Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
File: xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft (raw, json)
Hash identifier: hSNfm8ddaS87igDtpo3N8CsOgr3CT6tqz/6kWBI0+04=
Subject key identifier: DF:C4:28:FA:CD:5B:03:AD:29:C5:D0:08:DF:17:54:E1:B4:A7:50:33
Authority key identifier: C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4
Certificate issuer: /CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
Certificate serial: 019CAC46AF1415D4CCD96D239A27C07CBF2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
Manifest number: 093F
Signing time: Mon 02 Mar 2026 02:00:39 +0000
Manifest this update: Mon 02 Mar 2026 02:00:39 +0000
Manifest next update: Tue 03 Mar 2026 02:00:39 +0000
Files and hashes: 1: DXdb0QbgjHMGHimqfVTZInAkH0I.roa (hash: zClF7sUyyb6keJxNkbEQRGoa69WKNSmQnfjqa4nnCv8=)
2: rDKGPxVegdVjKSh5RnICAFOVm5s.roa (hash: Xcgmgg/GuSeVcsd6rM/OBeKREsZ93Yvuqbvwr0v7xYc=)
3: xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl (hash: PHvUHVuCn/+Eqpui4pStPwaT4rEhHPdVLOpan35EfYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:af:14:15:d4:cc:d9:6d:23:9a:27:c0:7c:bf:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
Validity
Not Before: Mar 2 02:00:39 2026 GMT
Not After : Mar 3 02:00:39 2026 GMT
Subject: CN=dfc428facd5b03ad29c5d008df1754e1b4a75033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:54:84:f2:d1:0c:a8:e4:6f:3b:2a:e2:ed:c1:
25:bb:6f:75:cd:5b:cf:bf:0e:2e:e0:70:c3:d4:7c:
40:7f:9b:5b:af:15:5c:d3:fc:fe:67:66:36:44:fb:
31:55:b7:0d:bd:a4:c8:1a:78:d9:b5:5a:e8:b3:a9:
31:21:c5:63:63:1f:a3:a4:53:36:c4:5e:5c:2d:02:
2f:e7:01:f6:06:16:12:a3:7f:9f:51:28:59:c7:7f:
49:69:22:d8:4d:57:15:ae:90:93:f4:dd:67:36:8c:
3b:f7:a3:10:41:07:a6:2c:95:0f:24:bb:08:43:07:
37:0c:d2:89:8f:78:a2:62:29:c6:25:63:95:b8:9b:
d9:98:19:84:68:c6:ae:73:8c:67:64:b4:dc:0f:59:
b7:2d:17:00:6f:e6:e3:c3:11:3a:b0:5e:8b:0e:63:
22:7d:ca:d1:51:d8:c0:6b:e1:e1:66:55:fd:84:e5:
0d:95:93:ac:22:b7:15:ac:b2:bd:15:b1:04:6d:66:
95:3b:9d:2f:09:5b:d8:10:e1:9a:d0:e1:3d:13:dc:
f9:07:60:1f:6e:0a:bc:d8:6e:fd:7b:32:3b:5b:01:
5a:a8:76:09:fa:e8:64:39:40:90:57:18:54:b2:c4:
55:5d:a9:7e:e7:b9:92:30:f3:6b:13:e9:f7:cb:09:
39:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C4:28:FA:CD:5B:03:AD:29:C5:D0:08:DF:17:54:E1:B4:A7:50:33
X509v3 Authority Key Identifier:
keyid:C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:c9:b8:83:65:5b:d7:e6:5e:22:d5:42:8c:66:55:e0:dc:a8:
d1:05:cb:4f:f7:a6:c3:09:d6:de:9b:3f:05:ad:bd:23:51:20:
8f:e2:e7:9f:20:bd:1f:02:8f:33:34:84:12:ee:27:a5:ae:78:
86:64:9c:6e:9b:18:94:48:1d:25:46:f6:6f:d8:3f:f5:b2:0e:
c4:35:c1:16:2c:ed:b0:a7:f1:d7:5f:f2:d3:1c:e8:17:55:14:
47:f6:c8:3b:f8:2a:ae:1c:c9:37:45:36:ea:09:1a:24:a1:f9:
ab:ae:00:9f:e8:ce:c5:01:88:c1:2c:f2:83:79:66:47:bf:03:
ed:33:05:f7:31:cb:8f:9e:96:65:12:12:1d:1d:43:15:2e:f4:
cc:56:c1:58:49:de:2e:da:64:32:07:8f:c5:22:c2:c6:cd:57:
fc:e1:82:87:a7:b0:c7:f6:30:b9:03:6f:cd:12:f9:36:54:a2:
51:0d:cb:35:e7:1f:fb:e1:03:86:f4:6d:b6:5c:f3:3c:f3:34:
92:64:5f:e0:87:c8:08:88:40:64:3d:2e:cf:20:80:8a:80:14:
36:1d:12:4e:7a:49:12:0e:29:c3:4b:29:21:87:6a:d6:89:b2:
fa:2e:1c:cf:1a:a0:fa:76:d4:3f:02:61:6f:56:a5:e4:9d:5a:
03:8f:f6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:16:47 2026 by rpki-client