Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
File: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft (raw, json)
Hash identifier: jJSZn0vMrOUKOGL8K/U2QSjA/vpq2ekuIU3nVprJuMg=
Subject key identifier: CA:C9:FD:DF:B4:88:67:34:9C:5A:5D:45:6F:90:C0:3E:1C:43:A7:C6
Authority key identifier: C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6
Certificate issuer: /CN=c53b29170b56a84241f4b84fd4daff0836d503c6
Certificate serial: 019D26284D7AFB32EF1F462843135CA845CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
Manifest number: 0C71
Signing time: Wed 25 Mar 2026 18:01:08 +0000
Manifest this update: Wed 25 Mar 2026 18:01:08 +0000
Manifest next update: Thu 26 Mar 2026 18:01:08 +0000
Files and hashes: 1: QehD96f5TABcvSMwJKFdikzIbO8.roa (hash: SRLpbEp6q6uyhKVlw7Pt60kWZXK8snPed5qV+0O6aV8=)
2: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl (hash: pQ+6qH7ZqNuF+RVDGqCPnRTvKTXk5hNxV1rIgB8ITwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:4d:7a:fb:32:ef:1f:46:28:43:13:5c:a8:45:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b29170b56a84241f4b84fd4daff0836d503c6
Validity
Not Before: Mar 25 18:01:08 2026 GMT
Not After : Mar 26 18:01:08 2026 GMT
Subject: CN=cac9fddfb48867349c5a5d456f90c03e1c43a7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8c:77:b1:ec:b1:2e:8d:71:db:92:4e:fc:c9:
93:ac:0d:33:c7:d2:70:ec:24:3d:ab:54:0f:0c:62:
6a:92:d9:e7:52:29:83:09:97:e5:d3:c7:1c:2a:c1:
61:6d:ac:b3:46:54:02:d5:11:1b:08:e6:57:3b:4f:
da:8b:cd:f0:7d:64:89:e9:ef:32:e1:6a:22:bc:6d:
5f:f3:e1:78:32:a5:e9:1e:eb:50:64:a3:2b:0f:3b:
8c:a8:09:8b:92:25:1c:4f:d6:a3:b2:04:bd:ec:62:
ab:db:23:00:6e:3a:59:fb:36:1e:d5:2a:07:9f:ed:
63:8e:9c:6b:be:81:c8:cd:b9:b0:e5:ed:0e:12:4a:
1b:82:e7:33:bb:ce:f1:85:0b:f2:7c:55:3a:5a:68:
01:aa:50:00:d0:e0:73:fc:e7:94:09:2a:e8:b9:5a:
26:60:9c:a5:00:4f:c8:a0:8d:43:f8:81:7d:96:1d:
e7:2e:7a:a4:b2:be:2e:d2:68:a2:a9:92:fa:fb:d2:
50:ea:0b:37:b6:af:7f:98:d5:57:fd:11:9c:08:1c:
bb:9f:6f:0e:f2:0b:32:6c:1e:0a:8c:7e:87:66:52:
cf:40:ce:f7:e9:00:71:80:10:2f:ff:64:af:4b:d2:
49:13:84:42:67:7f:2d:8b:46:3b:e9:75:e0:cc:84:
29:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C9:FD:DF:B4:88:67:34:9C:5A:5D:45:6F:90:C0:3E:1C:43:A7:C6
X509v3 Authority Key Identifier:
keyid:C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:77:7d:15:61:f3:07:44:9c:98:61:61:0d:b4:42:a7:68:20:
d9:ed:be:a5:87:76:e4:5b:9c:a1:e1:82:58:a1:14:ce:37:69:
7b:4d:55:9b:ee:7f:df:8a:7c:c7:85:e4:24:82:95:fe:d3:85:
d2:38:4e:af:a3:38:f7:7e:a1:be:86:ad:9e:af:e4:0c:33:45:
f0:5f:84:51:51:99:ca:4e:06:5f:cf:83:6d:ce:e4:a5:5f:36:
75:65:ef:b6:4a:09:98:62:fd:25:3b:9a:d7:4d:e5:02:50:c9:
ed:b4:e2:b7:b9:e4:2a:13:f4:99:34:fe:71:09:13:aa:3b:97:
69:b7:de:8c:92:4e:c2:ad:00:48:b9:d8:ff:27:2f:4c:5b:ec:
8a:70:6d:3d:10:6b:34:be:a0:24:89:1c:04:5e:c5:8d:4d:62:
d4:d5:7f:a7:c1:f3:a5:82:5a:a5:60:0c:34:21:9b:f8:d9:aa:
61:a3:ab:d9:3a:fd:cc:0a:df:49:8a:37:ca:d6:b9:0c:36:10:
42:36:35:3d:39:a3:1c:c1:64:1e:59:c2:70:42:7d:fe:ff:64:
e9:a7:15:0a:a7:6e:11:d3:dd:1d:52:32:da:21:48:0e:0a:ca:
b1:27:bb:b8:e8:74:19:ad:3c:f1:3c:c7:b7:c3:3b:f7:ec:70:
86:58:c8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:20:18 2026 by rpki-client