Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
File: X_n07MXQUHYsVWmEQPheqW9zMPI.mft (raw, json)
Hash identifier: HcrfCvqqa2dQ5G2GrWJ0aRt/IOO3QonQ42UUlG9vzvk=
Subject key identifier: 37:3D:11:8E:8E:4C:C1:7D:55:DC:65:FA:9E:BC:E5:64:C1:58:71:A9
Authority key identifier: 5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2
Certificate issuer: /CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2
Certificate serial: 019CACEBECC803F9C30755799B5CF5010345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 05:01:08 +0000
Manifest this update: Mon 02 Mar 2026 05:01:08 +0000
Manifest next update: Tue 03 Mar 2026 05:01:08 +0000
Files and hashes: 1: X_n07MXQUHYsVWmEQPheqW9zMPI.crl (hash: ODu9J1cu0f5fyGHxkWfuZLkrp/W40crxfW5LvePiJR0=)
2: cF9T-jxoP9kV3otKbs6wprWqe14.roa (hash: By9z72uPVXpGvtlPCEnMJBu0BtKh3WPCweFaBQSyntA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:ec:c8:03:f9:c3:07:55:79:9b:5c:f5:01:03:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2
Validity
Not Before: Mar 2 05:01:08 2026 GMT
Not After : Mar 3 05:01:08 2026 GMT
Subject: CN=373d118e8e4cc17d55dc65fa9ebce564c15871a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0c:74:c6:b4:b1:72:6e:aa:6f:8f:ab:ea:42:
b8:bf:2e:77:38:48:9c:3f:42:ff:ae:48:e7:b2:13:
8e:73:47:25:0a:df:16:e2:1d:d1:26:73:07:5d:44:
e5:ca:d9:8e:e4:da:46:c1:0d:78:06:f6:f2:ba:96:
ef:a6:c3:d3:1e:76:cc:c0:e9:8c:14:10:77:2b:56:
ae:ee:3d:ea:2b:ba:2a:9d:d9:e1:6f:34:69:34:23:
59:f6:49:87:8f:3b:af:0c:05:12:99:c9:24:43:fc:
9b:3a:92:9a:42:22:da:6a:eb:ee:3e:a5:c6:b9:b5:
90:dd:99:1d:25:23:8e:d5:6f:7e:e5:49:7f:ef:0b:
2c:73:0d:df:bc:5c:56:0b:07:ef:7d:9d:de:38:15:
fa:97:21:32:35:f8:62:ba:89:99:f0:6c:87:fb:32:
91:bb:99:15:cf:40:92:ee:66:7e:a5:18:be:c5:31:
00:bf:05:42:21:9c:a5:0e:87:bc:75:97:c6:a5:b9:
ab:1e:84:39:ed:8e:e9:87:25:c4:b5:5f:35:a7:d2:
f2:06:72:4c:f6:2e:d0:48:af:2f:a9:1c:a0:16:2b:
29:19:68:0d:4f:98:68:c8:d3:ad:b4:36:04:8d:a6:
17:17:9d:25:43:50:4a:8c:c9:cb:dd:1a:30:05:68:
1c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3D:11:8E:8E:4C:C1:7D:55:DC:65:FA:9E:BC:E5:64:C1:58:71:A9
X509v3 Authority Key Identifier:
keyid:5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:11:8d:85:c3:94:e5:9e:25:ce:c8:76:61:fa:ca:4f:b8:a9:
a1:e3:a4:3c:98:c3:77:d1:ee:a7:50:b9:c2:79:a4:89:85:38:
34:11:63:a2:d8:52:9c:2f:57:04:06:ad:7a:ed:e7:81:a4:3c:
8a:6f:b8:25:16:b9:95:3d:0d:7d:3a:9f:21:51:9f:45:5e:01:
99:e7:35:24:dd:20:c1:25:4e:6e:be:26:74:e0:d5:0a:59:04:
7e:c3:6f:6a:00:e7:d6:bb:a1:34:31:16:0f:fd:6b:de:1d:ea:
23:c1:bd:75:07:e9:a1:df:31:0b:85:85:2f:f4:7e:ae:be:e6:
15:04:cc:4b:e0:be:ac:50:54:21:4e:86:00:bc:8a:9e:17:aa:
8e:d5:73:65:f2:a3:a2:73:60:ff:dc:b4:a1:44:cc:c9:10:fe:
eb:5a:45:85:8e:a2:dd:05:c0:58:2b:96:e1:1c:0d:0b:02:8f:
71:50:65:f6:5b:fc:58:ef:dd:99:71:30:4e:3b:49:3d:a7:ea:
7b:58:f7:9b:5f:83:22:87:fd:88:1b:d0:55:8e:08:4e:e9:00:
6b:53:95:3c:d4:4d:d4:01:6a:84:52:00:0c:e6:92:ec:a1:72:
c6:5d:77:8e:6b:5a:f1:d8:78:3d:6b:e2:84:9e:ca:1f:56:55:
5c:41:90:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:42:52 2026 by rpki-client