Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
File: xXHZWAqPAeScYcX8_f8uWJlTS48.mft (raw, json)
Hash identifier: WCMPuaM0xfMV0F4ufwThsIhlVxLwZUlruBacKes0a08=
Subject key identifier: 2A:E4:FF:17:A5:91:91:71:36:47:C6:49:2A:88:C7:18:37:AF:F8:60
Authority key identifier: C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F
Certificate issuer: /CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f
Certificate serial: 019CACB488BA4215583FAECC3FDBC6032800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
Manifest number: 06FB
Signing time: Mon 02 Mar 2026 04:00:38 +0000
Manifest this update: Mon 02 Mar 2026 04:00:38 +0000
Manifest next update: Tue 03 Mar 2026 04:00:38 +0000
Files and hashes: 1: uWNKx0IJVXvtTHYU4bkunZTjfuw.roa (hash: AUH4XmlqocQ9F/9lHvt0FvG+HzGfyUQaY0PdFUq9T4I=)
2: xXHZWAqPAeScYcX8_f8uWJlTS48.crl (hash: W63M5mKXKniMWFyym0MK+65i4TiC+2/LDZuGNKcl5S4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:88:ba:42:15:58:3f:ae:cc:3f:db:c6:03:28:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f
Validity
Not Before: Mar 2 04:00:38 2026 GMT
Not After : Mar 3 04:00:38 2026 GMT
Subject: CN=2ae4ff17a59191713647c6492a88c71837aff860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1d:77:fa:48:f3:14:82:0c:b1:3d:73:20:42:
c3:c0:04:89:e2:4b:3a:a0:41:d6:1e:90:f6:b5:18:
0a:00:f1:83:38:0d:05:29:cf:79:92:28:3a:7b:2e:
3f:41:2d:03:f5:2f:be:54:11:fa:01:6f:a2:a3:8d:
ed:34:f7:12:00:15:ae:ae:dc:c0:b0:94:d4:85:dc:
b4:30:27:1c:20:58:7e:c5:ec:f2:68:b2:51:ea:65:
9a:23:36:3c:aa:0a:39:e5:c4:ec:4e:d4:5e:e3:7c:
e3:d6:3f:63:d8:6e:e9:b2:1a:8d:f6:84:d2:1d:fc:
78:0c:a6:0c:5d:42:ae:6f:c4:cc:14:9b:f3:19:f7:
1b:bb:6e:26:b7:ff:f7:c5:fc:d0:f1:10:e2:73:51:
83:aa:1d:49:ee:4c:fc:e6:1b:d2:b4:b4:4a:a3:93:
cd:f5:4c:5a:d0:c5:0d:ee:53:fd:61:df:a6:06:d2:
91:fe:96:65:c3:19:dc:2e:b1:5b:e0:23:07:b3:e8:
ac:e3:02:8b:cb:0e:ba:45:40:ce:94:d9:23:04:e9:
85:57:68:d1:46:8f:b1:93:ad:9e:0d:6d:b4:6c:54:
6c:e6:4e:48:05:a2:68:ae:fc:b9:1b:69:88:40:4b:
a0:d8:ea:ee:ab:2d:e0:55:92:72:90:28:69:ae:24:
aa:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E4:FF:17:A5:91:91:71:36:47:C6:49:2A:88:C7:18:37:AF:F8:60
X509v3 Authority Key Identifier:
keyid:C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:e5:1d:92:cf:00:26:fa:56:70:25:d3:0d:67:c9:7e:0c:fa:
b0:db:b2:09:a6:9f:55:47:29:1b:4d:01:43:9d:0f:44:7c:52:
c2:83:0e:e5:19:bd:2e:3f:58:bd:35:8f:9e:7e:b7:ce:81:8d:
ab:39:06:8c:34:2d:15:4f:f7:89:cf:4b:be:f6:e9:80:0f:df:
29:f7:4a:95:ea:22:64:78:fd:1d:16:ab:0a:69:b3:b6:82:6f:
10:d1:b6:da:26:5b:0e:20:62:f4:69:a6:80:88:fe:e8:a1:19:
4b:0d:a1:48:30:14:66:df:e3:27:ff:a7:be:f6:92:72:fe:a8:
0e:15:27:16:b8:94:5c:c9:b4:93:70:bc:e8:5e:91:a3:c2:3d:
18:ed:69:be:e1:a9:af:3f:d2:82:b3:5b:f6:8f:bb:01:ed:93:
35:ea:9a:12:08:70:20:09:d3:4f:9b:f2:2e:f9:eb:ec:a0:63:
8d:7e:5e:7c:e8:94:ed:b3:83:b2:75:80:e3:87:d1:7d:33:df:
ee:a2:f8:a2:e4:7a:2e:54:84:88:7e:65:a6:58:ac:94:3d:35:
91:47:43:f1:94:4d:92:b7:fd:e1:42:ed:d4:8e:46:f3:37:91:
c6:44:ca:7f:66:40:6d:68:c9:32:95:7b:7b:e1:85:0c:b6:df:
89:8f:9b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:00:20 2026 by rpki-client