Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft
File: x67yqz8unZrAH3J_cwr33x0EGA8.mft (raw, json)
Hash identifier: srPNN3Ts3YC4G8EZDpSyFGLWU73/kKXan8Xwl0atdZ8=
Subject key identifier: 8A:D3:64:AE:A5:F4:09:87:62:FD:5A:72:C9:C5:20:7E:FC:26:CB:06
Authority key identifier: C7:AE:F2:AB:3F:2E:9D:9A:C0:1F:72:7F:73:0A:F7:DF:1D:04:18:0F
Certificate issuer: /CN=c7aef2ab3f2e9d9ac01f727f730af7df1d04180f
Certificate serial: 019D25BA49C78104B6EFDB112FD8C09D34F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft
Manifest number: 179C
Signing time: Wed 25 Mar 2026 16:00:58 +0000
Manifest this update: Wed 25 Mar 2026 16:00:58 +0000
Manifest next update: Thu 26 Mar 2026 16:00:58 +0000
Files and hashes: 1: 832xdcyaMQ6PQMu-wsVkkpXVYxo.roa (hash: nHOliUKQ6iyBnB9SWzQjh04ItWv0KdS+AY354/7+P9s=)
2: x67yqz8unZrAH3J_cwr33x0EGA8.crl (hash: eITtsmzP8MPIZRHe218HBc5JT3EcRh3P8NykNtwSOKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:49:c7:81:04:b6:ef:db:11:2f:d8:c0:9d:34:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7aef2ab3f2e9d9ac01f727f730af7df1d04180f
Validity
Not Before: Mar 25 16:00:58 2026 GMT
Not After : Mar 26 16:00:58 2026 GMT
Subject: CN=8ad364aea5f4098762fd5a72c9c5207efc26cb06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5c:c2:d5:8f:2e:6b:eb:fc:7c:2d:2d:26:c5:
50:51:b7:99:d5:a7:be:6e:71:e5:4c:8f:97:e5:2a:
6f:36:dc:63:a2:65:e4:4e:05:32:34:c8:6c:6f:a6:
b3:3a:53:df:9e:96:55:f5:ad:95:a6:55:45:a3:5b:
17:0a:c6:cb:92:19:a5:be:60:3d:89:20:c9:db:69:
20:61:cc:cf:9a:d8:8f:7f:04:2b:5b:3f:19:86:0e:
80:4c:00:c7:60:a8:3c:04:99:44:fe:a9:02:46:98:
e7:9e:e1:fb:ab:35:ba:41:ea:fc:8e:c9:2d:05:36:
66:6b:21:fa:e7:81:50:e7:06:38:01:6a:f2:9e:4b:
d8:a8:05:11:2a:8a:6b:d9:95:ef:3a:6e:4f:ab:69:
80:e8:83:ec:7a:66:c2:ae:2b:b6:4e:a8:b1:be:f2:
b8:41:d8:e3:b6:92:1a:b7:f7:e3:64:a0:4e:fe:04:
bc:e1:3e:df:ef:29:d5:d9:35:56:e7:54:5d:40:41:
d6:1e:88:1a:05:bc:11:54:d4:05:9d:ef:86:ce:ec:
07:4d:f0:c9:66:77:2c:38:dd:d9:74:98:56:05:10:
78:91:65:58:18:92:4f:f4:46:7c:fe:96:db:b5:ce:
f2:3a:a0:a8:18:f8:f5:b2:b8:4d:20:d2:4a:0c:00:
09:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D3:64:AE:A5:F4:09:87:62:FD:5A:72:C9:C5:20:7E:FC:26:CB:06
X509v3 Authority Key Identifier:
keyid:C7:AE:F2:AB:3F:2E:9D:9A:C0:1F:72:7F:73:0A:F7:DF:1D:04:18:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ad:61:15:ff:2a:ac:4c:a9:41:ae:2a:b7:4b:ba:d3:b6:12:
ea:64:5f:a8:72:24:7d:10:33:36:f5:d0:6a:0f:96:02:d0:58:
3b:63:ed:b7:b7:47:dd:6b:93:5d:2f:4c:8a:60:02:60:36:52:
c1:ed:64:b2:cb:9d:3f:94:f5:76:02:01:fb:cd:bf:59:96:34:
19:1c:44:cf:57:97:0b:c7:16:81:c5:e4:c9:fb:67:10:08:9d:
25:84:c1:9a:4c:fd:cf:41:7f:3c:e1:f2:1d:70:3d:9c:01:fc:
82:34:50:b2:e9:4c:b3:b0:5d:69:64:ac:90:e7:a0:0f:f7:36:
f7:9f:21:58:74:c6:1e:21:17:40:85:37:92:ac:0b:f5:fc:d7:
4f:b6:7f:9b:c7:b0:c5:f1:d5:95:62:14:3e:18:42:fd:29:2a:
23:7a:c9:a1:3a:c6:bc:59:5a:54:d3:ab:5f:ef:ae:d1:89:5a:
ee:58:da:9b:1e:b0:c3:92:3c:35:b3:a7:71:52:b9:17:3a:49:
ed:10:ff:9f:4e:2f:e4:55:1d:16:59:17:31:5d:2e:25:4c:1c:
09:8e:0f:22:bf:12:7a:6f:dd:7a:0f:4d:7c:83:c6:5e:1b:1a:
cf:f5:b6:fc:ba:b6:dc:13:00:d4:b4:a2:66:d1:dd:2a:1d:22:
cb:5e:39:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:43:09 2026 by rpki-client