Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft
File: x6gkb3CuGOc25OU5gUgNWGFq8ug.mft (raw, json)
Hash identifier: AU2AKXoigpx+k81czZifPiy89pjd+rAhv4QDN06MTZ4=
Subject key identifier: 88:59:E8:6A:5F:8F:00:D0:E1:81:A2:0B:FE:B4:01:4E:73:D3:1A:79
Authority key identifier: C7:A8:24:6F:70:AE:18:E7:36:E4:E5:39:81:48:0D:58:61:6A:F2:E8
Certificate issuer: /CN=c7a8246f70ae18e736e4e53981480d58616af2e8
Certificate serial: 019CADFEAD837D221B4CDFE7174204B394F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6gkb3CuGOc25OU5gUgNWGFq8ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft
Manifest number: 1204
Signing time: Mon 02 Mar 2026 10:01:14 +0000
Manifest this update: Mon 02 Mar 2026 10:01:14 +0000
Manifest next update: Tue 03 Mar 2026 10:01:14 +0000
Files and hashes: 1: WNvdK2G6VGfovAlyzdy5qA0oBTc.roa (hash: T/wqo/8dAPv9d0Xqoe1ZG886rDX3diZQucP4pDiIbtI=)
2: x6gkb3CuGOc25OU5gUgNWGFq8ug.crl (hash: u3pb6Y/6dtHa1M3pnGRVmqfUxnya3F3/VIqzrrRrxak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/x6gkb3CuGOc25OU5gUgNWGFq8ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:ad:83:7d:22:1b:4c:df:e7:17:42:04:b3:94:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7a8246f70ae18e736e4e53981480d58616af2e8
Validity
Not Before: Mar 2 10:01:14 2026 GMT
Not After : Mar 3 10:01:14 2026 GMT
Subject: CN=8859e86a5f8f00d0e181a20bfeb4014e73d31a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f3:35:68:79:36:39:65:ac:dc:64:4e:44:2b:
6e:0f:76:a1:42:26:40:46:5a:d9:2c:30:79:8e:be:
63:54:63:76:ec:b0:ff:03:b7:3c:a2:f1:f9:a1:6e:
56:c8:7e:d3:77:41:b7:24:27:a4:d0:cd:a7:85:d4:
24:08:f5:94:df:5d:e7:03:8f:66:f5:cf:aa:7b:39:
89:1d:22:2f:ba:87:cf:91:37:89:7e:bd:01:90:3a:
16:bc:7f:8a:75:be:93:d4:f6:a7:2b:f5:a9:24:a0:
85:08:49:c5:45:db:ba:33:c1:d6:20:a3:fd:3d:01:
91:6e:06:71:51:ac:18:1b:d2:a6:4b:f3:cb:80:19:
50:45:da:84:dd:f1:4d:fe:f8:1b:6f:ab:cb:68:50:
17:f7:5d:a5:14:f7:cf:7d:d9:d7:8b:92:3d:e4:68:
18:f3:78:56:24:6a:73:6a:11:f7:36:1d:1f:ec:c2:
1c:f5:07:25:82:98:0a:3d:65:d5:67:84:72:10:4f:
8e:51:c2:98:24:69:6d:16:b3:11:92:cc:a0:4f:91:
35:88:2e:ab:82:48:32:0b:11:25:c7:26:ee:13:21:
18:1c:73:bb:5d:64:0a:56:0a:74:d0:47:32:d0:ed:
31:d6:02:e5:32:10:6e:9f:45:17:83:f3:ed:71:26:
87:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:59:E8:6A:5F:8F:00:D0:E1:81:A2:0B:FE:B4:01:4E:73:D3:1A:79
X509v3 Authority Key Identifier:
keyid:C7:A8:24:6F:70:AE:18:E7:36:E4:E5:39:81:48:0D:58:61:6A:F2:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6gkb3CuGOc25OU5gUgNWGFq8ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c2:66:ab:b2:39:78:51:60:3e:f2:ed:f2:b6:e4:6f:84:b9:
a2:83:e9:94:a6:ff:da:85:6c:33:84:17:53:c6:6c:b1:74:87:
a8:59:54:bf:43:f3:f9:eb:53:c0:cf:63:14:2a:24:8e:75:5d:
1e:4c:a3:ec:f6:74:59:c2:42:8d:94:e9:b8:14:9b:10:1d:68:
90:7f:94:b3:9a:b9:07:4c:e9:90:92:80:f8:5b:38:18:5e:5e:
b4:05:92:09:b8:a9:4b:5d:5b:4d:a1:86:42:25:56:f3:a3:94:
9f:7a:40:f8:ae:df:fd:4d:b5:9c:27:57:6c:1d:16:d4:0c:cd:
a9:2f:bb:19:1c:6a:19:27:05:b7:82:e9:61:71:b9:07:8d:7a:
41:00:c7:c4:5c:c4:51:e0:85:0b:8d:80:c7:00:fd:3e:76:1d:
2e:39:bd:fb:c0:9e:70:69:f3:24:f7:b3:6f:45:04:2b:5d:67:
17:b6:55:ee:bc:3a:d2:e9:1c:d2:75:35:3a:c9:6b:66:6d:9b:
17:1a:9d:d3:cd:f0:99:55:f9:ab:e6:c6:fc:fc:27:ac:b1:62:
d1:73:66:4a:9d:61:5d:c9:db:bc:30:95:f0:02:e7:37:23:16:
13:63:db:c7:14:88:79:d9:a7:e1:5e:16:43:30:a2:d4:d9:cb:
62:c9:77:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:07:34 2026 by rpki-client