Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
File: _X0csRSU6ziY8Q09Y1vnXxay3FE.mft (raw, json)
Hash identifier: lotwgvWV8PRbSArwoZgSVc731csPIpf6ILkKKCmNX4g=
Subject key identifier: A4:65:BC:29:91:2D:98:8D:9A:60:47:06:B7:9E:7C:08:92:20:0B:B5
Authority key identifier: FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51
Certificate issuer: /CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51
Certificate serial: 019D28BB66E2162C3D8F6F7C4930C5FEDFCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
Manifest number: 0ECB
Signing time: Thu 26 Mar 2026 06:01:03 +0000
Manifest this update: Thu 26 Mar 2026 06:01:03 +0000
Manifest next update: Fri 27 Mar 2026 06:01:03 +0000
Files and hashes: 1: E82B-w4jJKhyGgYx3Ej9sCBHvb4.roa (hash: A+TYWIOmRpCeA175k18MhvZXgytX5Jk9nQ0FQ6VBaqA=)
2: Q4zQF0crGItA_1w0I9xQ7hGAgWQ.roa (hash: JfuU3qW2LSn3VZ4RrrVe6pLBVqp+kUuKYjX2iO0ocCI=)
3: _X0csRSU6ziY8Q09Y1vnXxay3FE.crl (hash: U6XrS4X+nO9RVLNgijFfMd9VP7yqCh0eQQ3xBUhExVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:66:e2:16:2c:3d:8f:6f:7c:49:30:c5:fe:df:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51
Validity
Not Before: Mar 26 06:01:03 2026 GMT
Not After : Mar 27 06:01:03 2026 GMT
Subject: CN=a465bc29912d988d9a604706b79e7c0892200bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:76:c5:24:cc:af:9b:4b:6e:b1:9b:33:b4:42:
d5:31:10:99:40:85:d9:25:2f:45:82:4f:00:38:5f:
ec:0d:b8:6d:a5:69:7d:bf:a4:b7:38:6e:6c:4e:2f:
f2:67:fa:b3:78:90:a9:a0:44:7c:36:79:2b:4b:d8:
57:72:ec:ea:8b:bd:69:9c:8a:80:05:20:3a:bb:87:
d7:76:4c:64:96:c4:fb:f9:f2:cd:a9:2a:41:f8:82:
a2:e0:de:d9:16:d6:9c:90:90:b1:8b:f3:69:76:1e:
bf:bf:d2:1e:6f:64:d6:7f:cf:98:0b:c3:2a:f5:77:
82:cf:b2:a4:45:5f:53:91:06:a8:1a:4f:c4:22:d6:
0f:5d:f7:63:fe:ce:72:dc:3a:cf:a6:f8:65:d2:21:
76:d1:5b:e7:40:ad:ee:67:1c:ba:02:d9:4f:e1:09:
b3:f7:54:3f:56:0b:48:22:6c:5b:10:a7:4b:f3:df:
13:18:37:ee:d8:fe:3d:a1:e7:dd:07:e0:8b:b6:e2:
b9:b7:3f:d4:d9:e4:70:e6:12:ef:25:9f:c4:b3:9c:
22:f6:e0:55:0f:61:b1:91:09:5a:64:3b:4f:37:1a:
a6:23:9c:18:6c:9b:64:fe:89:f3:46:5f:6d:6c:dc:
f1:d1:b9:c7:fc:43:6a:c0:ed:d3:69:75:08:70:3b:
7f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:65:BC:29:91:2D:98:8D:9A:60:47:06:B7:9E:7C:08:92:20:0B:B5
X509v3 Authority Key Identifier:
keyid:FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:97:81:dc:fd:43:c9:1d:6a:d6:28:95:ae:ec:83:3d:e2:5e:
03:0e:a7:65:d5:2b:35:47:d1:b1:69:9d:81:b4:d7:e8:dc:ab:
f7:b0:5e:ab:90:45:86:0c:3e:4c:da:b2:79:92:3b:3a:14:ab:
ba:45:c9:56:fe:88:8b:e5:fb:7d:6b:4c:86:60:fa:0d:9c:03:
2f:b9:a4:5a:ff:d8:06:8d:55:4a:58:5c:ac:59:39:13:6d:08:
70:20:67:ba:89:8c:81:b8:02:c1:3a:12:9d:08:2e:46:f2:ce:
00:78:03:a5:5f:c5:7a:7f:18:0e:42:25:cb:41:83:39:63:1a:
38:4c:d0:ef:18:51:a8:9e:c9:a1:6b:44:43:46:46:27:6d:0d:
e2:9f:8c:fd:75:ad:42:60:90:13:ad:42:88:79:12:bd:8f:d2:
5d:e2:a3:87:2a:fe:5c:9d:72:71:5f:51:a5:d5:40:e2:48:27:
c2:26:a4:0d:32:42:d9:c9:45:ea:c2:8c:45:08:a5:98:ad:e8:
be:9d:05:00:69:1a:67:e6:cb:11:4a:b9:f4:de:53:6f:e8:2c:
12:a8:ec:14:72:ff:86:50:88:c5:41:25:6d:b7:81:23:97:07:
4c:78:f6:02:c8:07:f5:83:39:8a:7d:49:98:25:b7:3e:41:7c:
bf:8f:de:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:01:28 2026 by rpki-client