Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft
File: xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft (raw, json)
Hash identifier: BXkLxSvbOz+CRN5pBkVU71HIGT3TUsug3VDWef03NvM=
Subject key identifier: A4:E4:D5:B8:9D:B2:D6:1A:57:B6:96:C9:E5:20:A1:06:B0:48:93:C9
Authority key identifier: C6:13:5E:4A:CF:96:13:9C:E5:FF:2C:FD:D9:5F:55:A8:17:6D:73:24
Certificate issuer: /CN=c6135e4acf96139ce5ff2cfdd95f55a8176d7324
Certificate serial: 019D26285180747A01295E668CEBA63CD4F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhNeSs-WE5zl_yz92V9VqBdtcyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft
Manifest number: 095B
Signing time: Wed 25 Mar 2026 18:01:09 +0000
Manifest this update: Wed 25 Mar 2026 18:01:09 +0000
Manifest next update: Thu 26 Mar 2026 18:01:09 +0000
Files and hashes: 1: ZvznoF2yyTKB6pJyqzpGeZuFh38.roa (hash: XpznPyFNyd8U/ZoXrqV7HW6khjk/3kzxWSxwOBbLYoo=)
2: xhNeSs-WE5zl_yz92V9VqBdtcyQ.crl (hash: +YVXlLhaXeHhBzQUai/bzbuzPMprZivFOtlTvoDDigY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhNeSs-WE5zl_yz92V9VqBdtcyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:51:80:74:7a:01:29:5e:66:8c:eb:a6:3c:d4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6135e4acf96139ce5ff2cfdd95f55a8176d7324
Validity
Not Before: Mar 25 18:01:09 2026 GMT
Not After : Mar 26 18:01:09 2026 GMT
Subject: CN=a4e4d5b89db2d61a57b696c9e520a106b04893c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0d:c2:00:d5:c6:94:24:52:52:1b:b9:12:3e:
79:32:d0:39:48:d0:fb:69:58:3d:f0:08:07:05:55:
b2:80:de:6f:55:b0:7b:91:60:13:a5:96:31:17:b4:
95:a4:19:6f:4e:3f:e7:67:12:9f:5d:d3:15:1f:b7:
1c:9d:00:6a:df:19:3f:70:fb:45:0b:94:ef:f3:97:
c2:27:b2:9d:d3:f7:a9:43:58:88:06:d6:55:48:41:
19:d1:69:c6:92:06:20:a1:c6:ba:9f:50:93:e3:36:
ad:a1:8f:f7:d4:13:c0:4d:a8:9f:db:bc:b5:2a:2f:
b3:48:cb:2e:b0:43:1f:ff:59:e0:ac:af:11:a2:41:
d0:fd:29:71:83:e1:6e:68:94:e4:08:02:f1:1d:47:
5e:11:6c:0b:cd:b7:26:11:46:60:01:55:08:56:62:
83:2c:f4:52:68:35:b8:da:a2:97:0f:13:14:c7:f4:
52:3d:bf:50:17:d3:a0:e1:75:15:f7:be:5c:20:bc:
01:c6:b1:c1:42:02:4a:02:72:00:12:10:d3:80:c5:
f9:a0:7b:c5:a4:9f:fe:b4:47:27:3a:fd:82:ca:97:
e4:1a:c7:ed:ad:4a:e6:74:9e:59:96:c2:c7:13:9b:
bb:d0:3a:ea:8a:de:6e:74:22:35:73:65:18:63:e1:
54:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E4:D5:B8:9D:B2:D6:1A:57:B6:96:C9:E5:20:A1:06:B0:48:93:C9
X509v3 Authority Key Identifier:
keyid:C6:13:5E:4A:CF:96:13:9C:E5:FF:2C:FD:D9:5F:55:A8:17:6D:73:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhNeSs-WE5zl_yz92V9VqBdtcyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:75:c1:3f:bd:3e:48:6d:7c:06:41:5b:d0:39:93:10:47:4c:
3f:f3:3f:bd:ad:57:ff:b5:fe:87:ad:e8:25:2f:6a:09:71:71:
c7:03:e1:69:61:f6:2b:01:e6:0f:72:47:cc:09:6e:d9:6f:66:
10:25:e7:2d:0f:f7:03:2d:d9:80:b5:64:65:e7:14:33:a4:c2:
02:86:c4:0b:ae:71:e9:9e:59:61:0f:95:b8:4d:9c:52:75:9e:
fe:df:fa:0a:a8:c1:28:92:68:c9:de:24:e7:a6:6f:57:e2:a4:
f2:44:a6:60:5c:62:54:b0:35:0d:3a:1f:f9:eb:e0:fc:fe:a4:
54:44:78:2e:cd:9b:8c:63:5d:a3:5c:de:ea:5d:ed:a4:96:b5:
5c:53:c6:ef:5d:da:c0:17:af:dd:db:eb:ec:40:81:14:f8:f2:
f8:24:27:30:90:cd:83:d7:de:51:8c:e7:73:47:98:d7:9b:f6:
b9:da:63:dd:0f:2c:cb:57:ab:22:6f:6c:54:45:ab:44:38:13:
4f:ea:cc:ff:37:e1:41:8b:2d:14:fa:09:f2:68:83:fa:c5:4a:
fa:aa:6a:e1:78:8d:e1:3e:92:9f:c4:c2:5f:97:79:34:c9:1f:
5f:46:1a:13:3d:16:b2:03:dc:cf:50:10:65:36:ae:5d:78:72:
b3:f1:0c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:34 2026 by rpki-client