Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
File: xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft (raw, json)
Hash identifier: ynaREGVpd2KiuwJAseUKsjweFx4jrrW6gJ187/uFq7Y=
Subject key identifier: 68:6E:80:98:EB:53:7E:6B:A1:58:8B:37:EC:BB:E9:34:63:49:4B:E9
Authority key identifier: C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
Certificate issuer: /CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Certificate serial: 019CAB6B11A7D73702C49A108C42B1BA27D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
Manifest number: 0561
Signing time: Sun 01 Mar 2026 22:00:46 +0000
Manifest this update: Sun 01 Mar 2026 22:00:46 +0000
Manifest next update: Mon 02 Mar 2026 22:00:46 +0000
Files and hashes: 1: tOUQl2J5Wpm8LcDuYGUnej7OiFY.roa (hash: 3SzovpialpEoSK1tVIj0K+EFB6CyFsxOHbtKDkoQSb8=)
2: xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl (hash: eDXWPceMUtGWbN4pa9S6eKwEVRQjsUqf7SDlV365shs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:11:a7:d7:37:02:c4:9a:10:8c:42:b1:ba:27:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Validity
Not Before: Mar 1 22:00:46 2026 GMT
Not After : Mar 2 22:00:46 2026 GMT
Subject: CN=686e8098eb537e6ba1588b37ecbbe93463494be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bb:20:49:19:8a:ba:6f:98:81:24:c3:ae:fa:
57:66:b0:06:36:c7:10:01:fa:90:8f:4c:2d:5f:9f:
ec:9b:fe:37:56:a2:50:d7:ed:3e:4f:84:72:5e:f7:
b8:ae:69:83:ae:ab:42:2c:52:4b:44:22:7b:16:75:
ba:9c:11:d6:b8:d0:b6:e6:aa:20:0d:89:01:ca:49:
ed:a5:ba:a2:b3:85:9f:0b:c0:79:10:79:6d:6a:09:
47:58:2e:fd:2d:d7:51:2e:9c:82:dc:13:a0:4b:37:
ac:07:b4:f6:42:17:bc:ff:d0:4c:8b:f1:54:d0:d7:
37:7f:0e:05:b7:99:30:05:30:f3:10:11:8c:69:27:
ac:a2:5f:e9:e4:09:d9:88:04:1b:ae:29:1d:7b:ca:
9f:e4:3c:87:b8:69:fd:9b:4f:fe:bd:d4:1f:f0:95:
f6:f2:95:07:59:2c:ae:49:ec:14:7a:52:dc:c1:18:
6e:38:0d:90:33:16:72:e6:ac:13:6e:aa:05:b0:28:
d3:7e:f6:d5:3c:7f:67:c1:0b:81:91:d2:14:a2:ae:
df:1d:d8:4c:e9:08:54:00:c9:6b:ec:b7:6e:43:ec:
79:97:b5:63:22:b0:ef:7b:23:69:1f:1a:33:1c:c7:
d1:4b:71:2e:aa:f4:0f:9d:92:00:4c:4d:3b:70:f7:
26:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6E:80:98:EB:53:7E:6B:A1:58:8B:37:EC:BB:E9:34:63:49:4B:E9
X509v3 Authority Key Identifier:
keyid:C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:0a:7a:54:68:c5:50:28:5f:92:ee:b0:5b:28:4b:f0:f7:84:
b5:1f:7e:f0:d9:f3:02:e7:04:dc:bc:48:0d:a4:17:18:3f:6d:
e4:8b:ca:2e:26:d1:75:e5:b6:bb:87:32:64:3f:f7:93:3c:57:
de:86:ce:1b:19:ee:c9:f1:47:b6:bf:f0:60:6b:af:96:31:3c:
f0:65:21:ea:be:2f:5f:37:1e:8e:1b:0f:fe:58:95:b5:90:d2:
db:1f:e6:1b:d7:86:75:af:b5:c5:3f:9c:f3:16:6f:d7:32:f2:
bf:18:0b:f2:3b:74:67:b6:ed:a1:f4:de:e0:cc:eb:64:10:75:
f3:a2:10:01:15:dd:82:ff:cf:04:9d:ef:1d:98:2c:77:f3:21:
9b:2d:c9:20:c0:7f:4d:2b:7d:a0:db:bf:43:02:10:06:b4:4c:
21:b6:48:6c:f1:5e:6b:38:95:16:c1:8d:a3:5c:d2:11:0f:69:
66:52:13:34:6d:33:51:82:05:e6:d7:43:7a:09:6e:ce:ca:58:
46:84:96:1d:4f:de:b9:6d:61:70:6d:75:64:af:d9:52:ea:c6:
29:3e:21:46:e4:f2:0f:dd:4b:8e:4d:49:ac:db:57:05:95:10:
63:e8:bd:82:b4:84:05:db:ed:9f:8c:67:46:f8:19:90:57:2d:
b3:60:f2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:34:33 2026 by rpki-client