Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.mft
File: xJkOwgER9C-2LzmoHHOSqSGVW_I.mft (raw, json)
Hash identifier: ycKLJItVi4zO0souRCofiPzq1UnAI3GbKS821mgoZ6A=
Subject key identifier: B3:9A:44:06:6F:48:FE:DF:3C:93:D2:58:1D:CA:D9:A2:82:C5:02:D4
Authority key identifier: C4:99:0E:C2:01:11:F4:2F:B6:2F:39:A8:1C:73:92:A9:21:95:5B:F2
Certificate issuer: /CN=c4990ec20111f42fb62f39a81c7392a921955bf2
Certificate serial: 019CAC7DF210ED88D34405EEBD2F6DA0FBC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJkOwgER9C-2LzmoHHOSqSGVW_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.mft
Manifest number: 04A9
Signing time: Mon 02 Mar 2026 03:01:00 +0000
Manifest this update: Mon 02 Mar 2026 03:01:00 +0000
Manifest next update: Tue 03 Mar 2026 03:01:00 +0000
Files and hashes: 1: 9xmBM7L_OxbERlsRfyJd0cq_X64.roa (hash: eKCgpHNS7X6MicYQsrZGeTzZ5yIaoRnXGdc8m8M+l4U=)
2: xJkOwgER9C-2LzmoHHOSqSGVW_I.crl (hash: l5pQ0p4z+24apImeh8YtUJPOW6awGeopKnK8erbWmF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJkOwgER9C-2LzmoHHOSqSGVW_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:f2:10:ed:88:d3:44:05:ee:bd:2f:6d:a0:fb:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4990ec20111f42fb62f39a81c7392a921955bf2
Validity
Not Before: Mar 2 03:01:00 2026 GMT
Not After : Mar 3 03:01:00 2026 GMT
Subject: CN=b39a44066f48fedf3c93d2581dcad9a282c502d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d5:a6:eb:af:9c:15:0c:26:d8:eb:a9:ea:03:
a3:30:8a:bd:b1:07:6e:30:2b:0e:db:f9:1b:27:ab:
2e:34:4a:4b:12:c4:73:16:63:c5:a8:82:2c:33:c3:
2c:7c:5d:7e:22:89:4f:68:e9:45:a0:57:68:c3:6f:
8c:fd:62:70:35:e8:e6:5e:82:5b:d3:5f:11:bd:be:
93:e7:b0:72:6e:52:1e:07:4e:6d:b0:d0:9a:5c:5a:
ca:c8:f6:34:e9:ed:28:fb:6b:7a:78:5c:2b:89:31:
1c:e4:45:95:8e:e2:eb:c4:4d:cd:11:6c:95:88:94:
89:ee:9d:78:e2:cb:2f:92:30:ee:71:64:67:af:32:
94:6d:91:a6:96:b3:7e:3c:53:3d:fa:8b:66:23:87:
47:ae:8d:c5:31:3c:5e:db:50:54:fa:04:88:df:dd:
fb:07:75:c8:1d:d7:1d:f8:7c:59:c5:1e:e8:13:15:
18:77:75:df:93:d3:5e:1b:8b:59:15:ea:63:33:18:
71:eb:40:0a:a8:8b:0b:aa:1e:10:19:29:1d:cd:3d:
d0:5b:3c:ef:57:cd:c2:e5:ac:0d:b1:74:63:2d:03:
49:4c:7c:ab:90:a2:12:73:56:7f:2c:df:ea:b1:40:
3d:cd:09:9d:df:24:07:28:d7:55:a9:07:78:6c:ea:
d0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:9A:44:06:6F:48:FE:DF:3C:93:D2:58:1D:CA:D9:A2:82:C5:02:D4
X509v3 Authority Key Identifier:
keyid:C4:99:0E:C2:01:11:F4:2F:B6:2F:39:A8:1C:73:92:A9:21:95:5B:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJkOwgER9C-2LzmoHHOSqSGVW_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:0d:af:1f:29:ed:f5:24:32:de:61:5a:21:bd:6b:f2:07:72:
40:eb:23:c8:27:69:be:05:90:08:55:89:8b:17:1f:94:5d:8d:
eb:41:5f:e7:da:55:6e:7d:d9:85:ec:0f:30:3f:3d:7b:88:7e:
c8:b6:41:c9:6e:1b:74:07:1f:4b:fc:7c:1f:c1:a8:d3:ee:99:
3c:fa:3d:6f:bd:66:9b:4b:18:6e:56:1e:75:96:30:06:e6:0d:
bd:95:4f:53:c9:7e:0c:1e:ab:3c:2b:0c:84:c7:e0:44:62:e5:
e3:b5:3b:2c:de:60:3c:1e:07:30:9a:ad:2c:06:8c:77:15:e7:
eb:dd:30:7d:76:a7:56:3c:f3:69:c9:e0:eb:b4:4a:8d:da:04:
bd:69:72:03:1b:b1:86:7a:3f:81:0e:86:3f:e4:dc:44:c0:38:
75:99:d5:a5:fe:80:97:00:26:23:6c:49:71:27:5c:7d:80:09:
76:28:ba:fe:d7:32:29:90:01:ea:b7:22:6e:3e:a0:dc:fe:b1:
4f:f9:73:79:3c:e4:4e:d2:19:3d:f4:fa:de:90:bc:3e:5a:ca:
d5:68:2e:c5:3e:96:86:8d:0c:ec:b4:85:8a:9e:56:fd:ac:01:
15:ea:2a:0c:eb:a9:43:ce:76:a5:18:76:8b:73:44:3f:3b:b3:
28:de:94:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:33:49 2026 by rpki-client