Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
File: xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft (raw, json)
Hash identifier: S3k97TCaE5I1kbePTPDxYooqgr8FrjcgDJoh6dNPWoI=
Subject key identifier: 2B:F2:7F:24:1F:28:DC:EC:BA:02:49:C1:A0:E2:F9:76:AE:7C:3D:35
Authority key identifier: C6:9C:EB:12:40:84:4C:DE:8A:16:88:97:E4:7C:1D:F5:D6:EC:BF:21
Certificate issuer: /CN=c69ceb1240844cde8a168897e47c1df5d6ecbf21
Certificate serial: 019D28BB3E2553DCBFE2D0D28E970647FCB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 06:00:52 +0000
Manifest this update: Thu 26 Mar 2026 06:00:52 +0000
Manifest next update: Fri 27 Mar 2026 06:00:52 +0000
Files and hashes: 1: BQk9R-N3GOOYrja30Pn_XVDUf88.roa (hash: Yweym3mWkXHkGOyAmG6nDG9vHGdFCmlWDKJNXExlolQ=)
2: Z16EOuIvCScFGsV_p1V2RWzx1ZA.roa (hash: rAhtAVQwXrS7vputjJ+v+BvlJ+PvCNgskZKO8Cfnpys=)
3: xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl (hash: p+9WXmxDzSSYp8KC4KBUh+KGjiW2iyVcShxgGP9kXfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:3e:25:53:dc:bf:e2:d0:d2:8e:97:06:47:fc:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69ceb1240844cde8a168897e47c1df5d6ecbf21
Validity
Not Before: Mar 26 06:00:52 2026 GMT
Not After : Mar 27 06:00:52 2026 GMT
Subject: CN=2bf27f241f28dcecba0249c1a0e2f976ae7c3d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:55:5b:e1:2a:2f:78:f0:fe:db:cf:6e:af:7c:
93:76:8a:63:70:81:c2:07:fa:99:39:86:6a:86:bd:
a5:31:36:af:4f:cb:61:f8:49:de:f8:0f:fc:97:b4:
d7:4d:54:b3:e6:37:8e:9c:b5:29:ac:df:cd:34:ad:
13:57:02:a2:6f:2b:6d:4f:63:15:21:22:79:52:b4:
78:05:64:f3:73:b8:55:b3:4e:32:08:dd:bd:70:68:
46:48:d4:8a:22:3c:6a:e6:ec:0e:0e:93:1c:0f:50:
c5:23:7b:a9:b2:7a:22:00:ef:5f:bd:fc:df:43:31:
0d:70:e4:c5:16:47:7c:a6:18:56:00:b7:97:2d:ef:
d5:20:12:fc:21:8d:ec:ac:88:9b:c9:de:f1:d0:86:
a9:2b:ba:e6:e4:3c:40:c3:0c:54:9e:ed:18:68:b0:
a3:cf:df:57:c4:42:ec:6b:20:29:1a:18:50:a2:72:
b2:e7:d8:5e:aa:ea:13:2e:8f:11:28:28:02:e0:67:
17:3b:ae:92:ad:6d:d1:6e:99:2c:84:15:bd:66:93:
80:e4:1c:2f:94:c3:34:e3:cc:62:01:6e:ea:66:34:
f1:45:34:5b:48:f0:bc:64:3f:46:b9:ba:f7:fd:fd:
7d:90:37:e4:81:d8:8f:6c:9e:8a:87:51:93:c3:e9:
5b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F2:7F:24:1F:28:DC:EC:BA:02:49:C1:A0:E2:F9:76:AE:7C:3D:35
X509v3 Authority Key Identifier:
keyid:C6:9C:EB:12:40:84:4C:DE:8A:16:88:97:E4:7C:1D:F5:D6:EC:BF:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:30:2c:8a:71:4a:6a:89:a8:de:b7:39:5c:df:09:14:e6:dc:
37:a5:5e:e9:c3:b9:1b:69:64:bb:40:bb:fd:c0:ec:38:7e:68:
72:68:18:40:90:44:d3:e7:df:18:12:87:8c:00:90:71:84:97:
14:90:9d:4a:81:71:a5:19:df:f9:ac:d3:2d:a2:2d:14:ec:eb:
42:8e:69:fd:c9:2c:87:fa:c8:79:f8:d4:f1:50:e3:b1:ff:d1:
2a:4f:44:c7:73:3f:56:72:76:e1:aa:a7:a1:93:2b:de:00:ac:
39:1d:3f:9c:9f:fc:84:24:5e:9c:ff:f7:21:df:18:a8:83:15:
1a:8d:28:bc:26:ea:c5:f7:9e:a4:e8:a3:01:ff:80:56:06:8e:
4f:39:03:fd:3c:15:47:4c:b5:41:7e:66:7e:67:6f:5e:58:7d:
14:35:e2:b2:b9:65:78:02:26:6a:0c:ac:98:39:05:5c:10:80:
52:32:2b:f8:5c:ca:b1:02:99:e4:47:6e:6c:c2:61:42:bd:1e:
b4:f8:27:bb:30:20:d4:45:ae:19:c3:aa:b0:f5:70:70:9d:e4:
14:84:46:c8:fd:04:b7:69:ec:c0:41:e1:1f:10:cf:92:d4:cc:
4c:52:f6:87:67:81:ef:bb:f3:c6:d4:a8:8b:1c:ff:21:16:5d:
e2:7e:13:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:34:06 2026 by rpki-client