Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft
File: x5d6en0rE11ac3kcp889mtpYj2s.mft (raw, json)
Hash identifier: Dh9jJsYdjfOcOSLVCI19pQ1kRBwBWbBdem04JCnh06Q=
Subject key identifier: 4F:8D:39:DE:9F:BC:F0:76:E4:5F:EB:86:5A:1D:1F:5E:7A:9D:4D:A1
Authority key identifier: C7:97:7A:7A:7D:2B:13:5D:5A:73:79:1C:A7:CF:3D:9A:DA:58:8F:6B
Certificate issuer: /CN=c7977a7a7d2b135d5a73791ca7cf3d9ada588f6b
Certificate serial: 019CAC46B6993F927ACEA4957DBD9EF43AFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5d6en0rE11ac3kcp889mtpYj2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 02:00:41 +0000
Manifest this update: Mon 02 Mar 2026 02:00:41 +0000
Manifest next update: Tue 03 Mar 2026 02:00:41 +0000
Files and hashes: 1: obbIRXSf7o8eyn8AX9K_sXlcOOA.roa (hash: ju/bIy7nXAPL/xatGDGkzr+qevUa2q9qUxQ/kQdO+6k=)
2: x5d6en0rE11ac3kcp889mtpYj2s.crl (hash: iPy8niVFKtOSO38K9AeNM/7G2vk7H/pRJINLqFmDArw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/x5d6en0rE11ac3kcp889mtpYj2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:b6:99:3f:92:7a:ce:a4:95:7d:bd:9e:f4:3a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7977a7a7d2b135d5a73791ca7cf3d9ada588f6b
Validity
Not Before: Mar 2 02:00:41 2026 GMT
Not After : Mar 3 02:00:41 2026 GMT
Subject: CN=4f8d39de9fbcf076e45feb865a1d1f5e7a9d4da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4f:e1:2e:1b:36:d5:b1:a2:87:9a:18:4e:25:
f0:9c:6a:6e:15:cc:db:c4:a8:fc:bd:e4:78:dd:6c:
87:3c:53:83:77:e2:bf:01:46:a7:9f:75:d8:99:84:
ff:89:6f:ce:f3:bb:e4:09:de:e2:dd:9e:fd:f1:6b:
ca:ee:7e:bd:fe:79:f5:45:cb:58:62:2a:87:cc:ec:
1c:65:55:3d:7e:94:1e:d1:9b:48:2f:3a:e0:d1:62:
ea:e8:3e:08:58:2f:35:6b:79:d8:07:9b:5f:5b:70:
f0:d7:87:44:c4:da:46:d0:04:e2:6d:01:f9:44:71:
1e:cc:9f:4d:ab:e5:12:9b:64:46:c9:9e:02:db:35:
d9:61:1d:18:84:db:6c:fe:17:83:e2:ed:d2:01:40:
44:f2:8c:7e:6b:dd:6e:33:b0:cb:02:d7:89:d2:bb:
d1:5b:5e:df:c4:78:73:b0:9b:7f:82:2b:4c:dd:45:
c6:41:ed:66:7a:66:ec:8b:fe:ee:1d:a9:0b:bc:8e:
10:2f:a4:35:d3:e1:c2:38:9e:7b:63:ba:ca:4c:80:
9c:b7:72:a3:28:00:ed:25:c5:9a:60:cf:0d:7e:83:
77:34:f8:30:e4:6b:32:13:72:01:c5:fc:fd:60:68:
0a:08:5c:d3:58:b8:a7:35:3b:c8:cf:28:50:b7:74:
ab:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8D:39:DE:9F:BC:F0:76:E4:5F:EB:86:5A:1D:1F:5E:7A:9D:4D:A1
X509v3 Authority Key Identifier:
keyid:C7:97:7A:7A:7D:2B:13:5D:5A:73:79:1C:A7:CF:3D:9A:DA:58:8F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5d6en0rE11ac3kcp889mtpYj2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:5c:24:1d:61:45:c8:9d:00:4b:7f:2a:76:75:a3:63:8f:e8:
39:c8:6e:a5:cd:81:e4:04:2d:9d:cd:07:a4:0f:08:6c:58:85:
a8:54:b4:1d:8c:6c:83:48:a0:1a:b7:d8:34:2c:38:38:b3:a3:
64:6e:6e:05:8c:9f:a8:57:f1:d8:8d:bf:a0:6d:6a:56:e4:53:
d0:30:64:22:ea:c2:71:49:4a:31:dc:d7:d3:de:06:68:49:20:
e4:8c:df:bb:c5:30:e5:e0:19:7f:2b:f6:16:97:d6:63:2c:16:
85:d8:64:c5:d5:f1:53:2b:a5:7d:ff:65:05:f5:c2:72:ca:0b:
8a:3e:31:fe:12:ae:e2:a4:e1:25:ed:df:a8:ca:07:55:98:af:
ff:82:1e:57:03:a5:37:72:d9:22:da:95:7e:16:88:65:ec:a3:
c4:e2:63:94:99:01:4b:c7:7f:5c:b0:fc:42:98:c6:02:d8:72:
b7:56:0e:19:8d:a9:b0:01:e4:66:11:7a:cb:b6:14:5d:0f:f8:
31:c7:cb:ee:a6:f5:d2:8e:a1:c0:75:8b:14:06:80:a3:29:c3:
4d:ae:6f:d0:74:82:76:a6:ad:14:41:66:7a:4e:dc:c3:bb:8b:
fe:48:7a:fb:ab:ad:2b:45:5d:12:28:b5:f3:dd:b9:58:0f:71:
e3:b8:51:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:41:06 2026 by rpki-client