Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
File: xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft (raw, json)
Hash identifier: WBMGezyRcyZ7MKhT7/bBZ/JvHy26Tu/6aRDXITSE2Xo=
Subject key identifier: A0:AE:E6:C2:94:2A:D3:0A:B2:90:60:50:53:ED:28:B2:E1:C1:F0:B6
Authority key identifier: C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
Certificate issuer: /CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Certificate serial: 019D27040330859C1B102AB45D5ADE5E96A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
Manifest number: 05A1
Signing time: Wed 25 Mar 2026 22:01:07 +0000
Manifest this update: Wed 25 Mar 2026 22:01:07 +0000
Manifest next update: Thu 26 Mar 2026 22:01:07 +0000
Files and hashes: 1: tOUQl2J5Wpm8LcDuYGUnej7OiFY.roa (hash: 3SzovpialpEoSK1tVIj0K+EFB6CyFsxOHbtKDkoQSb8=)
2: xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl (hash: 0qWFe92Cem57ux/+BIuFlQGmpzShBW9wpERJTAfIhmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:03:30:85:9c:1b:10:2a:b4:5d:5a:de:5e:96:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Validity
Not Before: Mar 25 22:01:07 2026 GMT
Not After : Mar 26 22:01:07 2026 GMT
Subject: CN=a0aee6c2942ad30ab290605053ed28b2e1c1f0b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:32:c4:dc:18:a6:3b:df:41:90:07:2d:90:fd:
8e:cd:c9:af:09:43:2d:ca:17:2c:23:db:3d:d6:92:
0c:47:0d:ae:f6:4c:2e:c6:b8:10:31:47:16:c9:e1:
b4:d1:41:9a:01:9b:8a:46:5b:77:e6:02:b1:d0:e8:
cb:ff:ff:53:a6:a4:86:aa:33:ad:5e:68:fa:d9:e1:
b6:26:62:dc:95:e8:2f:c0:e3:ef:d9:22:53:2c:ef:
a7:e0:46:1d:3b:65:6c:ff:97:93:25:37:14:73:e6:
17:3f:88:f4:39:c7:7a:b2:09:ef:41:d2:ba:de:55:
a4:da:aa:7a:45:f4:c8:38:00:e1:94:df:43:a9:1a:
13:b1:b1:af:e4:42:e2:b2:ce:a6:54:69:32:c9:0e:
61:20:8e:c4:e6:37:03:c3:85:68:b8:e2:e2:a3:54:
84:a6:18:92:84:b7:8b:c9:a3:33:1a:ef:16:09:ea:
8c:6a:95:d7:f5:a7:e7:6a:f9:fe:b1:50:25:07:a8:
fe:38:dd:6d:91:6b:6f:c8:b2:01:e6:6d:71:75:93:
35:a7:7d:70:66:0c:29:bb:91:5c:4f:96:0f:07:ae:
1e:b0:79:07:9e:9a:31:08:14:bf:9b:ba:1e:64:b1:
dc:82:71:10:99:47:62:2b:9f:59:f2:91:1a:6a:c0:
59:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AE:E6:C2:94:2A:D3:0A:B2:90:60:50:53:ED:28:B2:E1:C1:F0:B6
X509v3 Authority Key Identifier:
keyid:C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:da:61:c9:1a:a8:76:69:af:d0:53:cb:3e:b0:94:6b:a7:0d:
3b:bb:3b:7b:59:5c:97:c8:d6:b8:ea:c3:bc:62:92:f1:26:cb:
d7:4d:22:51:3e:07:ad:2a:72:ac:e6:12:77:6e:bf:10:71:97:
71:c4:25:cc:74:74:53:fb:23:49:85:c3:da:b6:66:a4:9a:a1:
05:19:51:5a:c9:39:39:fc:dd:e5:b8:15:5d:7e:38:c3:3d:7c:
11:1b:51:a1:53:e5:5f:02:a5:3b:c8:18:60:c6:cf:42:f6:86:
83:3f:23:85:fd:ee:09:dc:f4:5f:69:8e:af:de:d5:78:de:a8:
46:d0:57:c2:6e:f6:f4:1d:3d:52:70:48:f3:57:b6:7d:f7:b1:
a9:31:e2:bf:23:42:46:22:c3:b5:dd:f2:10:75:61:21:0c:0a:
0b:01:35:3b:fc:cc:f7:bd:aa:9b:0f:12:94:ca:18:16:59:e4:
64:3d:5b:ff:2f:85:d3:c8:4f:76:66:f1:83:6a:50:de:f1:f5:
71:4e:ce:93:74:6d:31:6b:e1:c8:ee:a9:f5:23:2f:b4:66:81:
b9:36:a3:e2:ca:32:20:f5:6e:c2:de:45:e9:08:44:68:ef:b2:
04:c5:25:a6:31:ff:5d:99:1f:63:f5:f0:ff:ec:da:63:92:1d:
5e:89:3a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:04 2026 by rpki-client