e4:5b:49:7e:3a:6a:fe:bb:
32:23:0a:a7:cf:ee:0f:b4:63:7c:52:bf:1d:7c:40:
e6:fb:f2:7e:a9:11:62:78:c4:cc:2c:7f:1d:39:8f:
39:86:ca:c6:56:39:00:b1:2a:24:42:9e:9c:08:60:
20:a9:ac:80:1b:b6:ba:a0:73:16:17:9d:47:9c:88:
6f:92:96:81:c7:c6:92:dc:12:d2:9e:65:32:d3:a1:
dc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5F:AA:6E:BA:30:95:86:BF:81:4F:63:63:52:34:8F:D7:0C:19:D5
X509v3 Authority Key Identifier:
keyid:C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:5a:6b:b4:36:a3:18:70:f0:f2:38:be:2f:5d:59:4b:07:53:
af:b6:22:38:02:5b:6d:cd:24:99:22:74:cf:8f:b1:7c:aa:4e:
30:32:23:13:ab:ce:d4:e2:71:81:ff:c0:bc:6b:a3:2c:38:bd:
d0:37:14:c1:54:dd:e6:66:79:75:3d:2e:d4:a2:40:d9:6b:0f:
47:eb:69:2a:88:0c:de:39:53:b2:9b:e3:37:00:10:3b:d3:ae:
8a:40:00:6d:7a:53:cc:2d:d1:ee:30:1f:c7:f2:8b:cb:04:53:
68:a9:4f:80:31:91:ca:87:8f:59:43:78:bb:4d:df:b7:31:43:
9e:47:00:49:71:3c:d3:da:b2:1c:e0:af:2d:cd:50:dd:f1:c8:
4c:7c:aa:bf:b7:18:4e:80:b4:ff:9a:2b:a5:76:a4:57:3f:82:
7f:95:26:10:50:dd:06:5a:15:7d:8f:e3:97:10:17:cd:8d:71:
60:7e:2b:bc:46:70:c5:dc:f1:22:ee:6f:a0:9c:69:74:18:d5:
66:89:62:06:ad:6e:87:84:92:df:77:a1:3a:d4:53:e7:e0:b7:
bb:10:ff:4a:c8:57:81:62:9a:fb:74:e3:60:eb:63:27:06:ae:
35:eb:57:5f:e7:11:ef:aa:62:94:c9:45:21:6b:a6:e1:eb:cf:
1e:4c:f1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:26:58 2026 by rpki-client