Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
File: xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft (raw, json)
Hash identifier: lHJfMftrUqQfcZRh3JJvcnCVckeS0h1qrbs0NbhcDNc=
Subject key identifier: 6D:7C:C2:40:8B:81:D9:52:48:42:03:37:44:2D:2E:A8:0C:C5:04:B2
Authority key identifier: C5:F2:20:3B:C0:28:67:02:34:5A:C4:65:50:0B:44:88:C0:31:C6:B5
Certificate issuer: /CN=c5f2203bc0286702345ac465500b4488c031c6b5
Certificate serial: 019CAAC6AE50D8C77F74F2D5CE897C5E6DED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 19:01:13 +0000
Manifest this update: Sun 01 Mar 2026 19:01:13 +0000
Manifest next update: Mon 02 Mar 2026 19:01:13 +0000
Files and hashes: 1: grgC47iwv_yPcU0PK-57zcrhx3w.roa (hash: Byu89q/FbONyFmYfNVRxv0Nw5EmOQBEB3SRiUqdLOKE=)
2: xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl (hash: oHjfJUXy4aC0Jipnbqes5Rn1cQy4hPpsLSIt1kC+UO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:ae:50:d8:c7:7f:74:f2:d5:ce:89:7c:5e:6d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f2203bc0286702345ac465500b4488c031c6b5
Validity
Not Before: Mar 1 19:01:13 2026 GMT
Not After : Mar 2 19:01:13 2026 GMT
Subject: CN=6d7cc2408b81d95248420337442d2ea80cc504b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:97:96:9d:e0:0f:39:12:99:52:46:3d:a7:c2:
8e:da:94:b4:d8:3c:35:83:1f:64:91:8c:d7:f7:72:
01:57:6d:c6:56:97:ab:5a:80:a8:15:24:e4:92:a4:
8b:3b:8d:5d:a2:d7:02:94:c9:48:5c:90:03:6c:64:
cf:2b:61:66:a2:86:d7:fa:cb:d3:f7:f2:5c:d7:84:
fd:96:35:d7:3e:f0:33:2d:db:85:65:14:98:0d:4c:
d0:d7:c7:f7:9c:03:fd:8a:e7:a2:dc:81:2a:84:f2:
a9:49:74:3b:66:05:42:92:4a:66:f9:f1:94:2c:89:
79:5e:03:0c:01:c7:56:25:11:e0:d3:3f:81:27:53:
37:fa:0c:9f:e6:82:39:2e:25:53:67:ab:75:e3:9c:
86:75:e7:a4:fa:2c:90:85:33:e6:f8:08:63:9b:17:
cd:40:a1:61:d6:4b:23:ae:1e:41:70:5a:ed:29:bf:
08:09:7e:ee:23:74:5d:66:a9:9b:1c:46:66:f4:f6:
2a:e5:da:0c:c4:e3:70:99:30:f3:db:69:2c:18:c9:
c8:3c:31:f4:70:8d:84:5b:38:48:5d:a9:a5:f0:ed:
3b:0d:7b:fd:99:fb:0e:54:26:93:35:9c:ef:46:8d:
ea:d2:32:77:19:dd:d9:2d:3f:80:d6:c8:2b:bd:d4:
1a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7C:C2:40:8B:81:D9:52:48:42:03:37:44:2D:2E:A8:0C:C5:04:B2
X509v3 Authority Key Identifier:
keyid:C5:F2:20:3B:C0:28:67:02:34:5A:C4:65:50:0B:44:88:C0:31:C6:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:c3:b5:78:ef:ce:4f:59:93:fa:7c:7c:42:59:f3:7d:9d:29:
99:98:7e:a6:58:b3:2e:ad:4f:a7:45:16:70:7d:ad:fc:86:1a:
99:9b:87:2f:57:2e:82:bb:9f:3b:2b:30:a8:1b:a6:77:f7:96:
dc:f4:ef:a7:be:9b:c2:ae:9e:de:c5:57:d6:28:63:48:03:03:
f9:c7:87:5a:e6:a5:d7:22:15:5c:04:15:a3:47:a1:78:c5:12:
a5:48:f1:0a:2c:2d:31:35:50:62:0f:51:d0:d9:7e:28:e2:e1:
24:53:10:60:5a:b1:15:5b:bf:75:e5:e5:0b:45:23:da:ac:14:
72:92:9f:59:82:1f:5d:ec:ea:38:a1:df:02:42:35:12:4e:98:
61:ca:38:65:40:85:b3:fd:76:43:fe:72:94:d8:c5:07:29:6a:
7d:30:f3:7c:4d:c4:cf:78:ec:00:55:ac:3c:57:1a:40:d8:b6:
d4:19:f7:3d:bd:1e:2b:4f:fb:13:fa:c6:4a:a9:52:6f:44:31:
b8:71:d1:28:01:28:06:d6:46:54:f7:36:4f:18:c0:ee:48:39:
df:40:c0:75:0d:04:70:b9:7f:63:5d:cf:a8:37:88:14:45:21:
38:37:48:3f:60:41:d3:a4:a4:e6:b6:e8:44:2b:f9:11:0e:8e:
c9:77:57:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:48:47 2026 by rpki-client