Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
File: xPHyFPsizFNhKPXeSqAXqHiA8oU.mft (raw, json)
Hash identifier: ay6vIBntsJ/VQmWXFEarwUBQAA19FxAmnF+XdMGLhpc=
Subject key identifier: 36:92:CC:28:DB:93:9B:7F:F7:4B:BA:F3:30:20:2E:1C:D5:92:CC:8F
Authority key identifier: C4:F1:F2:14:FB:22:CC:53:61:28:F5:DE:4A:A0:17:A8:78:80:F2:85
Certificate issuer: /CN=c4f1f214fb22cc536128f5de4aa017a87880f285
Certificate serial: 019D2771F5EB8CE72C1E2CEB65CAA05129DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
Manifest number: 09F2
Signing time: Thu 26 Mar 2026 00:01:13 +0000
Manifest this update: Thu 26 Mar 2026 00:01:13 +0000
Manifest next update: Fri 27 Mar 2026 00:01:13 +0000
Files and hashes: 1: 1K1Um4B_fpW1GkCf_gBrii6dk-U.roa (hash: /YNif+CPSNTVk1hV3V7FBKNaBXD9ZU/xIRYCuPXwkd4=)
2: xPHyFPsizFNhKPXeSqAXqHiA8oU.crl (hash: PzU88/GiKwfjAl1W19lLEOJllxH88fGZAy6H8556Fq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:f5:eb:8c:e7:2c:1e:2c:eb:65:ca:a0:51:29:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4f1f214fb22cc536128f5de4aa017a87880f285
Validity
Not Before: Mar 26 00:01:13 2026 GMT
Not After : Mar 27 00:01:13 2026 GMT
Subject: CN=3692cc28db939b7ff74bbaf330202e1cd592cc8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:30:b4:6d:dd:2a:15:d4:4c:b9:09:6f:26:82:
88:db:b2:2f:af:f2:8a:5e:fb:10:26:50:1e:7d:28:
3d:9b:19:f0:95:ba:ca:3d:c1:88:9d:2e:f5:7e:4c:
f2:95:ab:a2:60:dd:4b:eb:2c:f8:df:90:35:bb:f4:
4f:0d:06:c0:fe:27:1e:00:ad:79:ce:9f:0f:dd:c9:
5b:b7:8a:39:d4:2d:a0:48:db:1d:9b:0a:fb:9b:ae:
65:a0:c6:13:c5:64:47:75:30:ad:21:7a:c3:66:3e:
c1:44:1a:80:78:4e:e2:ee:38:cd:ab:3e:9e:11:e6:
2e:64:41:30:9f:c0:9b:a0:f8:88:e7:40:08:ff:94:
e8:49:ab:55:55:f1:52:70:78:87:15:e3:51:c5:fe:
bb:b7:01:aa:f5:f8:e9:56:1d:53:ef:d7:2e:09:da:
ab:86:9f:93:cf:25:d2:cf:6e:ff:8f:b8:b1:0a:e0:
39:b5:dc:28:f0:d6:43:4d:3e:42:22:09:eb:0b:1c:
07:7e:c7:f9:5a:1c:38:5c:70:82:20:06:97:fa:15:
85:c7:21:f1:4d:55:5c:c1:4f:f9:15:fc:ff:ef:1a:
e2:9e:69:bf:4f:b4:2d:36:fd:05:7b:72:a4:4f:54:
30:f5:e0:79:92:74:07:19:9e:d8:f3:6f:16:4a:55:
60:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:92:CC:28:DB:93:9B:7F:F7:4B:BA:F3:30:20:2E:1C:D5:92:CC:8F
X509v3 Authority Key Identifier:
keyid:C4:F1:F2:14:FB:22:CC:53:61:28:F5:DE:4A:A0:17:A8:78:80:F2:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ff:e0:69:51:35:13:89:81:ed:ea:50:fd:9a:cc:d1:bc:a8:
85:b9:d0:53:5d:6f:a4:e1:28:aa:0e:12:ef:4a:1a:be:24:a6:
97:08:26:4f:56:4a:95:35:52:1d:68:6b:73:62:72:a1:35:1c:
05:8a:4e:74:9f:2f:79:2e:b0:e7:65:df:0b:68:6d:06:7d:c5:
c5:11:4b:ea:b4:1e:28:09:d2:36:4a:44:6a:d3:56:e4:b2:a8:
a6:12:11:0f:16:38:bb:54:9c:38:c2:54:0f:4a:de:c6:4f:94:
04:b8:f5:f4:45:e7:0b:fc:df:77:f5:19:22:f8:a6:68:03:52:
43:54:ca:13:ad:7d:1f:f3:50:96:ff:04:6a:3e:12:9d:de:c3:
c4:48:28:34:32:ac:5d:b5:34:e4:7c:3f:ae:11:9a:e6:e6:ba:
4b:71:b5:ff:1a:11:aa:05:63:45:40:93:98:5d:67:8b:4b:40:
91:e6:0e:f0:9b:87:91:42:32:cd:87:80:12:b6:e6:20:dc:e3:
2d:73:21:db:48:08:c1:b0:d8:8a:ee:dc:ba:26:d0:6a:6f:98:
93:e8:42:ab:23:03:22:c8:49:d6:63:f3:91:af:7d:2a:14:62:
c8:cc:00:7b:cf:2e:fa:c7:a9:48:19:82:20:af:20:7a:92:c0:
96:6e:cf:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:31:53 2026 by rpki-client