Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
File: xtEbZP_hjvpC9DpsdlY53uONAn4.mft (raw, json)
Hash identifier: +MwEWfZG5Ky7j8nEX06mWNtW6WwqxkI0GnirV3Jvg4c=
Subject key identifier: D2:05:E6:63:9C:A6:EF:26:52:94:73:94:1B:BD:7A:47:40:D0:FE:4E
Authority key identifier: C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
Certificate issuer: /CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Certificate serial: 019D25F1DBF30C49720610DD1AD79DF3DCAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
Manifest number: 110D
Signing time: Wed 25 Mar 2026 17:01:40 +0000
Manifest this update: Wed 25 Mar 2026 17:01:40 +0000
Manifest next update: Thu 26 Mar 2026 17:01:40 +0000
Files and hashes: 1: 1HMsGfdsMj6bVCe_HqSPHKmPGQA.roa (hash: Aa+3horScinkb91IcV06nuOTEkzdcEAPUq8TBlQGMDg=)
2: Q6q5ifTmogwJicn2e4z2f5_1UN8.roa (hash: ZCT+LPivkmFqXHHIYRE3kEHzKOk9mVM2bvW0OtpppFg=)
3: xtEbZP_hjvpC9DpsdlY53uONAn4.crl (hash: WyY0Nzn0SnR6r7lGh4dmOkPNUeYrUDIdlDHnJ+kUurA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:db:f3:0c:49:72:06:10:dd:1a:d7:9d:f3:dc:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Validity
Not Before: Mar 25 17:01:40 2026 GMT
Not After : Mar 26 17:01:40 2026 GMT
Subject: CN=d205e6639ca6ef26529473941bbd7a4740d0fe4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4f:9c:b0:30:a9:22:0a:f8:c8:68:62:46:63:
f8:9c:3e:f1:c4:5c:5c:6f:3a:9e:da:80:ae:3b:3a:
ae:e5:88:24:1e:da:fa:45:79:51:b3:38:3f:1e:9a:
ef:1a:60:98:1d:69:80:31:4e:c7:17:ad:5e:f0:02:
7b:40:50:0a:1e:43:37:27:e7:60:e6:c0:35:c1:64:
e4:b7:26:4c:ea:4b:a4:ed:84:5f:a7:d4:c2:60:f7:
de:69:9f:b0:6a:a7:23:e0:06:10:ae:bb:09:c5:4d:
22:af:c7:16:13:c9:80:b4:83:a2:6a:7b:43:8c:d0:
91:16:c7:6f:4a:a7:86:b2:7f:03:c7:a7:c8:1c:30:
c7:52:e4:60:91:db:fe:3e:a3:2f:3b:91:86:4c:01:
da:38:a9:49:00:66:4c:a8:8a:5d:61:f5:af:02:a9:
52:74:ac:20:b3:74:90:f7:8c:00:32:65:ff:19:24:
7d:81:09:28:7f:a7:5e:5b:52:ed:69:c4:e2:c6:7d:
58:9c:11:39:28:c8:07:84:5a:03:f4:ea:71:c9:37:
85:70:4c:40:25:b5:14:e6:1a:01:12:7a:4e:ac:df:
d4:06:a8:a2:29:f7:ea:f9:56:99:1f:c3:d6:ff:96:
32:16:ab:b6:7e:f0:16:49:e5:2d:45:51:72:bc:3d:
aa:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:05:E6:63:9C:A6:EF:26:52:94:73:94:1B:BD:7A:47:40:D0:FE:4E
X509v3 Authority Key Identifier:
keyid:C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e9:f9:ae:12:7e:eb:d2:22:3d:dc:2a:f8:df:30:45:c5:55:
54:38:45:34:8c:b3:67:be:88:d6:83:ac:91:d6:fd:dc:52:e7:
ec:41:c3:79:58:b7:a9:10:df:e9:ab:ae:69:a1:9d:fd:e8:b9:
30:72:2d:78:b5:1a:02:4b:90:09:32:df:47:85:69:a4:b3:9a:
bc:41:c8:5c:8f:fc:58:7c:5b:de:a3:8d:ab:9b:f4:55:70:fc:
ff:6d:85:2d:51:52:3a:46:21:aa:cf:87:01:47:7d:6d:82:a6:
99:f7:20:0c:e2:e2:72:52:00:d5:93:8c:c2:b2:f6:d5:eb:29:
0d:80:e1:ec:15:64:f7:26:f8:13:bb:18:66:f2:38:17:42:c9:
8c:21:f8:c4:65:21:ca:f4:a2:20:ab:47:94:b6:a5:9e:4a:32:
d6:8a:48:eb:f7:ee:53:6f:36:b2:cf:09:8e:4c:42:f3:8e:b2:
d9:5c:7d:58:4b:52:61:73:33:4e:07:66:2e:97:45:3f:b5:bf:
6b:d2:04:89:68:04:26:1c:1e:37:89:46:17:91:a6:08:6b:f0:
6e:8b:dc:00:af:7f:d7:fd:03:c1:38:17:ce:eb:4b:f5:d5:d5:
65:d9:40:93:c0:2d:db:80:46:ab:f6:a5:ab:f3:97:a9:3f:45:
41:b1:4a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:12 2026 by rpki-client