Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
File: xD5aLPbSgBXbyqKFDSATs2XkyTE.mft (raw, json)
Hash identifier: gl9pPAI6dbfinIIa84eHbEgdlbBU5DhHulUf9KCF/50=
Subject key identifier: B6:F4:2B:5D:FE:6A:B7:D7:5C:4A:61:3C:C0:67:D0:74:81:37:1D:85
Authority key identifier: C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31
Certificate issuer: /CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931
Certificate serial: 019CAB34A720BF03FADDE3C27F417B093E7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
Manifest number: 0641
Signing time: Sun 01 Mar 2026 21:01:20 +0000
Manifest this update: Sun 01 Mar 2026 21:01:20 +0000
Manifest next update: Mon 02 Mar 2026 21:01:20 +0000
Files and hashes: 1: gW00o8n4Rs81BAgnMAtJNPDGHdU.roa (hash: SSNtGXPA/36/YiPMJlKvxQTbaar7XDaEXBXVj0gHR90=)
2: xD5aLPbSgBXbyqKFDSATs2XkyTE.crl (hash: 1AvQiUxJSQBj8+Yo5xaIIwUBhYCf3Ra8K4f4flQ/4Hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:a7:20:bf:03:fa:dd:e3:c2:7f:41:7b:09:3e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931
Validity
Not Before: Mar 1 21:01:20 2026 GMT
Not After : Mar 2 21:01:20 2026 GMT
Subject: CN=b6f42b5dfe6ab7d75c4a613cc067d07481371d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1e:82:1e:20:45:80:0d:b2:75:90:69:0e:74:
75:f8:a2:74:27:d0:bb:35:db:20:34:f2:e7:c4:d6:
6f:bc:ae:13:b3:1c:33:40:6a:f2:ae:ae:61:64:09:
07:4f:c9:01:7a:be:df:4a:e4:b2:13:6f:47:e8:23:
33:cd:1c:96:1a:34:0a:e7:e0:31:d8:2b:90:f8:b7:
da:41:fe:9a:39:3b:99:b4:1c:71:8e:8f:7c:88:b4:
ad:2b:f5:f0:c1:34:24:c6:73:de:87:23:42:57:7e:
4b:41:71:77:96:85:dd:a6:8f:25:e2:56:1e:89:16:
e4:f6:61:ef:d2:e4:3b:2f:fd:ba:4b:9f:d2:a2:27:
38:50:55:3d:d3:18:a9:b7:5d:40:5d:5f:0a:b6:ab:
4e:3a:44:59:ad:64:91:2e:65:d4:63:e1:73:9d:dc:
7b:33:72:f2:1a:90:00:1c:20:9b:23:11:16:f0:18:
b7:24:fe:23:d8:ef:27:ec:d2:d7:7c:7d:5e:d1:94:
27:ab:0d:f0:55:4a:40:a6:de:42:c0:9e:51:03:26:
b6:5e:28:10:6c:c8:d5:34:84:a2:ca:62:d5:9f:f9:
3b:7d:3e:dd:93:d1:b4:ae:34:77:ef:26:b5:bf:d3:
42:53:2a:eb:61:55:4e:76:54:9e:b5:7c:ff:5e:51:
9c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F4:2B:5D:FE:6A:B7:D7:5C:4A:61:3C:C0:67:D0:74:81:37:1D:85
X509v3 Authority Key Identifier:
keyid:C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:25:47:c4:86:fd:06:8a:14:f7:96:ee:ee:1f:5b:b3:c6:a6:
41:89:d5:0d:44:86:b5:18:3b:0e:4b:4e:50:ea:78:9e:cb:e2:
ba:50:4c:fd:d9:5e:7f:98:ea:d6:b6:43:4b:50:71:c0:96:99:
c9:b6:8b:ad:57:0d:02:16:6f:5d:6a:b2:1a:e3:07:72:77:d2:
73:47:cf:6d:05:45:87:63:2c:00:f8:b6:23:51:9c:98:12:28:
a7:93:95:0a:33:46:92:2b:ef:7a:54:01:99:53:d3:65:eb:05:
ed:56:61:02:72:4a:f0:54:9e:28:b9:3f:d4:f0:45:0b:4d:02:
bf:06:7a:36:0f:64:f2:e6:1e:42:53:59:91:a4:94:f3:f2:eb:
90:9b:5c:6f:48:a1:6a:d9:db:b6:fa:3c:04:50:08:9c:cc:34:
97:24:76:97:1e:17:59:42:70:c5:0d:9c:58:65:cc:e2:9b:5c:
a6:b6:14:2a:b1:2a:ca:ef:9c:1b:de:fc:d7:de:5c:75:1f:62:
a7:59:31:01:c4:14:bd:12:10:cb:f3:58:0d:3a:43:1c:90:f5:
04:e7:73:be:12:36:e2:5e:55:28:50:2f:07:d6:09:3a:99:e1:
64:4a:52:99:b2:f4:a1:17:d2:62:17:02:e1:de:d3:ec:1c:ce:
f7:40:96:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:29 2026 by rpki-client