Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
File: x6TS9okT6s5sn1CSvcfdIPV09Dg.mft (raw, json)
Hash identifier: XHFSx/Uprq7rDFI+BUJn/8OQ0nzzk0YxinTum9oEOdM=
Subject key identifier: 3A:11:4A:D6:5D:3C:3C:E2:0F:2E:3B:03:D9:A1:D8:75:0F:23:A3:E3
Authority key identifier: C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38
Certificate issuer: /CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438
Certificate serial: 019CAA216D65CA4C9F9D575AB74D4607E28C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
Manifest number: 184C
Signing time: Sun 01 Mar 2026 16:00:43 +0000
Manifest this update: Sun 01 Mar 2026 16:00:43 +0000
Manifest next update: Mon 02 Mar 2026 16:00:43 +0000
Files and hashes: 1: FXTyPwjMGAiU5KxW_Bfbg2AROHw.roa (hash: OnE+aJgFklXNXWETHHDMbnfVlcK0uF/bBVveHl9Em7A=)
2: T3lGsdRYO3Jiv8YeumY1-URxH8k.roa (hash: 2iZU0Zg9KB5iXER8e3UtbINmEwCtWsu/Q8hRWGFKAwI=)
3: x6TS9okT6s5sn1CSvcfdIPV09Dg.crl (hash: NlatEbfqkGH48yx8HxRAO/j3AYBHURiBQ1piV0fhya0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:6d:65:ca:4c:9f:9d:57:5a:b7:4d:46:07:e2:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438
Validity
Not Before: Mar 1 16:00:43 2026 GMT
Not After : Mar 2 16:00:43 2026 GMT
Subject: CN=3a114ad65d3c3ce20f2e3b03d9a1d8750f23a3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:61:aa:64:1b:52:27:3a:cc:3b:c4:91:12:8e:
62:7d:59:bc:e0:ea:e9:26:67:78:9c:0f:46:d3:ea:
a9:32:d0:e2:42:b9:c4:0e:4c:6a:6a:1a:5b:29:16:
83:9e:38:90:cc:b8:7c:64:6b:7a:67:ce:1a:6c:1d:
09:3a:3e:9f:2c:a4:09:ca:f1:36:93:d0:9b:fa:97:
91:48:db:0c:38:43:ed:bf:25:6b:10:52:64:92:52:
08:1b:ff:12:83:9c:6f:44:9f:bf:87:94:71:af:f9:
ba:60:3f:9a:f8:e0:af:49:6e:4b:70:3d:80:c5:53:
d2:ff:b7:7b:38:bf:a1:24:ae:cd:3b:5b:b8:f0:d8:
a9:26:4c:4d:22:c2:69:7d:78:0d:28:cc:e7:03:30:
e2:94:29:85:1d:b6:8e:66:d5:9f:89:0c:1a:e9:20:
68:16:01:df:65:ed:8f:89:db:2c:4a:ae:11:b9:40:
a8:20:70:27:5d:8f:22:1e:cf:a3:f5:80:e4:90:90:
e8:e7:66:ad:85:57:d8:a6:a2:bb:8c:8f:d9:ad:25:
70:3d:a9:8b:b3:03:ae:fa:87:93:57:f6:f6:59:0d:
3b:93:c8:66:97:13:4e:af:54:0e:09:17:7f:98:c7:
51:05:4c:d0:e3:df:d7:3a:b4:67:f8:7f:cd:03:46:
e9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:11:4A:D6:5D:3C:3C:E2:0F:2E:3B:03:D9:A1:D8:75:0F:23:A3:E3
X509v3 Authority Key Identifier:
keyid:C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ce:48:aa:e7:7c:31:65:21:b8:43:62:48:49:d6:47:34:fc:
48:25:90:12:08:95:e3:fc:c5:0b:ea:48:fa:0f:76:ee:19:de:
21:16:14:55:6e:31:0c:05:f2:39:4c:ff:03:07:52:e5:a2:83:
a7:a9:e7:4d:2f:31:b9:87:8a:68:55:32:97:83:6c:16:be:15:
6d:94:88:95:09:5f:7d:c5:8e:6f:67:e1:5e:5d:b7:d1:b5:96:
b0:bd:6f:67:e8:84:a6:6a:c4:6a:3d:f9:22:0d:53:10:80:9f:
73:41:25:62:98:b9:80:b9:2d:0c:71:bc:d3:63:a5:4a:99:06:
2d:c8:16:b4:6c:be:83:b0:33:d7:d1:ac:24:a7:4e:c3:af:14:
4b:30:5e:35:de:4e:52:73:b6:23:59:55:d4:7e:6f:53:9e:ff:
48:b0:fe:9d:61:12:a9:c2:c9:e0:7a:96:1b:78:91:e4:28:99:
c3:81:3d:67:b2:b1:09:cf:15:13:6d:5f:ce:20:88:2a:25:cf:
cc:5f:be:17:96:cd:43:9e:b9:b9:c7:ae:31:5d:a9:9c:62:c2:
b6:45:58:57:9d:6f:86:42:ce:b3:83:e6:71:03:f2:6f:b8:ee:
bf:09:a6:f5:de:44:16:cf:c2:bd:a4:3e:aa:8a:4e:b8:75:83:
26:92:d5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:52:15 2026 by rpki-client