
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
File: xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft (raw, json)
Hash identifier: pruAmfMuGNnMFcp1IwVRJQ5M1GS3BFmvxSTiIetcrJg=
Subject key identifier: 93:F5:E9:52:CF:6A:EA:35:F1:20:F7:3A:2F:9A:09:B0:9A:67:B9:69
Authority key identifier: C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
Certificate issuer: /CN=c576ba0c098dc472186223c91e7def5216e239f1
Certificate serial: 019CABD9C5B7E5094F7EDF746CD7D959C29D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
Manifest number: 073C
Signing time: Mon 02 Mar 2026 00:01:41 +0000
Manifest this update: Mon 02 Mar 2026 00:01:41 +0000
Manifest next update: Tue 03 Mar 2026 00:01:41 +0000
Files and hashes: 1: D93aVb7wrIXUaG1-CC-3JUagYOE.roa (hash: /8ReYoccQ/vVAZ/EZIZ9ttYSoWEPANiLCShHLXPhYb0=)
2: xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl (hash: AYjl72Co7dbAxQeIDPXSRsN6je79RdYJyk2JcvS2CrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:c5:b7:e5:09:4f:7e:df:74:6c:d7:d9:59:c2:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c576ba0c098dc472186223c91e7def5216e239f1
Validity
Not Before: Mar 2 00:01:41 2026 GMT
Not After : Mar 3 00:01:41 2026 GMT
Subject: CN=93f5e952cf6aea35f120f73a2f9a09b09a67b969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4f:6e:28:a1:bd:17:5e:35:f8:6a:1e:55:e7:
a2:0f:53:b7:d6:69:7f:a0:ce:2c:96:6d:07:79:74:
36:12:a8:64:2d:e6:0a:59:65:35:1c:55:9e:64:68:
94:13:4d:f8:b4:1d:7b:92:08:19:dd:43:42:ab:8b:
7b:35:0b:28:51:bf:da:75:f7:5b:47:61:73:cf:54:
9f:08:34:0a:4e:bb:af:03:9a:13:e4:b2:45:a9:eb:
62:64:8c:00:01:53:5f:f0:e7:9f:31:c6:a7:e8:9d:
0e:74:52:82:14:66:ac:ab:9b:e5:1e:a8:dc:90:a1:
b5:7b:8a:3f:a1:b3:f9:71:db:04:86:57:71:c9:4b:
80:49:64:f8:ea:fd:6d:65:cf:dc:fa:67:7b:11:f9:
c7:ce:95:7a:ad:3e:be:81:e9:92:22:59:9b:d1:75:
22:62:fa:85:df:dd:62:df:c6:61:b5:2c:db:df:c9:
07:37:99:66:43:82:88:be:5a:1c:da:45:2e:ae:78:
82:48:b3:9b:e7:06:ad:66:e5:2a:97:98:ce:12:18:
82:64:b4:2d:9c:25:f5:0e:08:46:1a:4a:fd:9b:2f:
aa:f0:d9:e6:f3:be:6b:53:be:56:df:c0:1b:b1:51:
72:b7:f4:eb:50:94:6e:a8:3c:dd:84:9f:47:1f:4c:
d3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F5:E9:52:CF:6A:EA:35:F1:20:F7:3A:2F:9A:09:B0:9A:67:B9:69
X509v3 Authority Key Identifier:
keyid:C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:60:a2:62:50:06:21:fe:94:cf:7e:a3:29:72:f4:77:23:b3:
3b:69:ac:59:f4:4f:6f:62:a0:82:26:6c:f7:b9:9e:db:d1:9a:
39:49:ca:a6:2d:2e:fb:fc:b8:07:90:db:3c:60:81:1b:e1:ae:
b8:61:7c:b7:5d:cc:b0:b9:d8:76:ec:fe:81:d3:e8:eb:82:14:
54:3d:d1:c9:bb:93:65:86:34:71:6c:7b:a4:6d:fd:a2:c8:98:
e3:7d:67:d7:74:af:f6:f2:c5:02:b1:96:7b:fe:a0:b1:5e:81:
4c:bd:32:4f:1e:c5:de:9f:d6:b8:a9:27:57:66:2b:d1:b6:16:
e2:e4:69:0b:0d:4e:b6:da:12:5e:ca:28:96:19:8c:bb:52:ae:
c1:6d:51:bb:45:ba:77:21:45:dc:9a:6d:8e:d9:85:85:02:29:
73:b4:e6:85:7f:e3:4e:f7:5e:f2:b4:f9:a1:7b:e3:ff:9b:71:
11:b2:8c:33:cc:3a:ba:60:54:ef:6f:68:fa:f6:6c:17:f1:39:
d8:c1:d9:2e:31:d6:e8:fc:80:e8:86:1c:63:36:6d:12:d7:4f:
78:26:19:61:a7:68:d9:da:2b:f2:3c:9b:bf:4d:6d:27:fd:29:
59:5c:04:90:5b:80:78:84:eb:24:d4:29:7b:b5:06:55:cf:f0:
d3:fb:f9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:29:11 2026 by rpki-client