Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
File: xmCFijitXhG3sYk5KIO8g-trNh0.mft (raw, json)
Hash identifier: Ty03GRoGxlTaXPKSIsPW7L4rVI0IDpp9wDwXK92xZwM=
Subject key identifier: 6C:03:D8:F9:71:54:06:0E:AB:1B:FB:E2:F0:19:28:34:1F:FB:0E:94
Authority key identifier: C6:60:85:8A:38:AD:5E:11:B7:B1:89:39:28:83:BC:83:EB:6B:36:1D
Certificate issuer: /CN=c660858a38ad5e11b7b189392883bc83eb6b361d
Certificate serial: 019CABA20CF0F7080CB0E2ECE252BB66439C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 23:00:49 +0000
Manifest this update: Sun 01 Mar 2026 23:00:49 +0000
Manifest next update: Mon 02 Mar 2026 23:00:49 +0000
Files and hashes: 1: xmCFijitXhG3sYk5KIO8g-trNh0.crl (hash: oyEWAb2DgRo/MFjU+lRAi1lZesKMO6rbdTYhaRZ1Juk=)
2: xpQHQe9JK1CUe7FrE6UQJmb2ot8.asa (hash: 4NpowpxrTh5AKJl4K8wnIP5UZeAISCMu/TY3f9v3FM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:0c:f0:f7:08:0c:b0:e2:ec:e2:52:bb:66:43:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c660858a38ad5e11b7b189392883bc83eb6b361d
Validity
Not Before: Mar 1 23:00:49 2026 GMT
Not After : Mar 2 23:00:49 2026 GMT
Subject: CN=6c03d8f97154060eab1bfbe2f01928341ffb0e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:67:2d:2f:90:08:75:18:93:c4:08:c3:ab:2d:
d3:20:7f:29:8a:08:e3:ae:8e:cd:0d:54:7b:1a:77:
86:d4:31:b1:71:c9:41:19:c3:07:52:b5:f6:9b:28:
b6:7f:6f:84:7f:c4:7c:5d:30:5e:46:52:a5:51:72:
b2:7e:7b:09:c2:ef:aa:e7:6c:61:00:d1:11:dd:28:
30:05:57:d2:86:4a:8e:ff:a3:d7:3e:df:aa:60:07:
bc:67:27:71:4b:77:fd:b8:70:2b:95:b5:41:98:96:
f3:62:91:f3:82:a3:8b:01:85:2b:46:8f:92:d3:61:
f8:be:43:99:1f:58:16:f4:1a:6e:8b:5a:2f:03:3d:
bb:3b:e3:4d:f3:5e:5a:b8:02:bf:1e:32:2b:3c:b0:
d7:e8:6d:74:56:72:e3:af:01:3d:73:97:7c:94:f7:
35:f9:b3:4f:dc:75:56:c3:84:c2:aa:db:92:a6:82:
47:dd:07:d0:b0:60:c7:e5:eb:6d:cb:39:71:44:15:
5b:e6:72:37:c9:80:26:cd:f6:06:6c:ae:5b:ea:53:
74:ab:9d:cb:2c:7a:2d:8b:50:a1:74:52:e8:37:6d:
de:2b:a7:96:a3:69:12:9f:f7:9a:63:b9:db:7c:40:
4a:cf:74:d3:b7:53:a9:c2:7b:1f:eb:15:62:cd:d8:
3c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:03:D8:F9:71:54:06:0E:AB:1B:FB:E2:F0:19:28:34:1F:FB:0E:94
X509v3 Authority Key Identifier:
keyid:C6:60:85:8A:38:AD:5E:11:B7:B1:89:39:28:83:BC:83:EB:6B:36:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:62:d3:b2:eb:f0:cb:82:7b:04:5e:cd:c9:e8:9a:ee:e0:22:
44:2e:c4:a2:bd:ea:ef:04:f3:cd:2f:08:98:96:6e:79:34:f3:
23:4e:42:ec:57:a2:40:69:10:88:5d:ea:52:86:cc:5a:ab:a7:
fc:bf:51:15:aa:4f:b4:63:6f:85:c0:8f:35:5c:b2:04:57:39:
b8:cf:d0:35:b9:03:da:e9:b4:a4:43:fc:ca:39:04:2d:9c:2f:
02:20:1e:be:21:b2:7c:39:b9:26:c1:e2:cf:73:65:ab:f2:b4:
82:46:40:28:fe:5a:18:44:ea:eb:c7:81:82:a8:3a:cf:84:dc:
5d:74:09:74:4c:85:91:0d:2a:01:e0:9e:cb:e3:61:9b:29:7e:
d4:75:c0:dc:cc:f6:b9:90:4a:98:e1:81:d5:16:ad:d6:0d:45:
bf:00:d8:b4:b8:f6:a9:5c:03:86:36:30:44:6e:d3:b2:c5:a8:
ea:53:6a:82:25:4e:80:75:d7:34:fe:59:2c:03:c5:22:b9:89:
cd:ab:e0:15:3b:41:a6:16:03:2b:e7:c1:2d:6f:1f:fc:34:08:
09:b6:07:37:de:3b:ca:bd:17:7a:eb:74:ee:fc:91:61:66:49:
f8:de:84:45:a3:25:fe:20:e9:19:8a:e7:29:7b:a2:fc:be:90:
5f:41:c8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:42 2026 by rpki-client