Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
File: xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft (raw, json)
Hash identifier: pc0/B/RXcdLqLloSK0JOUNkcMKrwKFH3gWBGXS3uVRA=
Subject key identifier: 4A:A1:F8:BD:9E:1B:AA:36:1F:70:F3:63:68:33:A5:31:86:9C:04:2F
Authority key identifier: C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24
Certificate issuer: /CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24
Certificate serial: 019CAC46A8C6F800A62003E39384D8AE6E0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
Manifest number: 169C
Signing time: Mon 02 Mar 2026 02:00:37 +0000
Manifest this update: Mon 02 Mar 2026 02:00:37 +0000
Manifest next update: Tue 03 Mar 2026 02:00:37 +0000
Files and hashes: 1: RA_P8M2CbE3vpnTaUf4TR1pQq4c.roa (hash: sqZi/SBA/dg8k8Qf9vK6EYY7YFO+mp6oMfC87nRDLEY=)
2: xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl (hash: w2XJtz0krF5u8ywsfdVWNWi5Jz6WfyfB9Ctg6pJK5Ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:a8:c6:f8:00:a6:20:03:e3:93:84:d8:ae:6e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24
Validity
Not Before: Mar 2 02:00:37 2026 GMT
Not After : Mar 3 02:00:37 2026 GMT
Subject: CN=4aa1f8bd9e1baa361f70f3636833a531869c042f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ad:5d:48:31:a6:c9:61:9e:77:c0:11:5b:28:
b9:6c:9a:07:43:24:6d:ce:d7:8f:39:90:e9:cd:e8:
cc:c7:46:e5:28:86:1d:5c:81:e5:f0:93:51:fa:7f:
6c:c7:57:15:e6:31:e1:b4:e9:f1:72:82:9c:4b:60:
75:ae:ad:c9:e3:87:d9:21:d2:93:49:dc:1e:b8:ea:
3a:e3:e4:3b:89:ef:37:64:9c:f7:56:7f:17:08:59:
15:64:17:ff:69:90:5a:0d:74:f9:63:b2:10:c8:86:
57:3c:a0:1a:f6:eb:6f:fc:5f:74:fb:79:9a:a2:f7:
78:66:6f:9c:ba:31:8c:56:f9:73:3f:05:34:b2:82:
a9:92:2c:a7:59:d0:1d:09:94:bc:66:3a:f0:44:98:
fd:13:c8:f9:67:c0:a2:58:27:61:67:a9:54:3e:76:
f7:ab:46:13:fa:f5:12:6c:62:8c:e2:20:6e:24:56:
7c:93:33:2c:d6:95:85:8f:1b:c7:c6:51:b6:d3:38:
99:49:11:8a:ac:2d:56:59:c8:d9:d4:37:f8:a2:d5:
1f:d0:74:63:ca:32:01:30:2e:1b:64:be:c9:b8:91:
4d:b6:5a:a1:27:7e:72:74:c2:28:be:9a:ca:b6:59:
cf:82:86:87:79:b0:5f:83:b6:ae:3a:3e:7c:0f:e9:
5e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A1:F8:BD:9E:1B:AA:36:1F:70:F3:63:68:33:A5:31:86:9C:04:2F
X509v3 Authority Key Identifier:
keyid:C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:3a:6b:5e:b2:bf:88:0b:fe:90:18:8f:66:f4:50:1c:a4:42:
0c:e3:a7:0f:b5:fe:ec:47:5d:4a:ba:6c:8d:2a:64:ba:36:be:
36:d1:5d:20:55:a8:5c:6b:d5:f4:67:8f:85:7e:14:5b:0d:b4:
5d:dc:0b:c1:c9:01:a1:44:9e:b2:87:74:f7:d9:c7:7c:d8:29:
07:99:9d:a0:02:87:5a:ed:55:8f:c5:2f:af:b6:b7:40:74:fb:
21:d1:2e:81:33:c4:2d:4c:54:52:cb:c1:ab:43:6b:f1:2a:fa:
c2:13:d7:43:fd:ff:a0:f5:b9:2a:c7:fb:4f:f3:7e:80:7e:f3:
72:1b:8a:4b:9e:8b:97:5b:7c:e2:7c:b1:93:f4:7e:81:4a:fd:
d5:92:c1:ac:18:0e:fe:35:26:c2:72:05:3e:47:09:e3:62:a7:
06:a0:39:1f:9f:29:66:db:84:13:e3:4c:b3:eb:cc:fc:d8:c2:
36:8d:50:99:32:ad:f2:15:e1:62:12:8e:89:96:7a:1e:33:67:
59:1d:35:1c:9e:3c:a8:1c:93:02:46:4d:5d:36:0b:f2:bc:56:
1a:04:a7:e4:87:eb:b2:1e:9d:4e:44:c4:52:00:95:02:c7:ba:
7c:9b:42:25:9f:6b:5c:bb:5f:e0:e9:c3:00:16:9f:96:40:cd:
66:da:8c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:21 2026 by rpki-client