Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
File: x2omXKitcnOooTChdjKD0v8bTdo.mft (raw, json)
Hash identifier: LrD7JkmT48WCCGIe1xoJvk9gzJzcUiYN6lW/9oOjpsI=
Subject key identifier: 1D:F5:04:A0:99:D1:A5:16:6E:FB:D1:61:2D:1C:54:58:B0:48:A2:74
Authority key identifier: C7:6A:26:5C:A8:AD:72:73:A8:A1:30:A1:76:32:83:D2:FF:1B:4D:DA
Certificate issuer: /CN=c76a265ca8ad7273a8a130a1763283d2ff1b4dda
Certificate serial: 019D2696320BDF63B2177036E02441140472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
Manifest number: 16AC
Signing time: Wed 25 Mar 2026 20:01:10 +0000
Manifest this update: Wed 25 Mar 2026 20:01:10 +0000
Manifest next update: Thu 26 Mar 2026 20:01:10 +0000
Files and hashes: 1: 2NacgtrTAmPDVQ9lKq5CE6Ehhnw.asa (hash: MpQCPMnmPtD2sJGqmtD1rBnmiwGX8J1+k78/7G1N5Nw=)
2: IjN9w9R69yDRWNftVupxbr7ls4w.roa (hash: POnTpPRSP8kUYsMd04EyebP2yODd3r/J3rLB1OAAgGs=)
3: x2omXKitcnOooTChdjKD0v8bTdo.crl (hash: mL1Z0SCsKP/PTi0cyMYXPgmDoa4TsqXEf/augIJrjTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:32:0b:df:63:b2:17:70:36:e0:24:41:14:04:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76a265ca8ad7273a8a130a1763283d2ff1b4dda
Validity
Not Before: Mar 25 20:01:10 2026 GMT
Not After : Mar 26 20:01:10 2026 GMT
Subject: CN=1df504a099d1a5166efbd1612d1c5458b048a274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7a:0b:e9:9b:5b:8a:3d:da:5f:d1:39:04:f0:
50:84:8a:90:32:fa:71:e2:87:30:3a:42:cb:21:17:
ed:84:e4:25:f5:28:8b:59:2a:59:ac:f9:89:c1:43:
ab:50:d1:69:15:16:88:1e:89:9d:b5:a8:0b:1f:9f:
63:b7:b9:26:64:2a:ff:c9:ed:4c:13:72:79:ad:0e:
fb:22:fa:65:75:7d:5b:5b:c0:f9:1f:78:54:9e:35:
eb:b4:69:47:d9:f5:79:a1:92:c3:1b:c5:0b:77:55:
e4:3a:2c:61:83:95:b4:86:51:7a:3d:5c:d6:11:28:
38:b3:e3:ad:fd:7b:29:84:d5:57:5d:23:87:8c:f9:
c7:ae:17:1a:3c:ff:96:ef:dd:d6:76:e1:15:b0:e5:
f9:bb:cf:20:bb:6c:02:96:25:7e:6e:54:63:b1:48:
b0:2f:34:6a:d7:e0:3a:e4:e0:f9:c1:18:c2:82:85:
6f:c2:b6:46:cd:3f:92:f8:54:9a:e9:17:35:9d:44:
82:c8:e1:68:0c:6a:b2:9d:0e:02:24:d7:21:bf:5c:
26:94:28:0a:7e:4e:11:d3:40:67:8a:e8:91:88:ae:
94:2b:71:7f:3b:ca:96:88:16:ed:f1:00:eb:2e:af:
3e:e3:81:ba:af:4e:3c:d9:20:4d:c1:8b:60:92:a1:
91:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F5:04:A0:99:D1:A5:16:6E:FB:D1:61:2D:1C:54:58:B0:48:A2:74
X509v3 Authority Key Identifier:
keyid:C7:6A:26:5C:A8:AD:72:73:A8:A1:30:A1:76:32:83:D2:FF:1B:4D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ba:a8:2d:d1:c9:b5:44:34:b0:2f:b5:f8:ad:8f:23:70:5a:
b3:70:bd:26:15:44:a6:15:e8:95:11:ed:b5:16:70:e6:16:6a:
95:82:73:f2:00:de:4f:9c:0f:e2:9a:12:6b:bf:89:a9:28:f1:
50:76:69:db:ce:af:e9:71:b3:29:de:a4:04:45:41:92:63:96:
66:da:62:b7:d7:fe:f6:fe:56:29:9a:bd:60:71:8f:c4:b2:8d:
c0:cf:66:a7:5e:10:3e:ff:7a:6c:e0:8b:76:13:d2:2a:0f:e7:
23:78:f9:8e:7c:00:57:c4:72:2f:5b:78:f5:21:0c:dd:f6:6b:
01:1b:d1:51:f7:bc:75:d9:8d:be:71:78:a4:c1:60:01:6c:00:
f8:b8:2a:73:33:06:0c:fa:2b:d5:d2:11:d4:9c:46:d3:f8:2c:
04:1c:02:1c:8d:d4:a8:7e:fa:26:45:23:8a:1c:f6:67:ef:b1:
b8:3e:e6:a4:0b:9d:59:6d:74:5f:66:c8:12:73:35:da:72:22:
eb:7c:21:bf:71:49:95:b2:d8:69:3e:45:07:24:76:4c:e7:ee:
10:82:78:bd:47:13:b8:d3:14:f9:75:f1:8d:46:f1:1b:76:35:
2f:1f:58:13:26:97:ac:9d:e9:fb:f6:70:18:9b:eb:82:bf:e5:
b8:70:9f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:37:27 2026 by rpki-client