Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
File: xzic6Ca8jSaGm0UvPNk2kCxVL78.mft (raw, json)
Hash identifier: iXMP7+6Z9e44JxTf3hHRMB/N0PiQIdp6l+9JDeVa+0g=
Subject key identifier: AF:4C:50:2A:A4:6C:F7:DD:8C:DC:A2:D1:5F:A8:01:1D:DF:1F:20:71
Authority key identifier: C7:38:9C:E8:26:BC:8D:26:86:9B:45:2F:3C:D9:36:90:2C:55:2F:BF
Certificate issuer: /CN=c7389ce826bc8d26869b452f3cd936902c552fbf
Certificate serial: 019CAC7E15A95881F4F011CFACE072B456DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
Manifest number: 0DBB
Signing time: Mon 02 Mar 2026 03:01:10 +0000
Manifest this update: Mon 02 Mar 2026 03:01:10 +0000
Manifest next update: Tue 03 Mar 2026 03:01:10 +0000
Files and hashes: 1: AsK2uztnxQm7GmE36ie8VWKszqc.roa (hash: MmG9MMdxlYTR95FSVo5MmqnSkxmRmjdkjXGjYjlA1cA=)
2: xzic6Ca8jSaGm0UvPNk2kCxVL78.crl (hash: nFqEO6pQqbnfiFQUKZhFkN5nWFwTtnQPubx8eMnPIdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:15:a9:58:81:f4:f0:11:cf:ac:e0:72:b4:56:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7389ce826bc8d26869b452f3cd936902c552fbf
Validity
Not Before: Mar 2 03:01:10 2026 GMT
Not After : Mar 3 03:01:10 2026 GMT
Subject: CN=af4c502aa46cf7dd8cdca2d15fa8011ddf1f2071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a0:b0:c2:fa:25:4e:da:71:20:3a:ed:6d:5a:
23:17:6f:ab:97:ac:2a:38:4f:cc:47:f3:71:7e:30:
14:4c:71:b3:eb:c6:66:3b:f2:37:cd:38:e8:61:0d:
89:26:aa:3a:ba:10:5a:2d:35:66:ab:f6:a9:1c:b1:
9c:7e:0c:27:12:65:72:b0:a2:89:ba:ef:f2:97:9c:
82:b0:57:0a:c8:52:95:f9:b5:f2:a2:c9:92:e5:96:
20:ae:7e:0a:d6:2e:69:e2:62:53:43:ea:c8:67:32:
c3:ab:e2:5b:85:ec:fc:87:ab:d9:45:fd:1a:f7:5b:
9c:f7:10:ed:e9:e4:3a:7c:24:d4:ff:6b:1e:7a:0f:
0e:f9:9f:17:46:c7:2e:a4:b5:f1:78:7c:0b:9f:57:
4b:25:a5:50:4e:17:1a:6b:87:eb:13:3d:fc:d7:d5:
12:01:bb:41:93:79:50:5e:43:92:97:27:47:03:97:
ef:7f:9d:94:80:96:6c:ff:36:39:6d:49:9e:61:d7:
86:15:d1:ca:82:71:b2:56:d9:bf:21:81:84:6b:87:
d6:09:1d:84:ed:09:0b:02:99:ae:c4:b1:93:53:13:
cc:61:15:92:aa:06:67:a6:a2:35:e9:e2:47:01:a8:
48:03:9f:60:b7:36:20:79:bb:7a:e0:c0:21:7b:b1:
c7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4C:50:2A:A4:6C:F7:DD:8C:DC:A2:D1:5F:A8:01:1D:DF:1F:20:71
X509v3 Authority Key Identifier:
keyid:C7:38:9C:E8:26:BC:8D:26:86:9B:45:2F:3C:D9:36:90:2C:55:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a6:08:ed:4f:49:2d:45:7c:70:8d:72:cf:8d:61:28:03:94:
25:b5:28:05:84:a7:77:ab:0c:c6:28:18:2b:93:f5:04:65:c0:
7c:25:01:82:17:08:c9:f4:1d:62:c6:11:f0:61:4d:02:8f:40:
71:90:31:ef:cd:64:a1:28:b1:17:c6:c6:ea:ad:59:28:aa:b2:
71:1e:47:e4:ef:28:cf:47:d1:c9:de:5d:24:14:61:1f:14:f5:
28:14:b9:c9:8a:c0:91:39:34:01:d1:33:75:f9:cd:b0:4e:e1:
9b:4c:79:7e:73:e8:23:82:94:bb:29:ba:2e:c6:91:0d:e6:cc:
30:87:2a:53:b8:dd:fa:f4:c9:1a:c4:5d:e9:d6:66:40:da:2a:
10:32:af:07:45:ad:2d:00:66:c4:49:4a:40:57:ca:ec:06:0b:
29:ac:9e:2a:e5:ea:45:5e:8e:b8:04:23:ce:96:84:64:be:0a:
c9:97:d8:68:de:7c:fb:3b:02:40:ae:75:a0:23:cc:db:68:21:
3d:37:a0:bd:da:1f:a8:08:27:73:b4:7e:05:12:70:f9:1d:f5:
3c:5e:98:7e:f7:91:61:32:f7:3b:e0:36:3c:10:0d:69:a1:41:
63:2c:2a:af:9d:a2:11:c2:b4:26:41:8b:37:6e:bc:6b:8b:35:
51:36:ba:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:21:35 2026 by rpki-client