Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
File: xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft (raw, json)
Hash identifier: 0BEMPcxvE6bpHKxqw2R/9bbQuCu9tbUnieHqBJT396U=
Subject key identifier: DA:CC:8C:B0:4A:6D:B8:AD:33:36:F9:31:8F:EB:1B:35:06:E3:D7:CD
Authority key identifier: C5:C5:AC:C7:F7:EC:2B:45:B4:3D:25:47:C9:64:64:C0:08:93:3D:52
Certificate issuer: /CN=c5c5acc7f7ec2b45b43d2547c96464c008933d52
Certificate serial: 019D273AE9311DBF48119BDABD2106B3C73F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcWsx_fsK0W0PSVHyWRkwAiTPVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 23:01:05 +0000
Manifest this update: Wed 25 Mar 2026 23:01:05 +0000
Manifest next update: Thu 26 Mar 2026 23:01:05 +0000
Files and hashes: 1: hbtaOvEFCXtoUrdAHECiUoig7xU.roa (hash: O68z7xb4iBIuS0t0SJsBOxoH1aeWdrmSjVIjONruRgY=)
2: xcWsx_fsK0W0PSVHyWRkwAiTPVI.crl (hash: SJazraQtTJuyfHo5q+GfVhjBG6CpFWOaaRX+vndocGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcWsx_fsK0W0PSVHyWRkwAiTPVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:e9:31:1d:bf:48:11:9b:da:bd:21:06:b3:c7:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5c5acc7f7ec2b45b43d2547c96464c008933d52
Validity
Not Before: Mar 25 23:01:05 2026 GMT
Not After : Mar 26 23:01:05 2026 GMT
Subject: CN=dacc8cb04a6db8ad3336f9318feb1b3506e3d7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:89:f0:8f:79:5e:29:87:2f:c6:59:83:3a:25:
52:bc:67:a7:84:a3:44:9f:2d:29:40:15:53:be:5d:
07:45:d8:fe:8c:06:6f:f0:65:aa:16:c1:7a:e5:93:
84:40:40:56:6f:c3:ca:f5:ce:d6:55:8f:f9:4a:38:
9e:59:a7:90:86:5f:08:8e:31:e9:8d:5a:e3:83:71:
78:cb:88:91:63:08:c2:15:de:59:45:35:c8:2d:99:
51:f3:f4:bf:60:4f:a5:3a:d0:0a:fb:08:da:5d:9a:
1d:af:6d:2b:64:c2:12:93:66:38:13:87:0f:1b:c4:
f5:2c:93:0e:3f:8c:d9:e2:29:86:e2:c0:75:ec:68:
3a:34:b1:f8:8f:9b:f8:41:b8:ba:5e:6b:54:67:b8:
e5:e7:1b:95:ad:e4:b7:5d:bb:39:c1:24:17:1e:59:
9b:d7:f3:f6:75:d5:80:c6:9a:37:e2:33:17:4d:ff:
b5:c8:67:ef:3e:d2:af:9e:88:7d:1b:86:eb:f2:52:
dd:4f:35:b3:7d:41:03:fa:5f:3e:1c:c3:94:50:1e:
6d:54:2e:e1:ad:dc:71:17:b4:82:70:df:eb:bd:34:
0c:89:33:cf:22:77:0d:34:48:a5:62:cc:3b:5f:14:
90:c9:16:25:69:6e:11:21:88:dd:42:47:00:8a:a0:
36:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CC:8C:B0:4A:6D:B8:AD:33:36:F9:31:8F:EB:1B:35:06:E3:D7:CD
X509v3 Authority Key Identifier:
keyid:C5:C5:AC:C7:F7:EC:2B:45:B4:3D:25:47:C9:64:64:C0:08:93:3D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcWsx_fsK0W0PSVHyWRkwAiTPVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:17:bd:e2:27:3b:16:56:18:b0:de:4c:bf:5c:00:56:c7:4e:
cc:dd:9c:5f:a1:cf:b2:f7:d0:f3:2d:8d:cd:91:80:7d:bf:6d:
4f:95:83:6a:66:f8:29:a4:0a:e9:b5:fd:36:3d:7f:e9:1f:ff:
3a:8c:79:dc:4f:f8:64:86:f0:8b:d9:5a:5e:33:f1:d5:44:34:
76:73:ca:d4:46:a1:71:9e:d2:aa:17:d0:3a:9f:e6:17:24:6d:
ed:d1:78:bf:b3:7a:38:a3:bd:05:65:62:36:9a:8f:23:a6:b5:
df:ee:db:86:90:62:80:8f:80:79:1b:81:77:07:65:45:2c:bc:
a0:10:10:6c:5f:2b:0a:5f:e6:86:dd:a8:b6:93:fc:6a:21:a1:
30:67:41:45:0a:e7:b7:2c:b4:cc:81:40:c4:03:ff:58:f7:fe:
a3:f8:d1:3e:56:2d:8f:54:5a:a1:e6:15:5e:22:85:34:d8:f0:
f7:46:7b:cb:42:5b:ee:42:71:9b:a8:c8:1c:44:cc:ca:97:cf:
fc:f2:97:b6:c9:5f:59:07:b0:9d:4e:2a:19:31:14:5c:f3:82:
46:ba:6e:73:ca:cc:56:88:7e:64:4c:7b:03:ad:a5:10:06:29:
1e:b1:5e:2d:d5:15:c9:3c:5e:07:21:ec:7e:4a:85:0e:5a:a6:
72:fa:b9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:07 2026 by rpki-client