Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
File: xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft (raw, json)
Hash identifier: 9JfWIv5rFw5ql1fedw9R9cjnxA+8wIaRqLz2XWINoK0=
Subject key identifier: 0C:27:EB:8B:09:19:39:EF:6C:C4:08:A6:D2:BB:36:4D:4D:7C:06:28
Authority key identifier: C6:25:AF:B9:CE:33:5E:ED:3E:53:12:8B:4A:9E:B2:5F:C4:95:D6:E0
Certificate issuer: /CN=c625afb9ce335eed3e53128b4a9eb25fc495d6e0
Certificate serial: 019D25BA952F223B60CCD12B8291547B57AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
Manifest number: 17DD
Signing time: Wed 25 Mar 2026 16:01:17 +0000
Manifest this update: Wed 25 Mar 2026 16:01:17 +0000
Manifest next update: Thu 26 Mar 2026 16:01:17 +0000
Files and hashes: 1: amTwSoJu04--PPMgX7cWGoLl7yI.roa (hash: LHgYpMKmWJ/zte9nRlTYZiOamXW79eIiHdCMO+n1Kpc=)
2: xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl (hash: Lpndx9JrYuTYQPqEfGZMgktqszQSXWS7h6OUfEagri0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:95:2f:22:3b:60:cc:d1:2b:82:91:54:7b:57:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c625afb9ce335eed3e53128b4a9eb25fc495d6e0
Validity
Not Before: Mar 25 16:01:17 2026 GMT
Not After : Mar 26 16:01:17 2026 GMT
Subject: CN=0c27eb8b091939ef6cc408a6d2bb364d4d7c0628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c9:c9:c6:68:2e:6b:5c:5e:ff:84:b9:66:5d:
a6:1c:66:af:80:98:0e:34:8d:80:98:aa:82:e2:c9:
d2:6a:38:1c:b2:39:b3:05:3b:f3:7a:88:e5:8f:9a:
9d:7e:3d:47:d2:5d:5a:2d:78:26:65:67:6e:19:d1:
3c:e0:2d:5f:f7:8e:58:31:c3:86:36:9b:8c:77:63:
54:72:9a:14:8b:b5:d8:ff:29:54:d3:5f:c3:33:f7:
bb:71:08:cf:f0:9e:cc:86:50:3c:10:b0:d1:d5:a0:
37:33:6d:8a:51:4e:61:86:a1:47:dc:83:69:6b:db:
13:6e:ce:4c:10:a8:22:99:45:7b:b6:3f:8b:3a:12:
e3:f9:8e:e3:d4:70:23:5c:cb:1b:bf:1d:ce:cf:29:
ad:62:3b:45:44:28:5d:97:e3:6f:62:c0:23:16:50:
b3:1c:5b:94:76:de:d8:85:5a:d6:2f:73:cb:56:d4:
e1:4f:ff:44:49:d2:34:ba:ff:1f:52:b1:f5:e4:c7:
94:95:41:41:b7:8c:56:da:b5:28:dd:c6:16:19:b0:
07:bb:d2:d6:20:8a:fa:71:b0:f9:14:87:80:70:f5:
b4:53:f8:e1:84:9e:60:d0:2c:7c:ce:95:5a:37:0a:
bb:55:af:02:79:56:00:60:ef:89:03:28:d7:de:79:
a0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:27:EB:8B:09:19:39:EF:6C:C4:08:A6:D2:BB:36:4D:4D:7C:06:28
X509v3 Authority Key Identifier:
keyid:C6:25:AF:B9:CE:33:5E:ED:3E:53:12:8B:4A:9E:B2:5F:C4:95:D6:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:33:95:3d:e8:a1:54:d9:ae:10:67:e6:5a:78:1b:91:7f:2b:
14:6e:db:d3:f2:fd:62:53:20:1c:75:82:ab:f2:1a:14:7c:a6:
b6:d4:a9:be:7b:f0:85:a7:45:81:9d:4d:e7:ec:80:44:2d:5a:
19:0c:66:a5:10:96:c4:19:dc:fe:ae:1e:8d:74:36:0e:e6:61:
db:7f:f9:e9:eb:2c:da:c0:2a:3f:fe:1e:e9:a5:d6:3d:ed:bd:
23:fc:7b:81:df:43:35:23:2c:35:58:31:38:58:1f:ff:d7:a8:
26:96:97:e5:63:a3:c7:f0:3d:be:60:b2:fd:0e:38:b9:71:3c:
6c:5a:f3:af:65:87:00:41:2b:7d:bd:1e:74:72:09:90:f3:4c:
1b:94:c4:b7:5e:03:94:1d:85:37:9e:a8:1b:c2:d5:5c:9d:b6:
a8:fe:7b:b9:05:09:8d:fe:51:15:63:8c:29:0a:47:c1:26:2d:
92:11:c0:8e:79:cb:a6:1a:1f:2c:8e:6b:07:cb:72:cf:a5:58:
00:02:7d:af:a1:bc:91:73:84:8b:b3:6a:9b:8b:06:da:88:4b:
60:89:48:f1:64:f3:3c:0f:b5:d3:72:20:56:67:f0:c8:21:0b:
32:30:be:45:a0:28:86:ad:db:cd:9f:b9:e8:1a:20:69:90:37:
a8:4c:8c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:48 2026 by rpki-client