Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/xTLcpO-wjHGnrwa-wCHIhxMNR48.mft
File: xTLcpO-wjHGnrwa-wCHIhxMNR48.mft (raw, json)
Hash identifier: niXZYJlAzcSOR63YkMTWNQKVXTe8ojWxyKAJvmEtc3w=
Subject key identifier: 1E:95:A5:A9:57:85:D8:FF:2A:43:69:60:94:84:D8:92:BB:BF:E3:BE
Authority key identifier: C5:32:DC:A4:EF:B0:8C:71:A7:AF:06:BE:C0:21:C8:87:13:0D:47:8F
Certificate issuer: /CN=c532dca4efb08c71a7af06bec021c887130d478f
Certificate serial: 019D27A9023717D5FE3E821EC8533CB74D1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTLcpO-wjHGnrwa-wCHIhxMNR48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/xTLcpO-wjHGnrwa-wCHIhxMNR48.mft
Manifest number: C2
Signing time: Thu 26 Mar 2026 01:01:20 +0000
Manifest this update: Thu 26 Mar 2026 01:01:20 +0000
Manifest next update: Fri 27 Mar 2026 01:01:20 +0000
Files and hashes: 1: SjFNiCOW9pffQRYTMpXHrm7q16g.roa (hash: sCyYv47zTnd77+VXWhZegzRk1ChPs3VRTcbNREbZLO8=)
2: xTLcpO-wjHGnrwa-wCHIhxMNR48.crl (hash: itgmkYzBr+EfwIZsDISTDvycB7yUYkiLrEBcpqCN5aY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/xTLcpO-wjHGnrwa-wCHIhxMNR48.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/xTLcpO-wjHGnrwa-wCHIhxMNR48.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTLcpO-wjHGnrwa-wCHIhxMNR48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:02:37:17:d5:fe:3e:82:1e:c8:53:3c:b7:4d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c532dca4efb08c71a7af06bec021c887130d478f
Validity
Not Before: Mar 26 01:01:20 2026 GMT
Not After : Mar 27 01:01:20 2026 GMT
Subject: CN=1e95a5a95785d8ff2a4369609484d892bbbfe3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:dd:2d:da:73:50:78:a4:93:c3:7c:2e:d2:f5:
9a:77:b8:75:bc:9d:33:c8:89:10:cf:8a:f4:45:fc:
2f:2b:e7:84:94:d3:d7:a2:b1:97:c8:a2:30:af:9f:
1e:d9:68:c5:99:62:07:6c:87:2f:84:de:3f:95:93:
79:78:e6:70:c6:38:d2:66:4d:a8:b3:7f:7b:60:84:
4d:bc:2c:0b:ff:f1:b6:73:48:3e:f9:db:ab:19:0e:
71:4d:61:ff:a0:76:cc:f2:0f:ed:69:e3:15:66:44:
3c:7a:04:ac:de:bb:37:70:25:de:fd:72:d5:5b:4c:
19:17:86:b7:ef:56:aa:e9:45:df:cf:ac:dd:ac:9a:
05:85:69:f9:5b:16:73:6f:98:56:29:7a:3a:ff:fe:
7b:a3:13:10:59:05:57:f3:f0:b0:63:3a:a2:63:5c:
c3:fe:ee:1d:f5:7e:6c:a1:11:0b:91:65:19:0f:f0:
a0:f3:55:3a:bc:48:57:53:27:90:ea:20:c3:ca:b7:
9c:23:e3:e9:1c:e6:0b:b8:2d:4f:27:0b:a5:db:4d:
8f:dc:ca:90:d2:2d:90:73:e1:bf:d5:e0:00:2c:0e:
47:d6:70:da:aa:ff:23:f3:4a:ec:32:7b:fa:22:92:
86:7f:81:ac:6f:1b:93:e6:f6:6e:b7:aa:a2:6b:cf:
62:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:95:A5:A9:57:85:D8:FF:2A:43:69:60:94:84:D8:92:BB:BF:E3:BE
X509v3 Authority Key Identifier:
keyid:C5:32:DC:A4:EF:B0:8C:71:A7:AF:06:BE:C0:21:C8:87:13:0D:47:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTLcpO-wjHGnrwa-wCHIhxMNR48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/xTLcpO-wjHGnrwa-wCHIhxMNR48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/xTLcpO-wjHGnrwa-wCHIhxMNR48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:68:7d:d5:06:97:76:81:f5:4b:88:42:11:ea:e9:2d:ea:bd:
03:08:26:16:3e:92:7e:4f:ec:bc:bd:b5:82:e0:d7:81:92:05:
12:0c:ba:0a:57:13:95:04:17:a9:d3:4f:fc:ad:e8:ae:c8:dd:
5f:aa:83:1d:0b:a8:b1:4f:79:d5:88:fc:de:a2:80:f6:7d:c7:
55:89:c2:3e:bb:37:99:d3:e9:81:81:95:17:15:76:68:b1:90:
e0:27:45:eb:72:0c:4d:fb:8e:7e:13:7a:18:3c:b9:f9:cf:08:
a7:20:39:d3:cf:63:cb:92:87:a2:0e:06:66:a4:6b:af:5e:98:
60:fd:16:f6:cb:8f:88:73:96:d4:8f:e7:a1:e5:7d:87:83:e5:
73:fe:96:4b:71:8f:82:69:8e:78:4c:c2:2b:40:11:4a:b0:4f:
96:a0:00:f5:51:00:b3:0c:bc:88:3c:81:bb:cd:17:dc:1f:86:
23:b8:0b:1f:18:1d:1e:3c:a2:2c:86:a6:5d:0a:ee:2f:70:74:
39:ad:80:2c:ce:f3:59:9e:08:5c:e1:7e:2e:e5:79:19:a6:ec:
a9:65:73:ae:1d:b0:21:ad:6f:ee:1c:91:c2:a1:36:b7:75:f0:
6f:bf:64:7b:a1:8c:fa:31:06:4c:c7:5e:32:b7:90:25:a7:67:
40:3e:b5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:23:00 2026 by rpki-client