Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
File: xZR6QUqIMFFWVtc4p4OCiQFgN30.mft (raw, json)
Hash identifier: 1Hnumd96flQI6X8Zgf6ff0bnnqULnHehzhCUT8wjEWY=
Subject key identifier: 9C:16:9E:20:FD:EF:94:A7:B3:47:3D:68:C5:C9:60:1F:14:50:96:33
Authority key identifier: C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D
Certificate issuer: /CN=c5947a414a8830515656d738a78382890160377d
Certificate serial: 019CAC46B4C7058BF49DD339DF9A4B2A589F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
Manifest number: 0785
Signing time: Mon 02 Mar 2026 02:00:40 +0000
Manifest this update: Mon 02 Mar 2026 02:00:40 +0000
Manifest next update: Tue 03 Mar 2026 02:00:40 +0000
Files and hashes: 1: xZR6QUqIMFFWVtc4p4OCiQFgN30.crl (hash: IaT7SMdhqWbhbIwmfeR7TH5sJKvOutgzzUjY1st/pGA=)
2: yPfyngOSudI1ySWIfQxdWtyiNIs.roa (hash: 5dFd12MxUEVgWmbdpshfSJRZnDjbazIniCXkVZMmEDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:b4:c7:05:8b:f4:9d:d3:39:df:9a:4b:2a:58:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5947a414a8830515656d738a78382890160377d
Validity
Not Before: Mar 2 02:00:40 2026 GMT
Not After : Mar 3 02:00:40 2026 GMT
Subject: CN=9c169e20fdef94a7b3473d68c5c9601f14509633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:fb:2b:bc:d9:aa:df:f3:97:a9:33:8d:05:32:
51:e8:3d:94:b3:0b:e0:df:76:d0:72:f6:14:86:ad:
89:e1:03:56:2a:43:d5:58:a3:9b:0f:40:d6:39:f0:
8b:af:bd:bf:48:21:6a:9b:00:ff:a1:58:22:3a:9a:
21:13:b2:a3:6d:55:b9:e1:d5:72:4d:9c:21:68:fd:
dc:af:1a:11:95:56:3a:2b:41:b0:4d:54:da:5b:12:
b0:30:23:4f:31:c9:90:78:d1:88:eb:ed:ac:81:d2:
1e:73:23:08:c5:99:0b:ae:4c:50:a2:c1:b2:76:67:
c6:04:30:fa:73:84:b9:cf:b5:16:11:db:d3:b7:d1:
0d:44:ee:00:54:01:2c:29:97:99:8e:ae:ca:d9:12:
95:2a:db:52:6b:63:0e:31:78:0d:d5:ee:c8:bf:0b:
af:be:80:8a:90:58:5b:7a:72:a1:e4:eb:5c:c5:5d:
b3:18:7c:8e:2c:a7:9a:8e:62:fa:81:ad:f2:36:2f:
83:96:5d:57:df:17:a2:1f:47:e7:b5:f4:7e:2a:47:
89:2e:21:46:bb:16:5f:33:44:c1:4f:00:a6:55:01:
52:f8:da:0d:33:19:79:f0:65:63:30:af:d1:bc:4c:
b5:6b:bc:a3:73:66:b2:31:a4:b6:4d:94:28:1b:cb:
ac:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:16:9E:20:FD:EF:94:A7:B3:47:3D:68:C5:C9:60:1F:14:50:96:33
X509v3 Authority Key Identifier:
keyid:C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:53:97:bf:89:b5:dc:e4:c0:80:50:d1:20:98:77:4e:3e:1e:
3b:df:9b:f4:9b:a4:b0:38:e1:b3:ce:4d:f6:f6:07:7b:e2:2b:
f9:7e:8e:20:7b:b4:d6:c3:dc:3f:2e:92:69:99:4b:e3:3f:5d:
76:fc:0a:f5:a8:5a:7d:67:55:9b:0a:44:da:07:35:df:e2:85:
29:b3:23:c7:f3:4d:f0:b2:42:22:ca:7b:28:57:4d:c3:a5:e9:
71:ee:f2:9f:87:16:48:23:98:25:82:bd:d9:a1:16:5c:23:cd:
c8:33:6c:c8:f5:ed:a5:16:b3:56:31:ab:fc:52:15:cf:db:78:
37:cc:40:79:86:4e:b7:fe:5d:7f:05:e5:e6:d7:9f:3b:a4:8e:
82:6c:8e:96:37:6c:86:00:39:d5:57:5c:35:aa:22:59:a7:c5:
dc:cf:d9:1e:3d:25:c3:8a:64:f7:65:9c:ca:fa:99:22:05:f3:
8e:72:e8:57:7a:67:ce:e5:e8:3b:36:08:b9:3e:4c:d0:43:f6:
aa:2c:31:84:35:13:db:97:1a:d6:33:5f:ce:3c:e4:7d:b0:25:
fb:8c:80:5f:c7:37:b3:bb:df:63:ab:54:c8:fa:ee:d3:b8:7f:
ec:01:9c:72:37:c8:54:94:59:51:fa:04:14:c5:15:24:a1:83:
bf:54:00:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:48:47 2026 by rpki-client