Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
File: xs_ZQjfv0gDdCxFuH2-be8plnKc.mft (raw, json)
Hash identifier: KeT39vhWC+FUUPCeqo8vNUGvHCtDgvq2oAcNUy0we6o=
Subject key identifier: E4:7F:7D:D5:88:F4:B7:66:67:31:62:DF:EC:8A:10:77:14:A1:EF:82
Authority key identifier: C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
Certificate issuer: /CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Certificate serial: 019CAC0FA6BB0771791BFD60E6883C36C1BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 01:00:32 +0000
Manifest this update: Mon 02 Mar 2026 01:00:32 +0000
Manifest next update: Tue 03 Mar 2026 01:00:32 +0000
Files and hashes: 1: RB5D86Eez18oD-QABqEilaFp2nQ.roa (hash: cNT5vI1+Epdr8/RiwTV50sHhN6dBP41X/USYdNru1kM=)
2: xs_ZQjfv0gDdCxFuH2-be8plnKc.crl (hash: ZM8v7yhvwsvWLcKAOPSUfmuxvxuul+s0s4/T8/lKFig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:a6:bb:07:71:79:1b:fd:60:e6:88:3c:36:c1:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Validity
Not Before: Mar 2 01:00:32 2026 GMT
Not After : Mar 3 01:00:32 2026 GMT
Subject: CN=e47f7dd588f4b766673162dfec8a107714a1ef82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:13:5d:5d:a2:b5:5e:27:f9:e8:bf:84:94:c7:
d4:42:fc:50:1d:aa:fa:1e:17:77:fa:0b:63:32:cd:
a8:9c:51:63:c3:ee:de:ac:35:6e:d7:3f:1c:1e:0b:
89:88:6d:da:68:2b:8d:83:42:c2:6f:bd:6d:cd:3d:
09:7a:e8:57:83:08:ad:84:69:af:16:c0:b6:b6:0b:
ff:43:33:0d:17:60:5d:30:94:8c:fe:15:fd:96:c3:
a9:99:51:e9:9d:56:83:dd:2d:9f:72:88:8e:a4:92:
67:cf:90:3b:32:fe:24:be:f9:5f:be:18:71:cb:d4:
2b:b9:30:0e:1f:be:91:7e:66:18:34:d1:ad:46:f2:
d1:df:b2:20:76:6c:f2:c1:7b:23:26:f4:78:b3:3e:
d2:27:5a:39:07:a0:59:61:02:5c:02:34:7e:31:50:
32:54:e4:4e:69:3f:e6:cd:94:57:cd:31:7a:fc:d6:
74:0d:9b:63:e7:0a:8b:f4:2e:f5:6e:c7:04:a3:59:
59:34:97:9a:ff:f9:5a:f5:96:e0:4c:4c:ef:91:8a:
90:e2:76:b1:3d:7b:e1:83:f4:b8:90:86:95:c4:38:
28:ef:c4:ce:28:7d:29:50:14:f4:e5:94:e2:a0:23:
10:10:8b:81:15:6b:8f:8f:38:7c:98:e9:cd:27:cd:
ed:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7F:7D:D5:88:F4:B7:66:67:31:62:DF:EC:8A:10:77:14:A1:EF:82
X509v3 Authority Key Identifier:
keyid:C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:19:de:9e:44:ba:18:4f:c5:f3:0c:e1:e9:00:df:2a:ba:21:
1d:9f:c2:c7:c7:b3:58:87:ba:b1:d8:d8:83:bd:a8:6f:45:eb:
f7:1e:39:59:b9:9b:56:5b:84:52:05:d5:db:0d:fd:30:f0:ba:
16:52:ff:dd:52:66:c8:34:34:cc:94:39:b6:73:b2:5b:17:55:
1e:f0:50:52:20:24:68:fd:06:41:5a:94:26:1a:99:1e:b6:e0:
cc:fc:cb:ba:61:a8:34:0e:0c:20:db:8c:6a:e0:16:60:b4:79:
6e:a6:e4:2c:87:88:84:8a:5b:26:92:14:63:ae:d8:95:6e:f0:
ff:f3:56:7f:fd:15:45:a5:7e:17:02:77:32:5a:b4:14:a9:d2:
75:fd:67:e5:14:e8:ba:9f:9d:e9:df:85:46:66:d0:d1:f2:f1:
c7:69:79:7a:9a:1c:b0:99:3e:32:2b:72:7c:32:d3:4a:8a:b3:
92:9c:1a:8c:b3:c2:f5:90:a9:f1:f8:03:bc:ea:fb:3d:71:51:
dc:01:32:d3:0c:0c:e3:02:d1:c7:fd:33:3b:33:66:bb:18:8a:
27:09:21:aa:42:ae:ab:d4:9c:0c:09:a9:49:3e:3e:21:c9:29:
0f:7f:95:b5:39:31:7a:fa:23:2d:94:65:22:54:ae:14:45:6f:
52:a0:a9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:19:39 2026 by rpki-client