Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
File: xW93K_PEZBpxv39LxN4RyTrd_qY.mft (raw, json)
Hash identifier: Q+JcB3QIUW0VVjsufjCIGx09rCivY1jfL7A4YLC3XR8=
Subject key identifier: 4D:0A:94:8F:DF:C7:7D:FC:24:A5:51:4C:2D:99:5C:4E:5A:D3:4C:79
Authority key identifier: C5:6F:77:2B:F3:C4:64:1A:71:BF:7F:4B:C4:DE:11:C9:3A:DD:FE:A6
Certificate issuer: /CN=c56f772bf3c4641a71bf7f4bc4de11c93addfea6
Certificate serial: 019D29971861AC4664B4297AD25BB8A715B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
Manifest number: 11BE
Signing time: Thu 26 Mar 2026 10:01:01 +0000
Manifest this update: Thu 26 Mar 2026 10:01:01 +0000
Manifest next update: Fri 27 Mar 2026 10:01:01 +0000
Files and hashes: 1: UZbrORTP_ETM2yJiPplsddvS7KA.roa (hash: KMKv//YG/qKlJS3aeSyQju59WADPz9oMFmNno9Nz5a4=)
2: xW93K_PEZBpxv39LxN4RyTrd_qY.crl (hash: tEw2Jz06MmiQOwHRGhku2Eolhcx4PUw7BAJ+isdI8ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:18:61:ac:46:64:b4:29:7a:d2:5b:b8:a7:15:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c56f772bf3c4641a71bf7f4bc4de11c93addfea6
Validity
Not Before: Mar 26 10:01:01 2026 GMT
Not After : Mar 27 10:01:01 2026 GMT
Subject: CN=4d0a948fdfc77dfc24a5514c2d995c4e5ad34c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bb:40:86:96:d5:f2:e9:25:9b:4c:dc:eb:f6:
10:aa:3d:1a:46:87:f1:31:98:4a:f0:ac:0a:2e:a0:
de:16:0d:f0:20:83:39:cb:b7:c4:df:da:81:2f:95:
e5:4f:b2:6d:0b:13:19:ca:c6:9a:b1:66:fa:16:25:
80:66:25:42:04:dd:fd:e8:a0:bd:31:fe:1c:5f:82:
c8:bd:ab:c0:31:f9:5c:c0:79:fb:b7:24:46:7f:8d:
3d:cf:16:2c:40:8c:9e:d7:a7:30:de:a9:39:83:d0:
59:c5:3d:39:c7:44:dc:8b:f8:84:e7:ca:f1:7b:30:
20:fe:cc:a0:19:6a:41:73:dd:14:09:cb:08:16:c0:
0e:e6:c3:5f:13:4c:26:03:a4:95:67:92:63:ca:2d:
3e:b8:ff:17:01:3e:d7:f5:60:4c:0f:f4:1e:2b:dd:
7e:44:4b:77:ff:ca:95:9b:76:c2:0b:bb:a2:d3:c3:
44:3e:72:cd:61:41:a3:c2:14:56:71:10:a4:a5:9d:
18:1d:1c:3d:70:fd:16:ed:f0:ca:8d:e1:0c:75:55:
65:5c:2f:31:4c:b4:1f:33:3e:a8:9c:3d:11:ad:92:
8d:89:09:f4:97:83:1c:a1:ce:29:30:b7:29:c6:44:
52:6f:b3:ac:5f:23:7e:16:ec:c5:94:b4:79:13:6f:
22:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:0A:94:8F:DF:C7:7D:FC:24:A5:51:4C:2D:99:5C:4E:5A:D3:4C:79
X509v3 Authority Key Identifier:
keyid:C5:6F:77:2B:F3:C4:64:1A:71:BF:7F:4B:C4:DE:11:C9:3A:DD:FE:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:fc:48:99:31:6e:a6:67:6f:89:94:41:8a:54:62:51:99:f2:
93:8f:a2:5f:5f:99:0d:6e:39:60:1a:6a:81:b2:41:a6:a0:c5:
06:6e:e3:be:2d:09:7e:41:91:eb:61:a4:a3:79:3e:d8:55:92:
28:5b:7c:1b:fe:d5:55:95:53:ff:98:5e:65:f9:09:d3:a6:19:
13:3c:55:a9:8c:6e:88:a3:27:6a:36:c1:08:80:c7:90:09:f0:
12:6b:d3:fb:4e:40:83:04:f3:bf:78:b6:f6:d4:27:25:7c:12:
33:5d:b0:2f:a6:9b:3d:0b:a5:b6:37:c2:0d:02:ca:14:b3:6d:
49:f1:59:0e:5f:5f:88:64:18:af:38:f2:39:b7:2f:44:f1:5e:
42:eb:f2:22:51:a5:ac:0d:33:17:ab:58:6d:f6:e2:92:6f:22:
a2:c3:60:08:fe:ff:8d:87:df:b4:5a:f9:b6:4e:ba:17:6c:57:
91:fe:b5:7f:2f:42:9f:c2:c9:b1:f0:a2:a2:e7:2a:6c:ae:55:
cb:b7:23:22:4f:79:5f:b2:af:38:24:67:42:18:cd:02:9a:5e:
0f:1f:5a:ca:da:25:2e:3d:7d:bb:fa:a9:39:87:a9:ec:ac:f0:
8f:8a:8d:95:1f:83:ac:b8:ec:f7:37:28:fb:62:4a:e3:40:36:
a9:5d:71:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:26 2026 by rpki-client