Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
File: xpZo80fFWt13rFF-kzHd5_w1VqY.mft (raw, json)
Hash identifier: 4EqfccWm+h3hnykvJW2osWx8IxlWlTUABdpRC7TlwiI=
Subject key identifier: F0:7F:8D:48:26:94:31:80:FA:F6:F6:EA:EE:34:19:BC:4E:A2:9B:5C
Authority key identifier: C6:96:68:F3:47:C5:5A:DD:77:AC:51:7E:93:31:DD:E7:FC:35:56:A6
Certificate issuer: /CN=c69668f347c55add77ac517e9331dde7fc3556a6
Certificate serial: 019CADFECE361E7110289C60BCEF1929A64F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
Manifest number: 184B
Signing time: Mon 02 Mar 2026 10:01:23 +0000
Manifest this update: Mon 02 Mar 2026 10:01:23 +0000
Manifest next update: Tue 03 Mar 2026 10:01:23 +0000
Files and hashes: 1: SQgk14LJvQD58GJwhzmdHvEGMpA.roa (hash: 9nEhhW/HaWe0QsWNlFcb5L1Nm0I/W7PdcIHoewo3ZNU=)
2: xpZo80fFWt13rFF-kzHd5_w1VqY.crl (hash: 3f+m+dYSfgmO8yXbGK6m1Bf7/r3yXFOeLint6/fdNRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:ce:36:1e:71:10:28:9c:60:bc:ef:19:29:a6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69668f347c55add77ac517e9331dde7fc3556a6
Validity
Not Before: Mar 2 10:01:23 2026 GMT
Not After : Mar 3 10:01:23 2026 GMT
Subject: CN=f07f8d4826943180faf6f6eaee3419bc4ea29b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d9:d7:5c:fe:fc:05:f3:de:af:a2:f1:fc:dd:
3a:e1:b4:09:75:98:83:ee:1e:27:35:6f:13:ab:0e:
2e:97:e7:7f:1a:eb:cb:ea:80:5e:a7:36:0a:60:54:
6e:bb:41:95:91:4f:6c:df:5d:bb:3f:24:df:c3:77:
e6:c2:80:25:53:25:15:71:b4:63:20:cc:b8:e5:19:
76:63:0e:87:11:87:2f:bb:b1:83:bf:d1:f3:8e:dc:
1e:65:10:d0:1d:0f:3b:aa:c0:a2:f0:e8:bb:31:14:
16:94:a7:61:47:44:28:06:7e:a3:8b:29:59:c4:af:
fa:2c:ca:07:34:30:fb:b2:90:ad:c2:53:c1:c5:6b:
4a:4e:f0:c5:1e:23:40:ca:4c:51:69:f6:38:a5:a7:
5d:6e:00:ba:3d:a1:63:bc:a4:bd:c4:34:7f:87:d1:
fc:65:93:13:2e:24:5f:d6:c1:bf:40:83:c6:07:d6:
3c:46:c4:c0:e0:e1:d6:0c:ca:72:42:81:24:b0:78:
e0:f0:86:83:96:99:15:46:3a:30:4a:4c:0e:06:ff:
10:f9:27:23:4f:4a:a5:15:da:51:1b:43:c5:04:d8:
8e:45:af:96:c5:fa:f5:ad:e7:71:1f:03:60:81:06:
39:c1:f4:0a:ae:4d:1b:cd:1a:be:b5:e3:4b:1c:2a:
80:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:7F:8D:48:26:94:31:80:FA:F6:F6:EA:EE:34:19:BC:4E:A2:9B:5C
X509v3 Authority Key Identifier:
keyid:C6:96:68:F3:47:C5:5A:DD:77:AC:51:7E:93:31:DD:E7:FC:35:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:74:9b:5b:a1:3a:d0:f3:87:99:ed:d0:21:61:ba:02:00:a3:
