Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
File: xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft (raw, json)
Hash identifier: OS1NDeg21O9N8hgds2tCcwoT6G4y5x494S22Jw/Bw0Y=
Subject key identifier: 81:09:61:49:43:DA:8F:CF:00:C8:3B:6F:9A:20:05:13:42:D9:40:8D
Authority key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
Certificate issuer: /CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Certificate serial: 019D28BB55550A7B1A76769913FB95F4145B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
Manifest number: 1892
Signing time: Thu 26 Mar 2026 06:00:58 +0000
Manifest this update: Thu 26 Mar 2026 06:00:58 +0000
Manifest next update: Fri 27 Mar 2026 06:00:58 +0000
Files and hashes: 1: EbX7N4kHuDXm0ug317aboa-Elyk.roa (hash: T2hYz7BsiNZAW/oKFsyjXx5vn7Ad21wTFDpKdq1SP6Q=)
2: Kd-PJMG0I6gP3eU-IVUAKt_gccg.roa (hash: guDscC6GtnjjQhv/AcT64xIdqM0iuOGm1U4WIDOTt8E=)
3: xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl (hash: 3w4/hqNGNlrhae9Joig8Z2fR5DmbHbq/0i5uLAVSCXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:55:55:0a:7b:1a:76:76:99:13:fb:95:f4:14:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Validity
Not Before: Mar 26 06:00:58 2026 GMT
Not After : Mar 27 06:00:58 2026 GMT
Subject: CN=8109614943da8fcf00c83b6f9a20051342d9408d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:aa:4c:bb:2b:d0:6d:ac:42:71:0d:23:aa:1d:
a0:a9:45:cc:32:0c:c0:cd:04:b9:21:c7:ba:11:13:
44:02:86:63:68:ac:a4:1e:1d:01:4f:fc:b5:b2:3f:
4a:e6:b4:f7:a9:0c:cc:46:0b:c6:8f:d7:e8:b0:43:
51:0d:0b:80:36:91:58:84:1a:e3:36:26:71:e8:00:
99:27:8a:30:20:09:2c:5f:23:aa:54:4f:a2:6b:4a:
86:81:f3:ea:c1:fd:3d:d6:b1:ab:42:7e:c2:9e:ec:
8c:78:a9:8f:af:92:ee:a3:25:2e:f3:8f:93:3e:f8:
9f:4c:8f:c0:9a:81:29:91:b8:f2:b2:b8:83:fd:59:
c8:0e:70:bd:42:21:f9:6b:da:ea:fd:7e:22:fd:16:
7b:70:fc:16:0f:13:ba:1f:46:f1:83:29:2a:10:8c:
4c:a3:24:8b:d8:6f:01:72:78:4a:ad:8c:f8:69:b7:
37:9e:a5:c3:92:bc:1c:e4:c8:3e:3e:28:c1:c3:b1:
50:3d:2e:53:4a:00:e9:fd:1b:e5:cd:b9:b0:37:1e:
cc:81:cd:15:bf:bd:ab:9b:97:c9:a3:54:e1:08:b8:
12:a9:0f:e4:87:58:59:fe:59:7a:f8:f1:2d:9d:a3:
a8:cd:39:14:5d:1f:9c:23:90:5d:31:08:c1:e1:85:
d3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:09:61:49:43:DA:8F:CF:00:C8:3B:6F:9A:20:05:13:42:D9:40:8D
X509v3 Authority Key Identifier:
keyid:C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ab:cc:34:5a:9d:9e:de:42:61:e3:6c:05:0f:5e:d0:25:1f:
96:07:24:91:90:f3:5a:87:17:a4:fd:46:f9:e7:33:e8:8e:df:
ef:a6:1e:ed:c1:7c:a5:36:b2:7f:b7:3f:b6:6c:14:40:a0:b4:
5b:1d:8e:6d:0b:a9:e7:18:a7:ab:09:e1:37:c4:60:0e:03:ee:
2e:4f:97:e1:36:fd:ee:63:fc:43:2a:8d:0a:c8:78:e0:7e:15:
d4:d8:70:ae:79:f0:7b:fb:ce:b8:f2:aa:fe:1e:57:92:65:6d:
36:33:66:b9:e1:59:5a:ac:7d:db:60:8c:c1:7a:47:91:c5:d6:
d2:c6:46:67:c6:60:5a:43:84:85:7a:f9:a3:04:71:73:9c:ef:
9d:de:31:ef:f6:51:cc:0c:62:10:d6:e0:08:d6:6c:1a:26:a2:
dc:f0:ad:9d:90:c2:02:20:27:bb:9b:9c:c0:86:e8:cb:03:09:
68:d6:cf:47:87:4d:8e:91:13:4e:7f:4b:9c:f7:6a:1c:fb:aa:
0b:a3:a5:88:a5:f9:54:b1:f3:64:39:64:97:51:2a:60:10:ad:
0c:6b:68:3e:2f:1f:a7:ca:31:ba:87:84:30:1e:ec:c8:82:8c:
5c:7a:c7:05:2b:33:93:c7:b0:ad:0c:a1:0c:1e:3b:e0:f7:52:
f5:51:14:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:00:40 2026 by rpki-client