Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
File: xJ7uJN6rVSARm2o9oEV9OcQGQds.mft (raw, json)
Hash identifier: CfgSIdAPC0Xss8TaztD6H+GBcpbmJR6RKvqG9Ie0faA=
Subject key identifier: 1C:90:4C:3A:E3:C0:E5:23:2E:74:3B:47:B8:2C:8D:3C:43:83:6F:63
Authority key identifier: C4:9E:EE:24:DE:AB:55:20:11:9B:6A:3D:A0:45:7D:39:C4:06:41:DB
Certificate issuer: /CN=c49eee24deab5520119b6a3da0457d39c40641db
Certificate serial: 019CAB6AF0790FACBD1E23A8C37A9FEF1AD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
Manifest number: 116C
Signing time: Sun 01 Mar 2026 22:00:38 +0000
Manifest this update: Sun 01 Mar 2026 22:00:38 +0000
Manifest next update: Mon 02 Mar 2026 22:00:38 +0000
Files and hashes: 1: w_6UCf2xWqx3O-O-dOo2JUNA-Og.roa (hash: fBGvP8lF6sKoiZdNpgR7ynCDnNW1bXWeroCO7zDMZqA=)
2: xJ7uJN6rVSARm2o9oEV9OcQGQds.crl (hash: 1UsOdHhM7i0HVI9gNy5YiIaVjFDl7qzU4Gw63MD47Ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:f0:79:0f:ac:bd:1e:23:a8:c3:7a:9f:ef:1a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49eee24deab5520119b6a3da0457d39c40641db
Validity
Not Before: Mar 1 22:00:38 2026 GMT
Not After : Mar 2 22:00:38 2026 GMT
Subject: CN=1c904c3ae3c0e5232e743b47b82c8d3c43836f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a2:e2:90:dd:35:d0:83:df:2d:4a:fe:7a:77:
03:30:f8:a3:0d:28:53:53:60:b4:cd:4c:7b:ed:a4:
25:82:0f:d0:0a:56:c5:4f:a9:0c:d1:90:9e:29:80:
da:3d:16:17:fd:bd:2a:5a:a2:16:62:bb:8b:0f:71:
ba:56:01:e8:c0:43:ba:fd:d7:97:df:7f:e8:16:23:
b8:c9:66:a8:ba:f5:62:f9:5c:60:df:cb:ef:65:6a:
10:d4:a8:e7:c4:13:c2:12:78:79:d0:dd:2c:e3:7d:
29:fc:27:99:aa:41:3e:54:ba:2e:db:f8:23:7e:fc:
1d:1f:4c:7f:d0:d7:a0:10:4d:d3:40:82:6f:83:ed:
b7:9c:b2:08:fd:5d:46:76:34:88:48:0d:42:c7:bd:
58:83:54:82:60:7a:46:07:17:a2:e7:3e:9e:6f:a6:
08:d6:9e:33:d4:81:a5:e6:5a:2c:57:e1:f8:d4:7d:
3d:52:fb:24:77:ef:12:aa:2e:ec:c4:7b:9f:7a:9d:
06:86:50:c9:89:21:9c:23:ec:5a:b7:02:14:dc:d2:
e5:e4:8d:7a:c3:d9:2f:16:75:2f:08:d6:28:76:c8:
0c:47:32:fc:4e:62:37:1d:19:3c:8c:2a:26:b7:99:
d3:d2:18:8b:ad:cd:59:16:35:c9:c9:b3:2c:6f:7c:
39:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:90:4C:3A:E3:C0:E5:23:2E:74:3B:47:B8:2C:8D:3C:43:83:6F:63
X509v3 Authority Key Identifier:
keyid:C4:9E:EE:24:DE:AB:55:20:11:9B:6A:3D:A0:45:7D:39:C4:06:41:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:54:14:3f:c8:30:6e:d9:70:f4:6b:13:a8:72:ad:4f:b2:c0:
c5:5d:11:1f:81:0d:a9:7e:85:d5:6b:87:f4:33:1d:1e:47:14:
59:53:da:f4:56:ea:55:d6:5d:0f:c4:0f:03:8b:c1:bf:0b:66:
c0:4f:0e:d5:c4:10:5e:23:94:4c:36:59:99:d2:a2:5b:10:7e:
9c:5d:05:e1:e5:3c:14:ae:a1:44:65:af:39:ba:8f:50:4a:18:
e5:4f:52:95:69:bd:48:24:14:b1:04:ec:8f:9a:75:9c:0d:de:
3b:52:e2:77:9a:3b:b0:47:28:5a:72:e1:d6:8f:68:d9:a6:03:
26:a0:f0:94:19:86:ec:1d:00:2c:1e:70:fc:5a:3d:a2:8c:50:
f7:06:fb:41:95:ab:16:93:a6:f9:1b:18:c1:30:36:54:bf:57:
5b:95:47:af:2f:fb:a6:59:88:f4:34:ff:15:e0:1f:bc:46:da:
9b:45:86:0c:60:50:60:61:39:c7:1d:cd:27:4c:1c:2e:60:a9:
5d:ab:5d:60:b3:4d:4d:ef:b0:99:00:a1:e7:8b:d6:ad:24:b2:
54:e7:7a:ec:f4:fe:81:b2:6e:43:d5:1c:e8:b0:05:09:31:6c:
a5:f4:23:57:65:c6:ab:1a:db:6d:3d:5d:34:40:96:4a:69:2a:
be:d1:3d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:38:23 2026 by rpki-client