Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
File: x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft (raw, json)
Hash identifier: vXc7Oc/ZxFm4DYSfSowyppvPU2vAq73bY1UfPaxp/Mw=
Subject key identifier: FD:70:9A:81:98:6F:97:27:A8:D6:B7:69:20:A6:1D:6F:FC:0A:51:23
Authority key identifier: C7:6C:36:44:74:13:36:B0:1B:63:85:63:31:4F:40:D1:0C:69:D3:0D
Certificate issuer: /CN=c76c3644741336b01b638563314f40d10c69d30d
Certificate serial: 019D28F33D964E161EA5DCF19962F16B3DAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
Manifest number: 0C95
Signing time: Thu 26 Mar 2026 07:02:02 +0000
Manifest this update: Thu 26 Mar 2026 07:02:02 +0000
Manifest next update: Fri 27 Mar 2026 07:02:02 +0000
Files and hashes: 1: SBXXsuQ2RCCtkfka4gDFjpiCz2E.roa (hash: mV/+p/4ajgUkF2cImFAUrHKdi3q+SL4hKUtvs6QGwDw=)
2: x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl (hash: gecyf/+VLD0Mgx0gwA1vuB00ghw/JUxOIWHLcmdClbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:3d:96:4e:16:1e:a5:dc:f1:99:62:f1:6b:3d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76c3644741336b01b638563314f40d10c69d30d
Validity
Not Before: Mar 26 07:02:02 2026 GMT
Not After : Mar 27 07:02:02 2026 GMT
Subject: CN=fd709a81986f9727a8d6b76920a61d6ffc0a5123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:82:11:d1:2a:80:4f:2e:53:c2:e6:1c:87:04:
cb:95:e1:95:f0:10:93:51:ca:12:c3:76:51:c5:f3:
3e:31:2a:c4:45:93:38:55:56:03:57:5d:74:5c:57:
30:f2:ce:aa:30:5f:9f:87:5b:ed:82:63:cc:77:cd:
c7:42:73:06:79:f3:bf:16:47:09:93:ce:b7:60:79:
60:c7:ea:ad:41:e0:9c:09:1b:db:cd:ac:b9:c4:aa:
82:03:e4:6e:35:f9:88:bf:08:0e:b6:88:67:80:d8:
f4:8d:07:a3:b1:70:59:04:36:a8:57:4f:62:8c:59:
0d:1e:79:c0:55:b6:f6:ce:bc:28:f3:61:cd:d0:8b:
4a:10:22:98:6b:b2:57:0f:c2:93:cd:9d:15:32:41:
d8:35:aa:c9:96:7f:5a:0a:e8:44:ff:94:72:28:b0:
f1:d9:30:24:7e:4d:82:b6:07:25:58:8d:54:66:6c:
df:63:ec:dc:f1:8c:8c:15:13:e9:d4:6f:ac:57:aa:
c6:1b:72:c1:67:65:93:d2:56:a5:dd:ff:a8:14:aa:
82:51:b8:99:c5:7a:2b:0c:b9:ca:ae:11:50:ae:60:
b2:57:19:e1:0a:26:ea:2f:b5:72:59:70:2f:9b:98:
ee:ba:d2:29:e6:7c:e0:e6:ab:c8:01:2d:98:d4:28:
b2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:70:9A:81:98:6F:97:27:A8:D6:B7:69:20:A6:1D:6F:FC:0A:51:23
X509v3 Authority Key Identifier:
keyid:C7:6C:36:44:74:13:36:B0:1B:63:85:63:31:4F:40:D1:0C:69:D3:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:13:71:8a:b6:04:4b:c2:f9:02:57:dc:29:33:da:4c:8c:a7:
61:df:4b:7a:9b:84:3f:43:5c:47:d2:0b:c2:49:e8:9d:c1:b1:
16:b3:2e:72:94:fc:dd:74:58:7b:8c:77:5e:cc:34:ff:4e:7b:
80:71:78:41:17:01:60:0c:dd:32:a6:4b:7f:4b:76:3d:f6:fc:
f3:05:e3:90:9a:ce:d3:09:8b:c0:33:5f:0d:5f:a4:60:32:dd:
85:8e:9f:53:11:41:1c:96:f0:79:b6:52:31:f0:ef:5f:7b:66:
c3:ec:1c:72:18:12:5e:7e:a8:ab:bf:e6:71:1c:3a:f3:7c:d8:
7c:3f:c6:61:fe:3b:38:56:6f:0d:d8:e9:12:1f:3e:fd:5d:62:
3a:c1:4c:d2:f5:cf:da:60:61:0d:ee:f2:e1:43:56:e7:78:64:
e1:8e:5a:b7:68:9c:01:4e:ca:49:d8:ed:e6:fc:9f:e4:8a:10:
b5:35:0a:4c:6f:75:69:7f:36:f5:bb:56:89:45:6b:9a:e9:b2:
ca:d9:d4:d9:d4:f1:43:c2:ec:0c:fd:d7:9b:ad:8b:bc:5a:3b:
06:be:b3:42:80:bf:07:0b:e3:6d:99:d1:12:69:ba:05:39:77:
0a:26:ab:f5:56:4a:ff:af:c4:b0:78:91:9e:7f:37:14:5f:a0:
ef:f8:02:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:08 2026 by rpki-client