Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft
File: xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft (raw, json)
Hash identifier: WevSc4DZ1SHVy5kUY9owXgTBKuc18CZeBa0FRIFYOlI=
Subject key identifier: B8:DF:46:39:B4:A4:28:E8:87:13:38:75:D8:5E:AB:C1:1E:BF:40:E2
Authority key identifier: C6:CC:F9:CE:97:D1:23:2E:01:62:FC:CD:43:F6:0C:4E:79:83:1E:1A
Certificate issuer: /CN=c6ccf9ce97d1232e0162fccd43f60c4e79831e1a
Certificate serial: 019CAD22FB609B11C6F6395351CD9DB2663F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsz5zpfRIy4BYvzNQ_YMTnmDHho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft
Manifest number: 0FA5
Signing time: Mon 02 Mar 2026 06:01:16 +0000
Manifest this update: Mon 02 Mar 2026 06:01:16 +0000
Manifest next update: Tue 03 Mar 2026 06:01:16 +0000
Files and hashes: 1: xsz5zpfRIy4BYvzNQ_YMTnmDHho.crl (hash: P65GbgAnAjAxSiVUxlQc0ZDsjV2WUZGyjN29rHjXPuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsz5zpfRIy4BYvzNQ_YMTnmDHho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:fb:60:9b:11:c6:f6:39:53:51:cd:9d:b2:66:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6ccf9ce97d1232e0162fccd43f60c4e79831e1a
Validity
Not Before: Mar 2 06:01:16 2026 GMT
Not After : Mar 3 06:01:16 2026 GMT
Subject: CN=b8df4639b4a428e887133875d85eabc11ebf40e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b8:64:a6:0c:8c:fa:2d:0f:5c:6c:ff:73:bb:
b9:d9:03:7f:59:7e:d4:ad:bf:23:66:2c:00:1f:ba:
f5:21:ba:7f:03:65:cc:0d:88:21:ef:41:9e:b5:99:
ed:3a:02:44:fb:38:42:81:47:42:45:a2:10:f4:ee:
44:dc:fc:02:b1:04:ab:49:13:e4:ef:0c:41:ca:43:
f7:05:c7:31:ca:b3:b6:89:c2:7c:7f:40:39:f8:66:
f0:87:c8:62:d6:af:bc:d4:30:3b:11:c2:7c:f0:cd:
bb:d2:3d:0d:c6:19:10:4c:58:70:ce:3f:1d:35:74:
6f:99:75:fe:1a:ac:ed:e9:0f:87:7d:39:67:87:81:
34:64:a8:b3:94:19:18:d4:4d:19:ac:e5:1a:5d:8e:
e6:e4:11:d6:2e:1f:b8:7b:7b:1a:3e:c0:43:33:b9:
d8:5b:02:3c:9f:a6:f6:1b:8c:d2:fc:1d:35:21:f7:
1f:55:db:16:36:e9:e7:db:0c:8a:70:57:70:39:7f:
1b:01:f8:ac:b4:b6:00:2d:8f:af:7f:66:5f:57:ec:
0b:2e:5e:3e:cc:c1:35:00:68:e4:a3:2e:07:c1:48:
5f:6c:8c:9c:eb:d7:61:c1:5a:1a:3f:1e:4e:1a:87:
81:a9:f6:20:0c:25:e7:54:56:8e:d8:a3:be:72:7c:
d7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DF:46:39:B4:A4:28:E8:87:13:38:75:D8:5E:AB:C1:1E:BF:40:E2
X509v3 Authority Key Identifier:
keyid:C6:CC:F9:CE:97:D1:23:2E:01:62:FC:CD:43:F6:0C:4E:79:83:1E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsz5zpfRIy4BYvzNQ_YMTnmDHho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:88:8e:a5:48:85:fe:bb:71:24:67:4d:f5:b8:7e:a3:c6:ae:
fe:f5:56:70:7c:70:8a:08:24:1b:9e:af:28:ca:65:90:89:d0:
75:d4:8d:15:6f:e1:83:8d:9e:76:79:f1:5a:a3:72:93:57:a8:
d8:3a:16:ac:dc:5f:c9:09:3c:83:bd:40:4e:fd:fc:a0:aa:87:
a4:91:38:34:bb:15:ce:b0:b4:93:6e:47:e6:1f:66:9b:e8:1d:
ba:04:12:0c:c3:1d:6e:2f:a2:66:64:f3:e2:ee:c1:9d:a1:b1:
a7:94:ff:d7:b2:8f:c5:d9:d4:f5:a7:4b:54:33:53:4b:b8:f4:
8e:1a:3f:a5:21:3f:f1:c7:22:4d:36:3e:d2:1d:8e:38:f3:7f:
c6:6d:f7:12:75:86:4b:98:68:80:50:7f:e0:f3:ae:71:e1:57:
7d:39:5d:6f:4a:10:81:c7:ca:87:18:fc:e5:da:1e:2b:7b:37:
81:2f:a6:47:ab:9d:ad:4d:36:fc:2f:b6:89:71:24:78:a3:bf:
dc:e9:04:24:95:bf:41:1c:51:87:3d:90:bc:b1:df:b8:f0:23:
bb:3d:d3:8f:74:e1:10:7d:a5:e5:aa:fb:d8:68:e9:ad:eb:d5:
03:f9:51:91:ba:29:2d:2a:92:01:c4:97:4e:c1:47:54:66:69:
d7:f0:ff:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:47:58 2026 by rpki-client