Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
File: xVnUaTVVufKtaAe6ztxLWi5wGkg.mft (raw, json)
Hash identifier: xf78Prg9jXBScVkY/OezbnCprL55t11y6PmhRB/rIk8=
Subject key identifier: ED:A7:3C:AD:BC:5A:C5:61:13:6B:36:6E:69:25:A8:92:28:B7:9B:E7
Authority key identifier: C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
Certificate issuer: /CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Certificate serial: 019CAD2289A918359AEA2263C6FFCA6EA40D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
Manifest number: 0B76
Signing time: Mon 02 Mar 2026 06:00:47 +0000
Manifest this update: Mon 02 Mar 2026 06:00:47 +0000
Manifest next update: Tue 03 Mar 2026 06:00:47 +0000
Files and hashes: 1: Hi_yIbXB_AqEZvECw_6A2niKbbY.roa (hash: V9KwW6TEefSi+Nbg4IOw24z7gPz8KPWyVOeCLVyS3EY=)
2: xVnUaTVVufKtaAe6ztxLWi5wGkg.crl (hash: cyXxSyK3LCUG0BAQz5MM0MCVk1mUV0d+/a7X1iraRCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:89:a9:18:35:9a:ea:22:63:c6:ff:ca:6e:a4:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Validity
Not Before: Mar 2 06:00:47 2026 GMT
Not After : Mar 3 06:00:47 2026 GMT
Subject: CN=eda73cadbc5ac561136b366e6925a89228b79be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:28:e3:f6:05:00:6c:cc:95:27:19:ca:c3:ae:
d1:b0:37:f2:7b:d9:df:56:99:4d:21:8b:7b:00:94:
8b:64:94:5b:8e:fa:d1:72:7d:e3:d3:0e:07:ec:ba:
f6:11:64:09:25:b4:d0:16:fe:7c:4c:ce:64:b8:2a:
b2:b9:a7:a9:f8:67:23:fe:cf:ba:e3:84:f8:3f:f2:
d8:6b:65:06:dd:f4:fd:c1:1d:b9:56:bd:f2:24:91:
c8:fd:57:ee:8d:9f:50:ae:b1:70:26:04:0a:4b:89:
c4:e4:93:2b:28:5a:3e:20:5a:80:e6:21:39:2c:a0:
9a:00:3f:89:da:61:6b:07:6e:b7:9a:0c:cb:d5:88:
b2:d3:9b:2a:b5:2e:63:19:34:ce:74:52:16:a2:e4:
27:02:07:1d:53:10:f4:41:e0:3f:49:6c:71:15:99:
44:45:8f:1d:e7:97:ba:54:d3:a4:d4:a4:ac:81:24:
18:f7:ba:c4:0a:fb:44:45:f8:ed:52:0c:11:3c:c1:
b3:9f:34:d6:71:99:7d:2e:03:db:f9:86:f2:15:77:
02:ee:d1:cc:21:05:02:d6:6b:5b:15:bf:b4:56:1f:
9a:88:13:18:63:e1:d8:55:6c:8b:16:61:9a:68:5d:
b3:2d:cd:4d:c7:b2:0c:d4:02:e6:ce:c3:b1:de:19:
ca:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A7:3C:AD:BC:5A:C5:61:13:6B:36:6E:69:25:A8:92:28:B7:9B:E7
X509v3 Authority Key Identifier:
keyid:C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ac:73:91:27:1e:fb:52:2e:36:b6:94:b9:00:3a:54:14:6c:
c9:e1:0d:84:ee:64:87:de:19:c6:a7:f7:5f:44:74:4d:44:94:
64:9b:76:63:56:44:43:c5:4e:db:63:8c:46:89:e5:89:1b:72:
68:0d:42:fa:ee:17:29:79:39:96:e8:11:a5:2f:d8:b8:2c:7d:
60:15:4a:b4:ff:64:d1:f3:e1:96:85:bd:0e:3b:fb:57:f9:0d:
1a:72:3b:80:3e:25:23:5f:a4:6b:4e:2d:94:34:9e:f7:2f:12:
f7:61:fc:6e:d6:d2:d6:7f:00:da:91:65:f5:64:b5:5d:91:9e:
f2:c1:32:0b:07:92:2f:12:41:d4:c5:a2:ef:dd:91:f0:c1:86:
32:33:eb:1d:fe:6e:48:5e:db:67:9c:3d:dd:ef:1a:f9:a8:e8:
a9:41:62:df:94:37:3f:c1:3c:62:fb:16:33:52:b1:83:59:2d:
d5:10:a2:77:bc:b2:80:cc:05:a2:5c:91:ae:81:3e:2b:ed:19:
d3:f8:76:8f:5b:98:db:6f:9a:66:f7:b2:9f:88:6e:f5:c4:b9:
f5:c1:de:db:92:12:bf:62:3c:81:5c:1e:b8:e1:92:95:39:05:
97:2c:e8:29:02:a3:16:b5:8a:2d:55:d0:bd:66:63:59:79:22:
d7:be:83:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:31:46 2026 by rpki-client