Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
File: xWwoao20vSFr9kx1szhRsARaF18.mft (raw, json)
Hash identifier: Bq6oGlK+CWL4mbUXV+6+p4+P6dNhm0no0n2cfNMWdrE=
Subject key identifier: F7:35:7A:9F:E1:D7:C5:31:D1:D9:66:74:E0:37:9B:2D:1A:7A:37:05
Authority key identifier: C5:6C:28:6A:8D:B4:BD:21:6B:F6:4C:75:B3:38:51:B0:04:5A:17:5F
Certificate issuer: /CN=c56c286a8db4bd216bf64c75b33851b0045a175f
Certificate serial: 019D25835EC652F43ADE83018CA4547700EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
Manifest number: 0CE9
Signing time: Wed 25 Mar 2026 15:00:59 +0000
Manifest this update: Wed 25 Mar 2026 15:00:59 +0000
Manifest next update: Thu 26 Mar 2026 15:00:59 +0000
Files and hashes: 1: fzBvwE7sX01y4kB6SSgdE7n9ysI.roa (hash: qCcHE+EY0A9msSwDHW5P3s9hKxDDBKeiCJ6eljce7Pg=)
2: xWwoao20vSFr9kx1szhRsARaF18.crl (hash: AXnzQodtOh+69SKt3rpdMzzOE4ZIb+ly0cnWBpDtAo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:5e:c6:52:f4:3a:de:83:01:8c:a4:54:77:00:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c56c286a8db4bd216bf64c75b33851b0045a175f
Validity
Not Before: Mar 25 15:00:59 2026 GMT
Not After : Mar 26 15:00:59 2026 GMT
Subject: CN=f7357a9fe1d7c531d1d96674e0379b2d1a7a3705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:46:5b:3e:05:0a:1e:0e:27:79:de:db:64:d3:
d6:54:09:72:8c:67:a2:39:d4:7c:18:cb:e0:d5:0f:
0b:37:1c:91:9b:4e:85:b8:c7:c6:b2:5c:9d:fe:16:
38:92:47:f6:27:29:7c:7d:f4:3f:5e:a3:21:42:67:
01:39:e9:64:54:b1:0f:8e:55:07:55:21:4a:8f:9b:
dc:b9:8b:90:66:96:68:c7:f0:fa:04:f9:ec:57:bb:
36:76:69:00:33:66:d1:62:02:ac:35:e8:1e:a7:e5:
6f:0c:81:20:d5:ce:73:0a:36:23:aa:6f:01:99:50:
96:f5:fc:b0:8e:75:c6:ef:c3:cf:57:5c:f5:a4:3f:
d4:7a:1f:5a:f8:25:fa:9d:d2:d1:43:0c:da:98:a0:
64:13:e2:a6:ce:bf:2b:f1:bd:c2:0a:9f:dd:02:cc:
34:25:a1:1a:3c:4c:33:ee:4f:39:18:a0:c4:79:ae:
8d:fd:47:f4:eb:1e:42:e8:94:ad:27:e3:aa:69:a9:
20:cd:1b:f7:60:1a:ee:75:ae:7d:44:f5:a2:05:45:
c5:e4:10:08:a6:8e:e4:58:c7:44:c2:65:ff:95:bc:
67:88:4c:4d:32:d7:5c:c9:c4:c0:6c:65:50:85:9e:
51:08:df:b0:22:a7:fb:0c:dc:ba:f1:e7:3c:dc:ab:
bf:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:35:7A:9F:E1:D7:C5:31:D1:D9:66:74:E0:37:9B:2D:1A:7A:37:05
X509v3 Authority Key Identifier:
keyid:C5:6C:28:6A:8D:B4:BD:21:6B:F6:4C:75:B3:38:51:B0:04:5A:17:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:21:02:27:ef:28:2e:0d:48:09:9f:61:2a:6a:96:25:35:d7:
80:18:19:26:d3:39:8f:5b:94:4c:b2:22:7e:9e:5e:f2:c5:d6:
85:7c:25:be:1b:26:af:8b:ba:b9:60:29:39:14:fb:a3:ba:6d:
fc:ae:67:c0:dd:be:0c:c4:4a:a2:88:8c:ab:c7:ec:f5:08:6a:
a5:3d:82:80:d1:f2:10:6b:f8:68:05:cf:a2:5a:ca:ed:d7:c1:
ba:c9:60:57:ba:3b:23:b0:ce:d8:20:06:49:03:67:66:3d:07:
a3:d7:7c:08:51:62:8c:7c:8e:d1:24:b3:aa:63:19:3a:8e:cd:
7b:22:29:f6:5e:f1:39:04:cd:3b:89:da:4a:cd:3a:43:86:ed:
36:c5:80:68:12:1b:82:24:9b:79:65:8d:4c:4e:09:a7:b8:71:
d3:62:20:11:41:d4:81:82:e4:7e:70:4a:10:80:9c:3b:d7:31:
3d:0a:d0:15:23:59:a3:e5:bd:5c:86:28:66:b3:e2:93:13:57:
66:35:70:a0:8c:e5:a5:b0:bd:bc:f1:f7:b6:de:bb:68:56:0d:
4b:8c:05:fd:e8:34:94:e0:82:58:56:c2:e4:4c:ea:5d:98:5c:
a7:c9:0e:1d:03:ac:f6:94:79:b3:b7:f9:8b:8d:9b:72:73:eb:
81:64:41:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:46 2026 by rpki-client