Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft
File: xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft (raw, json)
Hash identifier: E+ciCM1SDWZ3Ju6TlaJJCVY+gAD5wAXJ7zHiSerxH/Q=
Subject key identifier: 9C:E2:ED:2A:96:C8:E7:4B:22:D0:CF:4B:16:84:AF:6A:54:5E:7C:8D
Authority key identifier: C6:B3:6F:EA:22:C3:66:D0:8A:4B:54:6A:C8:3F:44:85:B2:B1:E1:59
Certificate issuer: /CN=c6b36fea22c366d08a4b546ac83f4485b2b1e159
Certificate serial: 019CAEA3DE3E0E29A8A70FF7ABCFB012FF4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft
Manifest number: 077F
Signing time: Mon 02 Mar 2026 13:01:40 +0000
Manifest this update: Mon 02 Mar 2026 13:01:40 +0000
Manifest next update: Tue 03 Mar 2026 13:01:40 +0000
Files and hashes: 1: fQX2j2Bq9neKawngCd6r7FvsgZk.roa (hash: Pq3fsjzkXawHi1RCcqpuVO4WOAWLk18WufgTudrWDU8=)
2: xrNv6iLDZtCKS1RqyD9EhbKx4Vk.crl (hash: xyhcAdraOOBiMZEI5xZBYdxMUVWTz+JJqxkr5kLxSZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:de:3e:0e:29:a8:a7:0f:f7:ab:cf:b0:12:ff:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6b36fea22c366d08a4b546ac83f4485b2b1e159
Validity
Not Before: Mar 2 13:01:40 2026 GMT
Not After : Mar 3 13:01:40 2026 GMT
Subject: CN=9ce2ed2a96c8e74b22d0cf4b1684af6a545e7c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:19:a9:38:25:79:be:a6:53:3f:4a:6d:2b:2a:
97:55:98:15:57:83:f1:8d:8f:47:cd:d5:28:83:74:
5a:65:57:87:b7:6a:5b:eb:ed:29:ee:f8:27:bc:34:
a7:a6:af:79:29:4d:87:57:51:d0:10:3a:05:76:fc:
c3:02:4d:32:b7:69:80:d0:b6:7e:b7:1c:f4:61:48:
50:44:79:c4:9e:b9:80:d2:de:88:b8:6f:ed:2b:7c:
69:36:04:84:56:26:c0:b8:a7:7d:8d:52:91:42:93:
37:21:0d:25:0f:fe:d7:f8:a2:78:23:dc:3a:cf:33:
91:6e:9d:cc:8c:f3:2a:65:e0:c2:1f:59:bb:e9:35:
a0:ee:18:df:1a:f3:e4:2e:85:64:07:51:60:38:ef:
30:37:12:14:81:24:ec:c4:a5:a8:be:d4:0d:da:45:
41:30:b8:f9:32:00:f6:85:49:2f:66:50:14:bc:91:
75:2e:8d:a5:f5:16:fa:23:4f:be:3a:11:e3:ad:38:
fd:88:0c:cb:1c:d3:50:6b:a9:55:88:e3:43:57:c3:
c3:d7:57:e9:07:1d:99:7b:89:b9:be:7e:ff:80:46:
c7:15:8b:bc:8a:7f:e2:2a:e7:9f:c2:1b:fb:08:21:
24:fb:52:5c:df:c4:4a:d5:fb:6f:18:16:de:2b:8b:
9e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E2:ED:2A:96:C8:E7:4B:22:D0:CF:4B:16:84:AF:6A:54:5E:7C:8D
X509v3 Authority Key Identifier:
keyid:C6:B3:6F:EA:22:C3:66:D0:8A:4B:54:6A:C8:3F:44:85:B2:B1:E1:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:44:5b:aa:59:b2:cf:45:e3:09:19:55:f9:a1:87:4c:85:8e:
d8:df:b5:7e:ff:8b:04:10:51:e2:7f:56:24:c9:1e:dd:35:54:
64:d8:34:f8:28:23:02:12:18:0c:6e:1b:69:51:2e:de:da:20:
f5:8b:e8:fd:85:39:e2:27:39:bf:dc:24:f8:a4:97:e1:b1:eb:
d3:97:9b:c9:24:c2:89:a1:2c:00:f1:f0:1c:39:7b:d8:bc:1f:
d7:8c:ba:ea:91:46:ff:37:a2:cf:b9:d4:97:d0:51:4c:1a:04:
7b:94:53:49:05:c3:74:f0:2e:01:01:4f:e8:7e:88:9e:39:98:
10:86:5a:19:4d:38:51:3b:63:17:e9:a0:3c:4e:84:3a:9e:96:
11:60:90:c2:d2:f7:4b:b2:8b:0c:e3:6b:de:9e:f7:30:ac:1b:
da:5a:1c:48:a8:29:67:8b:c9:63:79:10:57:8b:15:41:38:47:
00:14:47:de:28:9a:f4:9a:3b:f4:c5:b9:d3:d7:0b:92:35:68:
21:30:5d:06:01:24:21:3e:4b:c0:7d:b3:83:37:a6:c6:f1:8e:
59:95:d7:ff:87:bd:85:35:6e:6a:db:25:13:08:8b:83:0f:a5:
6a:42:ae:3a:1d:e5:ce:e6:1e:53:a6:c6:cb:ae:23:df:6b:c4:
0c:d9:09:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:30:26 2026 by rpki-client