Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
File: Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft (raw, json)
Hash identifier: 7zQclBBzLZo6rgNzZ95vWb4iTyxFMknMHJYsIBNpd3g=
Subject key identifier: E7:D8:A5:BA:9A:36:44:26:02:13:3C:D7:F7:EB:DF:05:CF:3A:64:61
Authority key identifier: 5D:FF:73:A8:B2:18:35:82:BB:4E:FD:7D:E8:57:D4:81:F6:D4:B4:60
Certificate issuer: /CN=5dff73a8b2183582bb4efd7de857d481f6d4b460
Certificate serial: 019CACB569E311B1007AF21F012B83D2BF91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
Manifest number: 1229
Signing time: Mon 02 Mar 2026 04:01:36 +0000
Manifest this update: Mon 02 Mar 2026 04:01:36 +0000
Manifest next update: Tue 03 Mar 2026 04:01:36 +0000
Files and hashes: 1: Jqfmht0PAQt2HnSQZ-I_FzAJ46Y.roa (hash: cjrDpM/5EqcBfOXqNWcxU7B1Z2/Qb7RmnI4w4dT/TqI=)
2: Xf9zqLIYNYK7Tv196FfUgfbUtGA.crl (hash: jVA+mZDtSjhR6mTVdFKyVLICpt2CaV9sqLAGkCOEUOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:69:e3:11:b1:00:7a:f2:1f:01:2b:83:d2:bf:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dff73a8b2183582bb4efd7de857d481f6d4b460
Validity
Not Before: Mar 2 04:01:36 2026 GMT
Not After : Mar 3 04:01:36 2026 GMT
Subject: CN=e7d8a5ba9a36442602133cd7f7ebdf05cf3a6461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:17:24:4e:32:19:c7:a5:d8:8d:cc:51:a9:0f:
21:99:fd:c9:f2:9c:3a:6d:16:b9:e4:c8:c9:09:50:
1e:34:e4:2f:81:b6:80:17:06:b2:66:98:da:8f:45:
e0:0e:e4:03:75:b9:c3:48:d6:22:b6:26:b1:43:42:
84:36:d4:ae:c6:5f:f7:03:aa:69:7b:08:21:36:b3:
39:7c:d5:84:bb:fe:c8:73:ef:69:f9:a8:e9:ba:30:
51:e1:04:bd:c6:53:eb:62:0d:85:5f:1e:ca:a3:19:
89:74:8c:de:67:83:b5:49:0f:b8:ba:2d:41:41:42:
1e:5b:3c:7b:e0:bf:88:25:a3:ce:9e:85:fb:85:3b:
9b:09:28:14:eb:94:4d:d5:b1:fa:03:4a:5b:fe:48:
62:63:3d:72:46:90:72:98:25:31:c1:98:c9:56:8d:
58:a2:f5:58:39:5b:0b:7c:86:be:67:84:ed:62:bd:
ac:9e:56:53:5a:82:cd:c5:3e:12:81:b0:92:5f:95:
63:4a:92:c8:f0:a7:a6:07:7e:e6:62:11:0b:2f:47:
49:44:d5:02:49:be:df:c7:20:7b:3d:c0:59:21:b5:
7b:0c:0e:fe:66:a9:93:ee:2d:02:e8:0e:e5:55:ba:
43:c5:c4:0d:e4:56:62:cc:96:53:4d:06:3f:03:27:
b2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D8:A5:BA:9A:36:44:26:02:13:3C:D7:F7:EB:DF:05:CF:3A:64:61
X509v3 Authority Key Identifier:
keyid:5D:FF:73:A8:B2:18:35:82:BB:4E:FD:7D:E8:57:D4:81:F6:D4:B4:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:85:d0:c0:b7:52:d7:09:0a:50:36:ef:dc:44:b8:7a:28:ba:
43:58:d0:43:2d:fb:82:78:21:3c:98:f4:b7:08:21:87:e9:57:
03:94:be:44:4e:b0:32:ff:ee:1a:09:a4:0a:bd:94:c5:8c:69:
08:aa:e6:aa:6a:66:ae:f5:04:0b:23:b2:33:52:6e:e4:4b:f6:
e1:1a:32:b5:b2:e1:ee:0e:14:79:bb:87:aa:b1:2b:1a:45:78:
93:fb:91:75:db:9e:b4:d5:43:52:f5:d5:71:1e:ae:34:77:f4:
e3:12:06:49:45:38:62:f7:66:b5:56:d5:e4:c9:6d:41:74:55:
c7:4f:0b:a0:2b:3d:fb:7e:8b:cb:6f:26:03:a7:4b:9c:b5:25:
23:2a:52:8d:86:e4:8f:5e:8b:e1:d4:81:e8:1c:91:45:18:16:
a4:49:e0:45:46:11:6c:ba:81:62:fa:44:40:2e:33:f5:df:94:
e5:4a:dc:95:8c:f5:68:3c:98:b9:64:4f:a3:26:1a:1b:c5:f9:
14:40:18:e0:dd:62:1c:36:a8:43:d7:2d:33:50:66:87:ef:e8:
67:4f:b3:50:b8:4e:ba:30:3d:db:39:8f:6d:e7:db:2a:56:ae:
ae:75:a1:27:bc:e6:aa:31:6a:a9:8e:bd:d0:ec:a4:6f:95:fd:
dd:cb:39:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:19 2026 by rpki-client