Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft
File: xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft (raw, json)
Hash identifier: Ez+d/+4F+aTBZP21ZiSryaO7AzRJdTGo6qgsoJMnrzI=
Subject key identifier: A3:8B:2F:1E:AE:06:15:E7:09:8C:0F:B3:E4:DB:CA:08:72:66:B5:76
Authority key identifier: C4:A0:F3:11:09:84:CC:FB:F5:29:98:0B:6D:41:6D:DD:4E:1A:88:25
Certificate issuer: /CN=c4a0f3110984ccfbf529980b6d416ddd4e1a8825
Certificate serial: 019CAC0FD1B11A6D649523AE8B5D017EA755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKDzEQmEzPv1KZgLbUFt3U4aiCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft
Manifest number: 062F
Signing time: Mon 02 Mar 2026 01:00:43 +0000
Manifest this update: Mon 02 Mar 2026 01:00:43 +0000
Manifest next update: Tue 03 Mar 2026 01:00:43 +0000
Files and hashes: 1: 1-ujLZVA2eD9Q0LVsUuabSgXoS8I.roa (hash: eGVzw06cOI2ubQS+bEsoP6kSWSoInZkg8QfLxOIOYxE=)
2: xKDzEQmEzPv1KZgLbUFt3U4aiCU.crl (hash: v1svjTWG3J8INYuJw4An/NIVLuYVZYcHbBpb0n9xCbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xKDzEQmEzPv1KZgLbUFt3U4aiCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:d1:b1:1a:6d:64:95:23:ae:8b:5d:01:7e:a7:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4a0f3110984ccfbf529980b6d416ddd4e1a8825
Validity
Not Before: Mar 2 01:00:43 2026 GMT
Not After : Mar 3 01:00:43 2026 GMT
Subject: CN=a38b2f1eae0615e7098c0fb3e4dbca087266b576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:72:04:8d:53:7a:ed:f9:8d:f5:06:a7:bb:11:
5c:c8:50:c3:e3:21:e7:3a:b5:c3:4f:b2:f1:10:db:
53:0c:a8:63:7d:5f:d6:28:92:1d:21:9a:bb:e4:2c:
2d:69:68:de:d0:00:01:2b:d8:18:8c:17:cd:1a:66:
5d:26:b3:fa:85:5c:09:56:36:54:52:01:9b:ff:d0:
5f:db:23:3f:90:60:f3:ad:1e:9e:28:e8:e7:4d:6e:
72:d4:08:67:e9:ea:8f:3e:c6:e8:a6:e2:b8:01:9b:
85:0a:d4:ce:d4:ab:19:84:14:27:31:2c:17:39:1e:
ba:03:fe:31:77:58:01:1f:f0:f9:55:76:93:f3:29:
51:83:5e:a7:97:b8:d0:af:b1:fd:e5:29:4a:2e:90:
e8:d8:33:08:5f:f7:4a:22:a4:67:1e:aa:a5:42:ae:
c7:08:25:9f:fb:6d:17:3f:39:4c:44:f9:b8:90:df:
a2:9d:d5:47:d9:0b:08:e2:b2:8a:5c:8e:c4:a8:7a:
51:03:ed:1f:c1:17:28:10:cc:43:fb:1a:66:fb:ed:
0e:c9:a8:0b:57:86:1b:78:a0:3b:76:e3:55:86:8b:
b4:a2:3c:4b:f3:db:ab:dc:be:85:b2:70:9c:5e:2f:
1a:c3:d3:38:0b:e5:e3:89:be:81:ad:2a:a7:9b:67:
ae:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8B:2F:1E:AE:06:15:E7:09:8C:0F:B3:E4:DB:CA:08:72:66:B5:76
X509v3 Authority Key Identifier:
keyid:C4:A0:F3:11:09:84:CC:FB:F5:29:98:0B:6D:41:6D:DD:4E:1A:88:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKDzEQmEzPv1KZgLbUFt3U4aiCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:70:97:f8:97:1b:e7:d3:1c:c3:92:7e:8c:19:95:73:5a:d9:
bd:bc:e6:41:dd:70:04:b8:54:2c:75:5c:63:9d:5a:3a:d6:0c:
35:f2:85:d6:f8:ed:a5:93:08:c3:7b:5a:d1:25:d9:17:a8:b1:
91:5d:35:64:9c:d1:41:e4:07:f9:8a:98:02:a7:c5:cf:1e:d1:
c7:73:85:89:75:fc:c5:0f:2d:b7:ba:36:55:75:f8:b1:ae:f9:
b3:f0:06:10:70:20:65:3b:ff:81:c5:5e:da:85:87:41:0c:a6:
61:ef:cc:81:c6:80:bc:99:a8:cc:f2:fb:95:1e:91:75:4c:da:
43:23:3c:5e:69:21:ee:05:c4:d1:bd:20:da:43:5f:04:7e:f1:
3e:3f:64:a1:b5:38:9a:63:44:36:97:c2:55:4e:55:dd:16:f0:
f7:b8:40:de:5b:38:56:00:bd:f2:47:c8:31:2c:5c:4b:2c:a4:
88:13:a4:b6:19:b1:e5:a9:99:dd:8c:d8:42:96:4e:6b:1b:aa:
b7:40:09:66:19:41:91:64:0c:e6:ec:d7:06:6d:c0:3e:97:c4:
30:9a:d1:13:8b:c7:71:82:1e:8f:bb:8b:72:1c:15:f2:b6:3c:
e8:76:1e:0f:c5:a8:2b:e6:9a:b4:ab:a7:6a:1e:68:af:ee:f6:
17:f1:d1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:32:02 2026 by rpki-client