Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.mft
File: xjfMzVzaAYlbGJzKlfKWtcswx8g.mft (raw, json)
Hash identifier: ZFz7k5r42g1f8cBAMMCebW2AGeL6V+NxM3bRsETpkII=
Subject key identifier: F1:EC:E5:7E:47:52:85:60:13:E1:A7:E8:E7:03:70:4F:BC:23:E5:A4
Authority key identifier: C6:37:CC:CD:5C:DA:01:89:5B:18:9C:CA:95:F2:96:B5:CB:30:C7:C8
Certificate issuer: /CN=c637cccd5cda01895b189cca95f296b5cb30c7c8
Certificate serial: 019D32D14259F5EC70B138741E2423A30375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xjfMzVzaAYlbGJzKlfKWtcswx8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.mft
Manifest number: 12AA
Signing time: Sat 28 Mar 2026 05:01:07 +0000
Manifest this update: Sat 28 Mar 2026 05:01:07 +0000
Manifest next update: Sun 29 Mar 2026 05:01:07 +0000
Files and hashes: 1: wB4QvInT_08HfB4Wbo978Zg5LxQ.roa (hash: 36Tl4rWIAgYSpZdqpjtz90qhnVy9+Ek0JlcXnPNo7QU=)
2: xjfMzVzaAYlbGJzKlfKWtcswx8g.crl (hash: Gk4MGMCQG3OpDZ/WJIEZkbBF+VSe9RUhfg1O+cEV2Qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xjfMzVzaAYlbGJzKlfKWtcswx8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:d1:42:59:f5:ec:70:b1:38:74:1e:24:23:a3:03:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c637cccd5cda01895b189cca95f296b5cb30c7c8
Validity
Not Before: Mar 28 05:01:07 2026 GMT
Not After : Mar 29 05:01:07 2026 GMT
Subject: CN=f1ece57e4752856013e1a7e8e703704fbc23e5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:66:17:76:4e:dc:3d:01:32:2f:e9:a5:08:0a:
7f:ab:09:1f:49:5e:4a:62:67:74:1b:16:ee:06:6a:
ea:be:91:29:10:ab:65:ea:8a:db:df:1d:7a:e6:6f:
57:6f:9b:98:72:89:84:48:67:5e:25:b7:56:91:d3:
89:12:aa:bc:a9:a6:a1:30:31:39:5d:44:0c:b8:62:
be:36:86:dc:da:48:bc:3b:ee:7c:88:61:14:7a:50:
e9:6f:2a:da:5f:30:43:78:ef:21:e0:21:3f:d5:3e:
ae:b5:cc:30:c9:ef:5f:c1:ba:53:12:15:36:f7:ab:
51:42:13:69:77:ef:d0:ce:e1:3d:59:19:a4:80:c4:
5a:a4:b0:54:34:b6:97:1f:fc:5a:f5:3e:d2:29:93:
09:96:73:fe:af:18:82:2b:31:96:8d:35:d9:c2:b8:
a7:64:6d:3a:42:2f:68:04:9b:0d:a0:f0:d0:09:c4:
d0:6b:81:38:df:cf:9f:4f:85:cd:bf:c2:07:16:a7:
9a:7e:8f:1e:0d:01:7b:34:92:a3:cb:e5:50:9b:5f:
0c:d9:81:fd:dd:1f:5f:f5:7c:80:a4:bb:3e:7c:95:
fe:90:8c:7b:ab:8f:79:54:a7:d7:23:e4:b5:fa:06:
ab:6a:ee:98:78:14:8e:00:b0:dc:ef:b4:0c:5a:21:
cb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:EC:E5:7E:47:52:85:60:13:E1:A7:E8:E7:03:70:4F:BC:23:E5:A4
X509v3 Authority Key Identifier:
keyid:C6:37:CC:CD:5C:DA:01:89:5B:18:9C:CA:95:F2:96:B5:CB:30:C7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xjfMzVzaAYlbGJzKlfKWtcswx8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:6c:17:67:16:cf:7f:b4:91:ba:24:65:91:73:92:89:91:62:
71:2c:52:f1:18:88:a1:c0:9f:32:da:1e:44:33:ee:6e:3b:a0:
68:dd:87:bd:fd:61:4a:4d:3f:5c:6f:26:db:e3:9c:c8:a2:2d:
bd:48:01:8d:a2:5a:c1:a5:3c:5b:26:c2:5b:68:c6:80:ad:77:
a8:99:84:b9:4c:9e:1e:a9:8a:07:0b:3c:aa:43:2b:69:59:67:
d0:63:b9:74:67:db:35:06:39:af:4a:7a:a1:d3:77:c8:1f:d7:
17:92:73:03:d0:be:63:96:5a:d6:55:52:95:cb:6d:b4:4e:a6:
33:96:9c:c8:fc:02:28:f4:ee:38:5d:98:4d:35:d9:8c:9a:36:
e1:a9:b3:51:fb:79:f3:e3:5b:d3:07:bc:fb:43:80:93:2a:c9:
95:dd:30:3d:e8:13:9f:e1:4f:27:1e:c9:3e:91:78:94:b2:1e:
c5:57:9f:a8:98:b7:2a:18:a4:3a:a9:45:2f:ce:f9:20:8b:7b:
b3:ed:69:34:82:e5:a6:6e:19:30:b4:7a:1a:30:40:46:75:94:
f0:34:8f:d4:df:08:0e:6a:b6:92:4e:60:4c:32:a3:f6:98:14:
84:1b:28:4f:30:e3:a8:61:b8:14:eb:1d:33:9c:2c:f5:4c:90:
1b:4d:b2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:17:56 2026 by rpki-client