Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
File: xPiLXG5RFuUM8rW99D6HIPHYxg8.mft (raw, json)
Hash identifier: rOxOJ5/9obwYz9eEUiic+k1mZ1LdcmypM/Q6kzzak3g=
Subject key identifier: 16:67:0D:4C:CA:69:8E:DA:9E:2D:00:62:1D:4C:AD:B4:94:B1:1C:73
Authority key identifier: C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
Certificate issuer: /CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Certificate serial: 019CAEA3C9CA5F1F05D9BF188FCE71FEBC59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
Manifest number: 12F7
Signing time: Mon 02 Mar 2026 13:01:35 +0000
Manifest this update: Mon 02 Mar 2026 13:01:35 +0000
Manifest next update: Tue 03 Mar 2026 13:01:35 +0000
Files and hashes: 1: mTu4D2NDzTOT8K2goxWO28e3uHs.roa (hash: GvYWUuN8wULXb3KaEycrU3j4EUGrHZPXFPqLCC21It8=)
2: xPiLXG5RFuUM8rW99D6HIPHYxg8.crl (hash: umpf4sKBYpSxw+315CzguMT2Mdz5wLeXKDAUfVwKvAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:c9:ca:5f:1f:05:d9:bf:18:8f:ce:71:fe:bc:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Validity
Not Before: Mar 2 13:01:35 2026 GMT
Not After : Mar 3 13:01:35 2026 GMT
Subject: CN=16670d4cca698eda9e2d00621d4cadb494b11c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:39:aa:9a:ad:79:6f:fb:df:cf:05:a6:5d:ac:
e7:43:67:03:94:c0:2a:4a:a7:2e:2a:f8:ed:2d:f8:
42:9e:d7:4a:6c:34:a5:90:7e:b3:42:70:42:b1:d5:
50:ca:ff:2c:3a:ee:bc:71:46:98:6e:0e:1d:79:a2:
86:a1:86:56:2f:ed:0d:31:ee:73:95:9d:15:5c:ff:
dc:c5:4b:67:bc:a5:8a:5c:0e:0a:63:b4:d7:a5:8c:
16:c7:2b:9a:02:77:c9:b3:5c:0e:89:ff:63:a6:78:
3b:b8:6f:61:5c:08:14:f9:23:1a:b5:56:4e:25:45:
20:2f:c2:e9:ad:33:bd:c2:de:da:40:bd:c1:40:6d:
a3:fc:9e:aa:3e:f7:36:f1:2d:95:90:9d:51:f9:61:
7b:e8:fa:d6:79:52:ce:dd:a8:8d:4c:17:f0:5d:01:
ce:81:d6:e7:ee:23:f4:e7:d2:6c:9b:c9:1f:66:61:
93:ac:e7:ca:37:2e:0f:ea:94:57:c3:3f:33:82:bf:
e9:af:1c:5e:24:89:09:64:b4:a3:46:93:9c:5c:b8:
7e:95:47:74:1a:ce:32:ca:c2:9c:93:89:81:1c:28:
d8:04:14:88:e6:0f:46:d6:11:47:ee:31:a5:39:fc:
12:62:86:12:67:df:e2:12:64:7a:06:c6:0a:5c:48:
9c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:67:0D:4C:CA:69:8E:DA:9E:2D:00:62:1D:4C:AD:B4:94:B1:1C:73
X509v3 Authority Key Identifier:
keyid:C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:13:d9:9e:07:aa:aa:a2:35:9e:d2:8d:f3:08:5f:8f:39:a5:
2b:9e:74:7a:ce:17:50:e3:f2:84:38:95:c3:0d:a1:e5:02:98:
fd:cf:5b:33:76:b5:d0:06:86:f5:7c:1c:95:2d:0c:6d:a3:9d:
df:dc:04:64:c6:be:30:86:d3:bb:38:b6:0f:5d:cb:13:17:c3:
26:e3:e8:61:c2:7c:e4:ea:5d:2f:9e:1f:32:db:7c:d3:86:0b:
1f:75:f5:54:49:39:96:67:ab:eb:16:c9:cf:cf:d8:e1:42:b3:
48:3f:f6:6f:9a:b1:10:bc:1c:3b:84:61:5f:97:af:65:90:fe:
a0:62:3f:03:96:8e:c1:78:b4:26:7d:f1:8e:61:f8:91:fe:9e:
43:f5:17:89:a2:7f:e9:7a:e1:79:8c:c6:f3:a1:6b:24:e3:e4:
48:78:b8:d0:fa:2a:ce:d5:6e:ea:df:00:09:d5:a9:1e:5a:20:
c6:2f:11:85:b1:b3:b0:9a:54:a1:72:de:3e:1a:18:72:3a:7d:
ae:87:7f:55:8f:58:72:ad:2f:f1:cc:82:1a:f9:62:1f:07:8f:
46:e2:84:dc:24:4d:0f:da:0a:9a:74:9f:9d:e9:3b:54:6a:32:
05:24:d8:cb:1d:e0:69:3b:61:ef:b0:0e:34:25:54:27:e1:f5:
22:af:3e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:07:27 2026 by rpki-client