Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c055a4-8962-4d41-8b69-d7e31c0e8f11/1/xxJw4qZBzNgjcWx0CWSJrzd9cGI.mft
File: xxJw4qZBzNgjcWx0CWSJrzd9cGI.mft (raw, json)
Hash identifier: Fl8JQnwmixg1S4/aoPNWZvZ/fKJOSbrbLhVBYpQCX3A=
Subject key identifier: 3F:77:63:64:C8:F2:82:B5:E1:52:97:DF:64:26:63:74:6C:F8:9B:93
Authority key identifier: C7:12:70:E2:A6:41:CC:D8:23:71:6C:74:09:64:89:AF:37:7D:70:62
Certificate issuer: /CN=c71270e2a641ccd823716c74096489af377d7062
Certificate serial: 019D273ABEB0A75C589C2E8795E87E40F6CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxJw4qZBzNgjcWx0CWSJrzd9cGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c055a4-8962-4d41-8b69-d7e31c0e8f11/1/xxJw4qZBzNgjcWx0CWSJrzd9cGI.mft
Manifest number: 23
Signing time: Wed 25 Mar 2026 23:00:54 +0000
Manifest this update: Wed 25 Mar 2026 23:00:54 +0000
Manifest next update: Thu 26 Mar 2026 23:00:54 +0000
Files and hashes: 1: bW3cNXQ8ETHaIbag1hsdcosAygk.roa (hash: wSM1bSinVbIUHrlZvTgxz1Z+hdxPzIJod8hB6qrthCc=)
2: xxJw4qZBzNgjcWx0CWSJrzd9cGI.crl (hash: bojRJNfUVWiTRF1bt+6g2ipsQqnE/eQTWCI2I4S178k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/c055a4-8962-4d41-8b69-d7e31c0e8f11/1/xxJw4qZBzNgjcWx0CWSJrzd9cGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/c055a4-8962-4d41-8b69-d7e31c0e8f11/1/xxJw4qZBzNgjcWx0CWSJrzd9cGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xxJw4qZBzNgjcWx0CWSJrzd9cGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:be:b0:a7:5c:58:9c:2e:87:95:e8:7e:40:f6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c71270e2a641ccd823716c74096489af377d7062
Validity
Not Before: Mar 25 23:00:54 2026 GMT
Not After : Mar 26 23:00:54 2026 GMT
Subject: CN=3f776364c8f282b5e15297df642663746cf89b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7b:f9:2d:1f:5d:68:87:08:5b:93:c6:6b:c3:
fa:71:e5:a1:84:69:fc:7f:e4:af:07:b9:56:5b:b9:
ad:41:e3:64:49:f9:69:aa:8c:5d:4b:49:25:d8:d2:
a6:82:64:9c:a2:24:94:54:bd:79:52:f6:aa:fe:7d:
e6:58:86:fd:06:63:ab:2c:e4:2f:ee:b4:b7:d9:f1:
60:9b:a2:69:8f:a3:8d:3c:fa:8b:91:4f:07:8f:6e:
d5:ae:89:d6:d5:81:92:10:ce:13:41:84:4c:06:df:
1f:68:f6:b7:c8:24:9b:c3:52:c8:6f:6c:7d:47:7f:
ea:42:f0:b9:d3:13:fe:b6:cf:cf:bc:fa:24:cd:d2:
3c:6d:0b:25:11:3f:52:bd:54:dc:bf:20:ef:70:03:
23:38:6e:b9:67:c3:90:3a:7c:a1:8a:bd:40:ea:c2:
d7:3a:e4:e8:ed:04:b1:cb:0f:8f:fb:e1:e4:fe:be:
72:9f:5e:a4:2c:9c:8f:cf:7b:23:e1:6a:06:27:b3:
6d:a5:b6:2a:91:57:34:00:a3:ee:e2:85:f1:63:5e:
ba:03:0c:16:8c:d2:4a:ed:e2:16:ff:90:2b:0b:93:
1c:a6:f5:b9:82:66:52:08:05:8b:88:9d:f7:79:96:
8c:77:de:ea:76:c6:3d:7e:a7:17:8f:3a:bf:9b:95:
b0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:77:63:64:C8:F2:82:B5:E1:52:97:DF:64:26:63:74:6C:F8:9B:93
X509v3 Authority Key Identifier:
keyid:C7:12:70:E2:A6:41:CC:D8:23:71:6C:74:09:64:89:AF:37:7D:70:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxJw4qZBzNgjcWx0CWSJrzd9cGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c055a4-8962-4d41-8b69-d7e31c0e8f11/1/xxJw4qZBzNgjcWx0CWSJrzd9cGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c055a4-8962-4d41-8b69-d7e31c0e8f11/1/xxJw4qZBzNgjcWx0CWSJrzd9cGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:2e:48:91:1a:a4:7b:64:56:e3:a2:4b:2a:45:39:b2:3a:16:
b2:0e:8e:0e:89:b9:54:1f:aa:bc:fd:fb:ce:2a:80:1c:8a:98:
d9:b3:0c:91:2d:ad:82:9b:6d:c0:2a:fd:d3:ac:c2:21:0a:49:
1d:f5:ff:0d:d7:94:69:56:78:53:36:ab:47:1b:37:43:3b:8c:
34:30:ba:42:b5:a2:79:c1:cc:17:47:7c:e1:79:f8:b5:ee:4c:
37:7a:18:c7:0d:99:dc:15:dc:a6:0a:21:4c:f2:47:2c:3e:1e:
14:02:95:0e:9a:32:8a:8a:8f:11:d7:01:f1:00:e4:e5:ed:22:
cb:30:10:f6:9f:b9:68:4f:95:44:7a:55:18:fd:ac:8f:e6:1d:
87:14:8d:58:41:5f:55:af:01:93:97:3f:0c:07:e4:29:9e:69:
90:fa:68:3c:33:d2:e8:64:8a:55:e5:76:8f:c7:d7:de:40:d4:
f0:f1:fc:d8:07:78:83:e1:a8:d8:9f:10:92:14:82:78:c7:a1:
df:39:cf:80:27:e7:72:28:5d:b1:ca:96:12:71:6f:76:8e:d6:
3b:1c:02:eb:a4:48:d1:39:d7:77:5f:2d:05:8f:46:07:84:8f:
f1:0f:6e:81:9b:88:16:c1:43:7a:5d:2d:84:f7:41:d5:6c:1c:
b8:16:7f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:40:19 2026 by rpki-client