9e:d5:ca:86:95:83:a3:46:00:a2:08:9c:e0:a6:51:16:c4:3f:
2c:9d:ff:bb:38:d8:6d:67:f6:61:1d:82:14:8d:94:2d:fc:ca:
24:e9:1c:a6:ae:9d:4b:8c:41:e9:c1:7f:d3:5c:e4:f6:96:1c:
95:44:03:b1:5a:b1:f7:ce:68:8a:4b:f3:61:f5:31:73:c1:b3:
3d:0f:40:a2:a8:4a:d4:96:09:7b:dc:eb:4a:b9:f3:8c:71:ab:
b5:a7:bd:b6:ee:83:2b:50:3e:f6:8f:ce:5b:ea:31:8c:0d:b1:
67:fe:11:2a:f0:46:55:36:79:f3:70:47:f6:bb:a7:77:26:88:
03:cb:cf:2f:34:32:bc:27:c1:95:6c:f7:0b:9c:dc:4f:a0:7e:
aa:af:82:5e:75:8f:cd:c2:6b:22:9f:6c:bb:40:55:1f:2d:91:
4a:36:82:71:d7:86:e5:17:15:7d:77:cc:36:99:8c:d2:66:d8:
42:c5:59:c3:fc:8b:5a:e2:2d:2f:f4:7b:55:64:5d:b2:2b:63:
b3:38:8b:15:98:17:09:8a:4d:d4:74:6a:fc:7b:ac:58:62:50:
8d:fc:16:a3:21:5c:c1:71:ae:d6:63:33:31:cc:59:ec:9b:3a:
73:78:75:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/s42HnEQKJxgvO8ZKaZPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2OTY2OGYzNDdjNTVhZGQ3N2FjNTE3ZTkzMzFkZGU3ZmMz
NTU2YTYwHhcNMjYwMzAyMTAwMTIzWhcNMjYwMzAzMTAwMTIzWjAzMTEwLwYDVQQD
EyhmMDdmOGQ0ODI2OTQzMTgwZmFmNmY2ZWFlZTM0MTliYzRlYTI5YjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtnXXP78BfPer6Lx/N064bQJdZiD
7h4nNW8Tqw4ul+d/GuvL6oBepzYKYFRuu0GVkU9s3127PyTfw3fmwoAlUyUVcbRj
IMy45Rl2Yw6HEYcvu7GDv9HzjtweZRDQHQ87qsCi8Oi7MRQWlKdhR0QoBn6jiylZ
xK/6LMoHNDD7spCtwlPBxWtKTvDFHiNAykxRafY4paddbgC6PaFjvKS9xDR/h9H8
ZZMTLiRf1sG/QIPGB9Y8RsTA4OHWDMpyQoEksHjg8IaDlpkVRjowSkwOBv8Q+Scj
T0qlFdpRG0PFBNiORa+Wxfr1redxHwNggQY5wfQKrk0bzRq+teNLHCqAowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPB/jUgmlDGA+vb26u40GbxOoptcMB8GA1UdIwQY
MBaAFMaWaPNHxVrdd6xRfpMx3ef8NVamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHBabzgwZkZXdDEzckZGLWt6SGQ1X3cxVnFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8wNjA5NjktNWNhZi00MThmLThjMjUt
YWNiMjcyM2E1MDc2LzEveHBabzgwZkZXdDEzckZGLWt6SGQ1X3cxVnFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8wNjA5NjktNWNhZi00MThmLThjMjUtYWNiMjcyM2E1MDc2
LzEveHBabzgwZkZXdDEzckZGLWt6SGQ1X3cxVnFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATXSbW6E6
0POHme3QIWG6AgCjntXKhpWDo0YAogic4KZRFsQ/LJ3/uzjYbWf2YR2CFI2ULfzK
JOkcpq6dS4xB6cF/01zk9pYclUQDsVqx985oikvzYfUxc8GzPQ9AoqhK1JYJe9zr
SrnzjHGrtae9tu6DK1A+9o/OW+oxjA2xZ/4RKvBGVTZ583BH9rundyaIA8vPLzQy
vCfBlWz3C5zcT6B+qq+CXnWPzcJrIp9su0BVHy2RSjaCcdeG5RcVfXfMNpmM0mbY
QsVZw/yLWuItL/R7VWRdsitjsziLFZgXCYpN1HRq/HusWGJQjfwWoyFcwXGu1mMz
McxZ7Js6c3h1YQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:18:31 2026 by rpki-client