Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c0bfe8-9a3e-4000-adf8-ff287c062b61/1/xFpgEca3YVjA9sXCctgtgCf4j6M.mft
File: xFpgEca3YVjA9sXCctgtgCf4j6M.mft (raw, json)
Hash identifier: 6RH9nWWvqjAP14q7V2+sfMTBVYlJ00kdOhlRZF+45g4=
Subject key identifier: 2B:8A:63:48:E8:21:30:83:CD:46:AA:EF:04:94:D7:A0:88:CE:98:96
Authority key identifier: C4:5A:60:11:C6:B7:61:58:C0:F6:C5:C2:72:D8:2D:80:27:F8:8F:A3
Certificate issuer: /CN=c45a6011c6b76158c0f6c5c272d82d8027f88fa3
Certificate serial: 019D2884675A1D2DE20D4ED05DA44023D489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFpgEca3YVjA9sXCctgtgCf4j6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0bfe8-9a3e-4000-adf8-ff287c062b61/1/xFpgEca3YVjA9sXCctgtgCf4j6M.mft
Manifest number: 0173
Signing time: Thu 26 Mar 2026 05:00:58 +0000
Manifest this update: Thu 26 Mar 2026 05:00:58 +0000
Manifest next update: Fri 27 Mar 2026 05:00:58 +0000
Files and hashes: 1: spfof1qfNrG8DP4YucletEfRpvg.roa (hash: 0XwtNa6D8NCr9C81FgWMcj2pj/49mCSFu4hQMqHa/Lc=)
2: xFpgEca3YVjA9sXCctgtgCf4j6M.crl (hash: qxIQqHbIZuYhcT4o/a921aLi4yIVZ2tEJsa6/GJAN6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0bfe8-9a3e-4000-adf8-ff287c062b61/1/xFpgEca3YVjA9sXCctgtgCf4j6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/c0bfe8-9a3e-4000-adf8-ff287c062b61/1/xFpgEca3YVjA9sXCctgtgCf4j6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFpgEca3YVjA9sXCctgtgCf4j6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:67:5a:1d:2d:e2:0d:4e:d0:5d:a4:40:23:d4:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45a6011c6b76158c0f6c5c272d82d8027f88fa3
Validity
Not Before: Mar 26 05:00:58 2026 GMT
Not After : Mar 27 05:00:58 2026 GMT
Subject: CN=2b8a6348e8213083cd46aaef0494d7a088ce9896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cf:0b:b0:e1:13:79:37:74:25:bd:7c:7c:9a:
03:79:81:60:6c:f1:14:34:79:cd:7a:20:65:67:f0:
15:5a:08:ef:f1:f9:ff:d8:67:c2:f1:30:aa:ee:23:
fe:25:3f:98:d7:da:93:02:b1:ed:3f:eb:cb:fc:5a:
91:6b:6e:3f:02:fd:fd:a7:46:34:fb:6b:1a:da:8e:
4e:44:58:0a:cf:e8:58:ca:94:ef:fd:a3:0c:22:90:
68:fb:41:72:80:fb:6c:9d:64:1a:d0:d8:82:68:d4:
ce:5c:fc:cb:e4:00:53:70:35:72:fd:25:73:ba:0b:
e0:34:a4:f2:da:99:b7:42:d3:6e:2b:e5:3c:b1:0e:
47:5d:b4:b2:cf:91:31:5d:7b:4b:10:8a:d1:8f:58:
b1:17:25:6e:c7:3c:2c:d6:09:e9:5c:0c:6d:cd:60:
2c:85:e6:76:b3:4a:f8:5f:44:67:d6:dd:53:a8:fd:
21:93:bf:7e:f4:55:5d:f9:98:cf:89:2e:e6:2d:fb:
5b:cc:dd:67:27:7d:f2:bc:97:35:b4:b1:4c:e2:8e:
5f:fe:52:c3:cb:72:9d:11:44:3d:7f:86:9b:52:85:
4b:3f:06:53:9a:4b:2e:57:1e:db:e4:7e:a9:a0:5f:
27:b9:8d:74:e2:24:8d:44:b7:9c:73:4b:a2:6c:66:
3e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8A:63:48:E8:21:30:83:CD:46:AA:EF:04:94:D7:A0:88:CE:98:96
X509v3 Authority Key Identifier:
keyid:C4:5A:60:11:C6:B7:61:58:C0:F6:C5:C2:72:D8:2D:80:27:F8:8F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFpgEca3YVjA9sXCctgtgCf4j6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0bfe8-9a3e-4000-adf8-ff287c062b61/1/xFpgEca3YVjA9sXCctgtgCf4j6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0bfe8-9a3e-4000-adf8-ff287c062b61/1/xFpgEca3YVjA9sXCctgtgCf4j6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:39:0b:d1:95:5b:3f:df:8e:d1:2d:81:e1:2d:42:e9:cb:53:
07:74:b6:6b:14:ed:61:e0:99:e0:29:5e:54:20:60:a9:af:ba:
65:9b:d6:fd:d7:95:b9:6a:b6:bd:3c:e8:bb:69:45:24:82:dc:
2e:85:65:8f:3a:35:0b:73:38:3b:b5:16:ab:e0:b3:08:ca:3c:
9e:1b:aa:4f:4b:05:5c:66:f3:37:3c:5e:56:5f:61:7e:87:97:
a0:2e:86:f1:f8:df:3a:41:da:6b:00:f6:14:7c:80:29:ed:f4:
72:76:f4:0b:79:2e:53:5b:d8:d9:1d:e6:e2:de:ae:a7:ad:ae:
97:cf:15:50:78:a1:79:73:98:2f:26:0f:7e:ca:a1:22:99:c6:
ea:6b:3b:a3:04:c8:a3:20:86:56:de:fa:0a:7e:f7:a4:5c:c9:
7c:e5:24:77:10:36:0b:ad:60:29:69:5b:d1:45:10:4d:20:60:
fb:66:77:53:a6:ba:b1:b2:a7:38:1c:aa:22:75:f4:e1:67:09:
7e:63:2b:5e:55:24:00:86:1a:1c:2c:4e:e2:5a:41:4f:30:11:
57:20:7a:55:c0:f0:28:77:fa:f3:32:34:4b:71:21:31:8b:3f:
8a:a5:be:ad:c0:2f:bc:cf:87:81:74:7d:28:fb:ca:50:9d:8b:
2e:74:22:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:50:35 2026 by rpki-client