Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
File: xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft (raw, json)
Hash identifier: q9hFVnrDs5BjwSpM0F+ZQK+vog0J8Bn1ovOnCBoXe9k=
Subject key identifier: 0E:3B:2C:C2:AD:4E:59:4A:B5:BD:BC:07:E8:CF:D7:08:7E:79:CB:28
Authority key identifier: C7:1E:F0:AD:43:C7:B8:E2:6C:17:5F:DC:1F:16:96:D0:08:1D:C4:DA
Certificate issuer: /CN=c71ef0ad43c7b8e26c175fdc1f1696d0081dc4da
Certificate serial: 019D269628CB25FF31F919E0AB2B2EB84E6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 20:01:08 +0000
Manifest this update: Wed 25 Mar 2026 20:01:08 +0000
Manifest next update: Thu 26 Mar 2026 20:01:08 +0000
Files and hashes: 1: 3ab_o0Nl-S6Ei86C2hafif65fQo.roa (hash: dJDFaPL1IxpS3bFn7gG9LpNkmVG6kmHGyMD/BQus07s=)
2: xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl (hash: yzLrxW5R3k0RZ6d0e/kjWye2Jphp6YLo9iQIV5fwHOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:28:cb:25:ff:31:f9:19:e0:ab:2b:2e:b8:4e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c71ef0ad43c7b8e26c175fdc1f1696d0081dc4da
Validity
Not Before: Mar 25 20:01:08 2026 GMT
Not After : Mar 26 20:01:08 2026 GMT
Subject: CN=0e3b2cc2ad4e594ab5bdbc07e8cfd7087e79cb28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b5:a8:7b:2a:ce:82:c3:56:e8:f4:b1:48:4e:
ed:52:41:ac:79:e3:fe:9b:02:c9:ea:3e:c9:74:88:
77:13:c8:7c:99:40:3d:b9:a0:c5:d8:46:0f:eb:0a:
ec:d0:89:16:26:3f:db:47:37:62:33:18:ff:1b:f3:
9e:77:93:3f:9c:97:fa:55:f5:42:52:a8:7d:1a:92:
bb:78:9e:77:53:99:77:a2:d1:7b:0e:43:6a:db:e6:
c6:3d:21:fa:47:37:35:81:34:15:26:59:df:9c:f3:
b2:48:40:72:a5:54:3d:19:fa:7d:a4:4e:c3:f2:01:
6b:55:4f:a9:f4:e7:be:39:2e:3c:a3:79:78:ba:4d:
de:63:ed:12:9e:79:28:22:2a:bb:8f:f9:30:df:4e:
db:1f:24:e2:2c:93:e8:6a:e3:01:c0:19:8e:82:32:
a4:c9:be:21:ad:b7:65:f5:20:c4:51:f5:c8:e9:3b:
e2:00:1c:63:35:81:9e:99:c2:0e:ff:38:5c:8f:2b:
2d:2e:35:31:72:1d:fb:57:25:41:5e:78:4d:17:e3:
d5:fe:bd:e6:78:29:a6:da:63:9f:75:4d:6e:a9:38:
45:19:b7:29:f4:45:a4:ef:95:de:bd:44:01:9e:fc:
be:0c:38:2f:a1:13:3a:47:42:67:14:da:67:a8:38:
fe:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3B:2C:C2:AD:4E:59:4A:B5:BD:BC:07:E8:CF:D7:08:7E:79:CB:28
X509v3 Authority Key Identifier:
keyid:C7:1E:F0:AD:43:C7:B8:E2:6C:17:5F:DC:1F:16:96:D0:08:1D:C4:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a3:bc:bc:a9:26:ec:5b:e0:7f:4f:3f:7c:78:4c:51:97:07:
f5:3a:f2:8f:e0:44:85:f9:0e:8a:b0:c9:b6:8d:0e:60:78:80:
04:e0:41:48:14:7b:3a:69:e7:92:f7:22:86:77:b0:e4:ae:44:
d1:0f:7f:87:34:6e:b3:fd:8e:25:86:4d:9f:9c:5c:1d:f0:7a:
53:a2:9d:2a:be:24:d2:b4:40:3a:2a:91:75:28:30:26:2b:a7:
2b:c7:94:4c:1d:42:1b:d5:13:91:e1:e1:2e:e8:aa:54:f2:bb:
ae:84:1b:69:f6:b5:8f:6d:d9:6b:3d:77:8d:1f:a0:ac:11:75:
ba:46:40:bb:76:92:b1:30:67:8f:d8:d5:30:41:66:fc:05:5c:
be:f8:d8:94:41:4c:1b:83:de:27:0c:d8:3b:3c:2e:eb:94:43:
48:8d:e7:e9:e2:f0:17:88:f6:b3:2e:78:77:10:03:7a:80:f5:
bc:08:fe:ab:1a:21:a4:2d:c8:11:e4:d2:74:f2:e4:93:73:77:
f1:34:c6:fd:72:a5:5c:9e:c0:0c:93:19:1c:fb:1b:1a:b9:8b:
b1:3b:32:91:4d:d2:d1:6f:89:68:72:2f:dd:49:99:a1:d8:1d:
d8:d5:9a:cf:f5:63:ce:ca:cf:96:ad:ad:b6:2a:90:d6:80:f8:
4d:fc:8d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:00:45 2026 by rpki-client