Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
File: XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft (raw, json)
Hash identifier: pM66OOLHyrl7gahb5cBtKc0uqsXIAbLfFIgwc3mkt/c=
Subject key identifier: F8:1B:4F:0A:D4:A3:6F:00:DB:5F:63:01:CB:62:A0:67:DA:9E:5D:7C
Authority key identifier: 5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49
Certificate issuer: /CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249
Certificate serial: 019CA97C6692940BF42C0BEAAB2B584F29D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
Manifest number: 0344
Signing time: Sun 01 Mar 2026 13:00:28 +0000
Manifest this update: Sun 01 Mar 2026 13:00:28 +0000
Manifest next update: Mon 02 Mar 2026 13:00:28 +0000
Files and hashes: 1: 9t-kj9KSgE_mtJrGu_vF73d0l6Y.roa (hash: 51rv5VaG8OxclhZBSDZarO+xxvZazg5aJ0EVnW1xLb4=)
2: Cp2g6yP8AZxNfoA9Wugu4JCgHtU.roa (hash: dD5+5+i7pHxfaDCaP1GC9Pk/dDoxKx8XSPEPjuWP/AY=)
3: LFwn43xTYGqoLZrK3ArerlmBrjQ.asa (hash: AxTumCJIWLYkfNBVRk61fjyr7ogt1SGEuY0CQ+zm9dQ=)
4: Nc1LVsFzrH3eQcfHMAmDYgj_p64.asa (hash: /m2FPHvyf0O1/JM/QcuY6SFVqTD2GvTjahW6Zjqr3lE=)
5: XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl (hash: fQOVI4uQR32vUgjlqN092sy7AB+RqDo54e0cicD9meM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:66:92:94:0b:f4:2c:0b:ea:ab:2b:58:4f:29:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249
Validity
Not Before: Mar 1 13:00:28 2026 GMT
Not After : Mar 2 13:00:28 2026 GMT
Subject: CN=f81b4f0ad4a36f00db5f6301cb62a067da9e5d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:76:3d:82:5c:b8:b4:38:47:28:9f:50:8a:5a:
66:0d:ea:85:29:4f:0f:95:ee:a7:8d:fd:1b:c2:d1:
c9:95:b8:56:fe:74:9e:c7:d1:d5:e7:43:78:e5:20:
95:a9:df:67:60:dd:63:b5:c5:1c:8c:fb:df:57:e1:
7e:d4:45:53:7f:e3:11:9b:6e:08:41:2e:8c:d7:df:
fd:73:38:4f:48:78:8b:31:ec:2d:9f:d8:bd:48:e5:
48:a1:23:2d:35:1e:75:f3:21:40:90:6c:2d:b1:e2:
18:be:a6:d9:d0:02:fe:7f:44:9a:83:f5:70:f9:a0:
5c:c2:68:2d:a6:82:33:a4:d3:45:00:d7:62:25:7d:
0e:41:cf:11:48:d2:ce:98:b9:e3:a6:bb:e7:fa:b8:
07:21:41:29:b4:e8:e8:b5:f8:ea:a1:fe:d0:62:12:
f4:33:47:3d:55:31:9b:38:08:99:68:af:ab:25:72:
22:02:a5:15:70:9b:ca:4d:0a:b0:f1:2f:26:0d:36:
fa:ea:cd:1b:ad:a2:8c:b3:2b:66:1d:60:33:ba:95:
e8:94:fb:ec:70:2a:7f:6e:d6:1b:f8:be:00:87:f5:
28:c1:04:53:1d:0c:c6:2f:8a:32:b0:9e:bb:79:b7:
f3:38:26:26:c1:64:05:21:5a:eb:0f:c1:7b:45:5c:
9c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1B:4F:0A:D4:A3:6F:00:DB:5F:63:01:CB:62:A0:67:DA:9E:5D:7C
X509v3 Authority Key Identifier:
keyid:5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:93:15:fd:98:91:fb:30:1f:3f:ca:8c:7c:ab:53:df:2b:df:
a9:6d:f1:82:8f:1e:36:37:6a:23:85:bb:12:11:15:c7:51:29:
01:1f:16:d5:07:3d:47:5c:15:ce:c4:fa:f9:9e:9e:01:b8:34:
a1:0b:41:fd:00:b8:bc:c3:70:7a:7f:fc:fa:35:a3:3f:a3:77:
e5:92:5e:7c:f0:42:9d:7e:b4:0e:47:e8:03:c3:40:c8:d1:6e:
80:97:3d:b1:dc:47:fd:1d:a6:d4:6b:f8:d2:b4:81:b4:9a:1c:
eb:47:74:40:75:c7:e2:3f:55:99:ea:23:e0:3f:22:b0:24:a8:
40:05:5e:7a:06:ab:74:28:37:9c:94:75:4a:2d:e1:36:55:b8:
fb:65:90:1f:20:ab:80:8e:0a:1a:ad:7e:02:18:e7:6d:b1:21:
a3:cf:be:a1:7f:06:3a:7f:7a:b4:43:3a:25:ee:72:0a:fd:87:
f3:92:4a:b5:dd:ca:60:64:a8:df:38:97:48:5e:8b:cc:1b:55:
90:fd:49:03:c5:fa:ec:95:d9:5a:40:26:d5:96:4d:33:ea:98:
4e:ca:4f:75:6d:1a:f9:7a:6b:33:44:fa:bf:f3:8a:55:1a:26:
c3:0b:91:ac:8a:b4:10:92:17:7b:13:00:d2:d1:ac:90:da:3c:
2a:43:4c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:47:52 2026 by rpki-client