Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft
File: xDwiL60sJ8phLJjCc9TxZQbhsuU.mft (raw, json)
Hash identifier: HjxRzt+3oyJHQ5pLkFO7inEkc0o8gOVNN7lS7pH+x+E=
Subject key identifier: 94:5F:90:D9:60:33:8D:8F:C9:26:D3:CD:07:FC:E8:78:FE:BC:B8:A5
Authority key identifier: C4:3C:22:2F:AD:2C:27:CA:61:2C:98:C2:73:D4:F1:65:06:E1:B2:E5
Certificate issuer: /CN=c43c222fad2c27ca612c98c273d4f16506e1b2e5
Certificate serial: 019CAAC6429FEC82266FFB66B20C3A6F5D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDwiL60sJ8phLJjCc9TxZQbhsuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft
Manifest number: 10C7
Signing time: Sun 01 Mar 2026 19:00:45 +0000
Manifest this update: Sun 01 Mar 2026 19:00:45 +0000
Manifest next update: Mon 02 Mar 2026 19:00:45 +0000
Files and hashes: 1: HwX_IRdskXcAV_np2ZkdO8Ut9Eo.roa (hash: YW9KO6pt+dk+m3/5lsQ1NeGU+nKFSfub7NQ+6nyySSs=)
2: xDwiL60sJ8phLJjCc9TxZQbhsuU.crl (hash: +cibHQR2P4doTiznFTB0gIDM6uP+W9kizDYFuUbaO2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xDwiL60sJ8phLJjCc9TxZQbhsuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:42:9f:ec:82:26:6f:fb:66:b2:0c:3a:6f:5d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43c222fad2c27ca612c98c273d4f16506e1b2e5
Validity
Not Before: Mar 1 19:00:45 2026 GMT
Not After : Mar 2 19:00:45 2026 GMT
Subject: CN=945f90d960338d8fc926d3cd07fce878febcb8a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0e:93:2e:3b:15:c2:9e:48:c4:77:1c:65:b7:
81:7d:fb:c9:a7:45:c7:27:29:3e:35:97:02:b9:31:
13:0f:8d:44:a5:ec:cf:88:22:c9:e2:07:df:1d:1c:
a7:f8:34:74:ef:f8:a1:5c:a1:13:5a:ab:62:0a:a2:
58:d4:f9:36:29:cf:07:a7:bb:34:05:48:d5:a4:f8:
cf:a1:7c:30:cc:4e:99:36:a4:8c:24:7f:15:60:ba:
9e:b9:a9:90:68:d0:34:2b:3e:36:04:18:ab:88:34:
1b:77:bb:37:ef:80:60:aa:d4:72:c7:d5:ff:e6:81:
81:59:6f:b1:cc:ee:bd:b5:9c:3a:54:28:5c:37:15:
1e:ea:3d:57:4a:13:60:8b:41:51:1b:b3:4f:53:02:
fb:ba:74:8b:97:5f:84:33:16:10:e3:88:22:3a:33:
ab:68:42:3e:f1:e1:c1:e2:16:08:f6:33:19:52:76:
48:0f:b8:a7:4c:b0:5d:7f:1d:ba:72:9f:b5:5d:5d:
9f:6f:35:62:22:f7:4b:75:20:fa:a9:f7:43:d7:e6:
3f:d9:91:4a:57:9a:9b:ee:7b:73:01:0c:bd:c5:60:
d8:d9:88:4b:71:e7:15:9f:15:7d:a5:07:b9:a2:ae:
da:61:c6:fd:d1:67:92:66:d2:23:f1:b0:80:8b:75:
b5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5F:90:D9:60:33:8D:8F:C9:26:D3:CD:07:FC:E8:78:FE:BC:B8:A5
X509v3 Authority Key Identifier:
keyid:C4:3C:22:2F:AD:2C:27:CA:61:2C:98:C2:73:D4:F1:65:06:E1:B2:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDwiL60sJ8phLJjCc9TxZQbhsuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:63:30:f9:73:2c:66:33:97:40:05:32:d3:d8:7b:29:22:e9:
81:19:8f:76:75:1e:33:e3:41:7c:80:34:43:cb:80:39:bc:da:
06:35:04:5d:bb:ed:c6:79:65:90:e6:fe:c0:71:46:d6:8e:cc:
e1:23:7c:c1:c6:69:6a:2b:24:63:98:3c:fe:ee:73:f9:52:f6:
00:a2:87:dc:9f:b9:40:9a:79:15:04:e1:1c:e5:5e:e2:09:9c:
d1:b2:f0:e2:69:e7:27:5a:f7:d3:90:2e:78:cf:3c:1e:e5:5c:
da:6f:e9:7b:9a:3a:9a:d6:af:fb:45:95:01:43:0c:ac:17:17:
2c:3b:a5:b3:3e:de:9a:6f:71:0d:48:88:24:5f:52:90:91:bf:
9f:38:d7:e4:2f:c4:82:59:11:fb:a5:83:c7:44:e4:b4:2d:ce:
7b:80:83:32:21:d0:ef:81:12:0f:25:11:46:5d:8c:55:fb:80:
32:d1:d9:d6:6a:80:f9:e3:d7:06:eb:54:eb:6e:12:53:75:67:
7f:77:b1:84:9f:7b:23:61:77:19:ea:7c:af:b4:53:1c:0f:64:
f4:a1:f9:8a:85:85:e4:19:f0:37:0c:5a:7f:80:b5:b4:00:28:
d5:43:e2:21:b4:9b:01:04:d8:43:fd:1d:80:99:bd:1b:68:74:
ba:d4:74:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:05:11 2026 by rpki-client