Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.mft
File: xvYePrPLRHrKbZpDVs11cXp7fGg.mft (raw, json)
Hash identifier: 9zsCQCA489xzK7fc9naaNH9ocP8flxA1HDxjXfB8mJc=
Subject key identifier: 60:05:9A:31:C4:81:DE:53:BD:E6:4C:EF:9A:5C:65:70:45:FA:5D:40
Authority key identifier: C6:F6:1E:3E:B3:CB:44:7A:CA:6D:9A:43:56:CD:75:71:7A:7B:7C:68
Certificate issuer: /CN=c6f61e3eb3cb447aca6d9a4356cd75717a7b7c68
Certificate serial: 019D2C29CC4E37CBDCAB953E62FDE3336E1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvYePrPLRHrKbZpDVs11cXp7fGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.mft
Manifest number: 023A
Signing time: Thu 26 Mar 2026 22:00:29 +0000
Manifest this update: Thu 26 Mar 2026 22:00:29 +0000
Manifest next update: Fri 27 Mar 2026 22:00:29 +0000
Files and hashes: 1: A69snNPiFFp-ZJHhhhFBxkLfqjc.roa (hash: VH0DEovfxx+abP3tX81hidYcbrd76YLHMgGtB2rBB34=)
2: xvYePrPLRHrKbZpDVs11cXp7fGg.crl (hash: PH0aa9OyeAhTceEcl5L8Z09anP2v4W7m8gjmalOdjnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xvYePrPLRHrKbZpDVs11cXp7fGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:29:cc:4e:37:cb:dc:ab:95:3e:62:fd:e3:33:6e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6f61e3eb3cb447aca6d9a4356cd75717a7b7c68
Validity
Not Before: Mar 26 22:00:29 2026 GMT
Not After : Mar 27 22:00:29 2026 GMT
Subject: CN=60059a31c481de53bde64cef9a5c657045fa5d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:27:19:79:f3:61:bd:c2:82:a9:6a:37:09:90:
47:5a:3f:15:a2:d6:ae:f7:a8:ff:01:aa:82:75:cd:
6d:c8:09:99:28:20:70:48:9b:37:72:91:05:ae:b5:
80:5a:60:03:97:ca:53:b0:4e:32:81:51:2e:e4:62:
b0:c2:59:6f:a6:de:9e:1d:27:a0:3d:50:4a:31:8f:
57:ae:59:3b:e6:04:8b:ba:b8:63:d0:c2:19:10:0c:
d9:3d:0f:c0:cd:8c:f6:cb:aa:f2:2d:05:e3:11:8f:
d8:05:7b:0e:d2:0b:a2:22:63:bd:cf:46:39:e4:7a:
bb:53:14:ea:40:e9:44:81:fc:1c:9a:b0:89:7b:ba:
4a:58:46:fc:cd:76:3c:c2:a5:cb:39:b0:5b:11:2a:
70:fb:de:6a:b0:93:7f:57:49:6b:45:34:de:ef:f8:
0d:4c:02:7d:04:88:f0:a6:a2:10:ca:48:87:bb:42:
be:98:35:da:4a:18:e9:39:be:fd:49:9f:ad:bb:85:
8e:e9:69:c6:1c:97:d7:ef:86:c4:1c:41:d9:b4:e5:
41:3c:6d:b1:86:56:af:15:3c:15:2f:cf:35:45:80:
fa:b2:6d:67:8a:4f:df:ef:79:3d:69:be:7b:88:94:
aa:f1:87:c6:02:a1:a4:93:6a:3b:94:4a:22:e8:0e:
04:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:05:9A:31:C4:81:DE:53:BD:E6:4C:EF:9A:5C:65:70:45:FA:5D:40
X509v3 Authority Key Identifier:
keyid:C6:F6:1E:3E:B3:CB:44:7A:CA:6D:9A:43:56:CD:75:71:7A:7B:7C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvYePrPLRHrKbZpDVs11cXp7fGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:69:0f:91:53:f0:d6:69:7c:b8:cd:d1:7c:40:db:3f:38:fe:
72:ab:6c:aa:38:67:97:d2:89:c4:8f:b5:45:49:d3:18:60:60:
4c:5d:55:08:68:29:6d:8b:39:f0:05:3a:73:f3:89:6f:e0:a7:
79:b4:62:22:fc:55:3f:76:32:ef:53:a7:c0:fc:81:c3:67:1d:
95:80:82:62:a4:ee:b8:fc:00:40:35:c3:66:ad:0f:1b:e6:eb:
d7:62:f2:43:0f:86:c5:d8:e0:07:8d:d4:0c:00:3b:cc:65:f2:
1b:75:07:b3:56:a9:7b:f2:7b:25:fe:8c:8d:93:29:93:52:c8:
a7:90:33:87:54:4e:9f:27:1a:54:ea:19:b4:7c:f5:ce:59:da:
66:a1:89:2c:55:85:46:17:7d:95:f1:86:7f:8c:ae:84:91:6f:
25:86:64:ad:a1:01:89:fb:f6:56:7e:72:f8:86:54:ed:05:25:
2e:39:03:f5:c9:be:53:2f:f4:28:2a:73:e4:af:ee:3f:f4:dc:
cc:78:18:9a:a2:d8:17:4d:51:86:18:68:33:18:c5:5f:70:22:
26:4b:09:4e:1f:31:23:7d:e1:dc:cd:00:7d:a9:a0:a4:9a:84:
4a:ea:fb:d0:63:41:3f:ec:56:5b:fa:f3:81:7e:08:78:94:66:
47:d8:c9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:03:41 2026 by rpki-client