Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.mft
File: xUIOtdlPD6uGLghAQU9DK3heYFQ.mft (raw, json)
Hash identifier: 7zeODlp0y2O/6tNOR/1M+1hZxqMPHeHM3ce1Z3or8Gk=
Subject key identifier: C8:32:DB:1D:BB:25:73:7A:C8:F2:45:D5:3A:5D:69:99:B7:43:C5:8F
Authority key identifier: C5:42:0E:B5:D9:4F:0F:AB:86:2E:08:40:41:4F:43:2B:78:5E:60:54
Certificate issuer: /CN=c5420eb5d94f0fab862e0840414f432b785e6054
Certificate serial: 019D2628A43C103BDF440A054F6DB8E660BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUIOtdlPD6uGLghAQU9DK3heYFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.mft
Manifest number: 069A
Signing time: Wed 25 Mar 2026 18:01:30 +0000
Manifest this update: Wed 25 Mar 2026 18:01:30 +0000
Manifest next update: Thu 26 Mar 2026 18:01:30 +0000
Files and hashes: 1: TWT9W3DXJ-dZxjJQAE97-jeVzik.roa (hash: NuWvDNT5j64qkROJmNnrF3uPdv6iEhConb08RZf+VeY=)
2: xUIOtdlPD6uGLghAQU9DK3heYFQ.crl (hash: oiRGMoMZ82Rp1BHr6OXEcY+W7xMNGtUAiB/pRkj/sSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUIOtdlPD6uGLghAQU9DK3heYFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:a4:3c:10:3b:df:44:0a:05:4f:6d:b8:e6:60:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5420eb5d94f0fab862e0840414f432b785e6054
Validity
Not Before: Mar 25 18:01:30 2026 GMT
Not After : Mar 26 18:01:30 2026 GMT
Subject: CN=c832db1dbb25737ac8f245d53a5d6999b743c58f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bc:60:71:02:56:5f:58:a2:15:37:7f:4d:09:
60:6b:06:9c:23:85:4a:0f:da:ee:44:5c:0b:88:6f:
fb:6f:d5:fd:70:31:65:d7:87:f4:7b:23:3f:50:76:
1b:1e:76:ff:0f:11:39:51:00:58:aa:94:71:38:4b:
f8:59:66:50:7f:ca:a2:2f:e4:e0:02:ee:31:31:ed:
65:70:f3:0c:58:ec:bb:c9:07:ee:72:5e:ca:a0:95:
4b:31:1a:ad:a3:c1:25:e0:f2:cb:f5:80:9e:48:39:
1e:85:14:48:4b:f3:a1:3e:ce:95:60:b9:13:8e:9d:
84:2d:c3:b4:52:40:05:9b:62:db:02:39:ac:bb:5a:
5c:24:53:9d:d3:9e:40:21:a0:1a:49:2f:f9:e8:6a:
fd:cf:91:67:b6:e6:06:73:54:65:01:34:bd:5f:fc:
77:ae:72:d1:72:b8:7c:b7:fd:e2:8f:38:44:1a:1e:
d2:26:de:c2:1d:b4:e8:7e:43:74:e6:52:4a:a5:7d:
21:48:18:bb:65:b2:2b:e2:22:63:78:ea:cb:0f:fe:
48:eb:5d:6d:fc:e2:83:21:a7:01:a5:f6:30:b7:91:
09:5f:a0:1e:fb:27:30:b5:0d:fc:98:10:61:5b:ea:
79:14:ac:d6:54:e0:6d:9b:19:75:a3:7c:67:19:96:
36:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:32:DB:1D:BB:25:73:7A:C8:F2:45:D5:3A:5D:69:99:B7:43:C5:8F
X509v3 Authority Key Identifier:
keyid:C5:42:0E:B5:D9:4F:0F:AB:86:2E:08:40:41:4F:43:2B:78:5E:60:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUIOtdlPD6uGLghAQU9DK3heYFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:63:4d:e5:53:36:3b:96:66:c3:aa:92:aa:24:97:06:55:3a:
73:4e:00:4d:e6:18:f5:6a:fc:ec:3f:32:48:80:60:32:b2:9c:
f2:3f:56:50:1f:31:0d:bc:06:4e:9f:ca:30:c5:bb:16:71:67:
15:78:c5:fb:7a:58:87:cd:f8:69:6d:29:36:c8:60:ca:83:70:
a9:9e:b8:ad:6b:ef:d7:10:66:91:c9:89:cc:80:eb:6f:a2:75:
d9:24:70:24:1a:4e:c7:20:f6:06:fb:b5:31:2d:25:ab:ad:4b:
2a:0b:c3:42:6a:c1:a6:a4:3f:7d:cc:4d:00:6e:bf:93:bd:a5:
b1:d7:0a:08:cb:33:85:86:f9:06:1d:7e:43:b8:7b:67:32:5f:
19:42:e0:81:e3:88:55:29:e9:25:c2:84:0c:51:61:cf:11:da:
d0:79:ce:61:1f:4c:ef:ff:d1:ad:94:e6:bf:2b:ae:bb:32:94:
4f:85:c8:8c:81:50:dc:7c:e8:d5:1f:40:de:eb:19:99:56:97:
ea:56:15:6a:70:66:c8:cc:b6:1e:68:50:d2:8c:d1:ab:9a:5a:
92:77:31:26:f6:15:57:e5:73:f5:ae:79:76:1d:a9:10:17:c6:
5e:b8:6f:4a:cd:f6:72:04:6b:d3:67:f2:22:53:6d:f5:f6:47:
57:53:b9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:34:11 2026 by rpki-client