Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
File: 1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft (raw, json)
Hash identifier: ApmhdqZfT9eQJmlPDSvJMN2fS0HZtcWiIQmPs7WBep0=
Subject key identifier: 63:84:6D:C6:D3:79:67:37:BD:77:D3:70:EE:1E:93:4D:77:BA:CD:4D
Authority key identifier: D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
Certificate issuer: /CN=d716209d7def98a2bb34977f65009b3520da256e
Certificate serial: 019D27A8A910EC2356C2012B0BEBE71ADE0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
Manifest number: 0676
Signing time: Thu 26 Mar 2026 01:00:57 +0000
Manifest this update: Thu 26 Mar 2026 01:00:57 +0000
Manifest next update: Fri 27 Mar 2026 01:00:57 +0000
Files and hashes: 1: 1-h29TFu81qQRwRTQtKfc7V6oGgw.roa (hash: j/GCQjpdQOAVMzUdmUHPipCJ4VSAK8zR3xsINI1wkiE=)
2: 1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl (hash: snJlp0cbsnQpjwDBbKF/M3n7HereBYxzoWdbPRFQNqI=)
3: CpNNw_FBjV7WQ4kyfcNgEUKuQGQ.roa (hash: qsbzd5kGA6KOQsn+NSJ/jwzydnhbMFq6Wy9RwChfdc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:a9:10:ec:23:56:c2:01:2b:0b:eb:e7:1a:de:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d716209d7def98a2bb34977f65009b3520da256e
Validity
Not Before: Mar 26 01:00:57 2026 GMT
Not After : Mar 27 01:00:57 2026 GMT
Subject: CN=63846dc6d3796737bd77d370ee1e934d77bacd4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fe:66:fa:2d:34:9a:a1:27:e2:e6:f9:ed:8f:
20:94:29:e9:35:55:d8:cc:65:cb:fd:d2:13:25:9a:
68:04:97:d3:4e:ef:c3:35:5b:66:d5:e3:88:83:e6:
38:4a:60:e8:5b:34:07:4c:79:5d:9c:11:b8:88:6b:
5a:ca:13:66:f8:8b:a7:8b:1b:35:94:a8:c7:de:b2:
f5:6f:55:eb:1c:a7:53:81:f1:91:d4:54:d5:8a:e1:
97:e3:3c:73:a7:23:d9:3f:a1:7d:5b:bd:c9:1e:a3:
0b:ea:22:7d:f1:46:eb:e1:df:6e:2b:7d:04:8f:49:
00:eb:3e:d1:9a:40:44:b5:91:dc:9a:dc:d0:2c:4d:
8e:da:d4:c8:69:57:84:50:27:98:79:83:b3:a6:89:
13:a9:6f:fb:a5:4c:db:df:6b:46:f3:2c:0e:3a:56:
61:ea:a7:f1:32:f7:6c:38:f4:11:8e:2a:cc:4a:aa:
90:09:61:c0:65:20:e6:1e:75:65:04:95:5d:21:7d:
ce:64:74:66:6f:69:90:07:22:39:f8:c7:78:11:3d:
85:c1:c3:f7:f1:13:17:98:fa:3e:25:d0:14:b1:1a:
83:73:8c:37:02:0e:b2:21:1f:8a:69:55:ce:29:b0:
d5:2c:71:09:7a:4c:a8:df:96:37:07:e0:14:4d:54:
71:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:84:6D:C6:D3:79:67:37:BD:77:D3:70:EE:1E:93:4D:77:BA:CD:4D
X509v3 Authority Key Identifier:
keyid:D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:28:7e:85:33:ba:56:53:70:72:d6:cf:ea:da:3a:27:10:a4:
3e:56:51:6e:10:5a:15:aa:85:23:ff:93:3b:ae:41:b4:39:4a:
fd:fa:e6:3e:21:4e:68:e2:a8:37:71:8e:6e:11:37:51:d9:66:
f0:98:71:70:5f:a8:52:c4:80:fc:d9:a1:7c:fd:9f:0c:7d:b8:
20:92:76:07:9f:95:49:01:b2:00:63:38:b1:9e:31:03:25:0d:
5c:56:f5:c3:f3:21:6a:71:26:74:6c:4d:ef:ab:91:a7:0c:27:
72:77:1e:5a:61:e8:3a:ad:72:28:f9:b6:1b:4b:54:c1:24:2b:
20:a8:19:7e:03:0b:08:99:22:c4:c7:50:d4:e4:a8:09:a9:2e:
b5:9f:b3:94:0b:a3:fe:df:f2:b0:4e:2f:8f:8b:95:64:72:e4:
e2:2c:8e:25:84:c5:6a:29:d7:a7:2e:35:f6:25:72:fe:10:9e:
49:e0:ce:24:29:bc:0c:7a:fb:ce:64:ca:98:37:5c:b2:bd:7d:
d4:79:3c:3c:d7:70:75:fb:89:c4:06:14:e9:a1:62:89:fc:ed:
84:11:1e:7f:bf:f2:d4:24:8d:01:3f:5c:d9:49:4e:88:2e:c5:
cc:b8:d9:dc:4d:51:6c:af:9f:c8:b3:7e:ac:d8:ac:74:98:49:
cf:03:f6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:15:39 2026 by rpki-client