Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
File: xTsinnPOa7GW1lwL7xGVYGV6NyA.mft (raw, json)
Hash identifier: FKA2jnEbj+3iCcQRdnOGbYaet6g/KT7ny4aE1A0/pPQ=
Subject key identifier: 4F:6B:17:F9:AB:BD:9A:8A:D1:D7:CE:E6:B0:DD:58:02:4E:D1:8A:2D
Authority key identifier: C5:3B:22:9E:73:CE:6B:B1:96:D6:5C:0B:EF:11:95:60:65:7A:37:20
Certificate issuer: /CN=c53b229e73ce6bb196d65c0bef119560657a3720
Certificate serial: 019D2703EB038BA2397F77A41F694B46D025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
Manifest number: 0CF1
Signing time: Wed 25 Mar 2026 22:01:01 +0000
Manifest this update: Wed 25 Mar 2026 22:01:01 +0000
Manifest next update: Thu 26 Mar 2026 22:01:01 +0000
Files and hashes: 1: iflWHVHxpmDjWRQsawE9EnRAAog.roa (hash: Pfv9IcP/hIRl799n9aafLKMa8g4cQzw8aOtBJX7HXA0=)
2: xTsinnPOa7GW1lwL7xGVYGV6NyA.crl (hash: vgTkl6toLO9Wx9NBE/TZHH9y+uEJ+rmrU2JD251CHxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:eb:03:8b:a2:39:7f:77:a4:1f:69:4b:46:d0:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b229e73ce6bb196d65c0bef119560657a3720
Validity
Not Before: Mar 25 22:01:01 2026 GMT
Not After : Mar 26 22:01:01 2026 GMT
Subject: CN=4f6b17f9abbd9a8ad1d7cee6b0dd58024ed18a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:45:04:25:4b:54:a2:15:4f:97:d4:50:78:8e:
6f:c3:fc:8c:e4:81:3d:61:59:27:7f:85:ad:96:00:
40:24:2b:74:f4:c4:9f:f0:a1:93:a1:fa:19:00:bd:
72:be:66:6f:b1:0f:a8:56:8a:de:3e:cd:af:74:3a:
98:fc:e0:44:27:22:aa:19:bf:c0:09:0b:80:a1:42:
9f:c3:db:e3:b7:6b:a8:ec:79:e1:7f:77:ac:26:32:
f7:2f:cc:3e:da:75:0a:26:be:08:35:13:17:6a:54:
de:c8:fe:22:b9:9f:ec:d9:e9:77:be:5c:8d:2b:f4:
84:90:14:5c:64:92:db:6c:fa:0c:bd:e1:3e:92:90:
d7:c2:d6:15:57:4b:8f:5a:b8:47:84:1e:04:80:a2:
de:20:51:33:e7:58:08:41:4c:ce:8b:0a:e7:10:b5:
ce:3c:3e:dd:ce:94:54:17:68:14:21:93:0d:d8:36:
f1:45:00:89:64:dd:e9:40:72:5b:b1:18:45:42:f6:
6e:1a:73:88:c1:69:c8:36:35:c4:bc:90:4e:64:e0:
47:78:b5:3b:49:e3:b4:d3:73:a2:d6:bf:34:2e:80:
8c:8e:ce:b0:3a:7c:19:e9:ca:9f:43:a1:53:6b:52:
c5:dc:32:18:1d:52:e6:88:2a:a1:ba:41:d3:64:bf:
12:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6B:17:F9:AB:BD:9A:8A:D1:D7:CE:E6:B0:DD:58:02:4E:D1:8A:2D
X509v3 Authority Key Identifier:
keyid:C5:3B:22:9E:73:CE:6B:B1:96:D6:5C:0B:EF:11:95:60:65:7A:37:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:3e:2d:59:9b:3d:bc:0e:eb:22:46:7a:ec:40:7c:f6:4f:ff:
29:c9:ca:19:a6:2f:dc:89:4e:9c:ed:8b:fb:99:db:76:ed:df:
ca:46:b7:a0:65:87:74:55:01:24:b7:7a:a9:76:a3:7b:43:05:
da:58:ef:cf:5b:72:db:8c:8a:d2:b5:db:e7:35:d7:4f:e4:01:
ed:b2:11:f7:05:22:ff:94:f3:66:43:a0:6c:65:da:ed:36:71:
49:79:8a:0c:3d:4a:82:51:c8:8c:d3:45:c3:57:7e:e3:b6:34:
77:b4:2f:26:e2:bc:b9:94:36:5d:77:f1:ce:7d:63:8d:8d:36:
95:3f:06:6f:6b:40:ff:0a:2b:d8:f9:a7:02:fc:c8:ae:33:94:
50:5d:05:8f:9b:1f:90:8e:c7:3b:ee:e0:df:f0:a6:19:17:61:
59:48:55:55:85:d5:3d:3c:9c:ec:a4:c8:7b:7a:3b:1c:96:1c:
04:99:1b:71:54:27:fb:ec:73:43:ff:e0:bb:93:38:41:20:bd:
85:f4:69:00:53:2d:9a:5e:70:6d:99:a5:8b:9c:51:fc:d0:a7:
92:ab:8a:2d:c3:20:49:3c:09:49:71:00:30:11:40:a8:4d:50:
e4:0b:c6:42:c1:db:63:f5:cd:a3:c1:bd:f0:c1:16:90:cb:ca:
47:2c:67:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:32 2026 by rpki-client