Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
File: xAZEdsLEf3eEdKFIFsHgakCBPlw.mft (raw, json)
Hash identifier: WE07kwJw092d5/fbJuUxPXah/txqQYXYKyh8lGwI9LY=
Subject key identifier: F6:D0:54:EC:34:07:60:83:1D:18:62:BA:8D:03:43:1D:0F:91:A3:C1
Authority key identifier: C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
Certificate issuer: /CN=c4064476c2c47f778474a14816c1e06a40813e5c
Certificate serial: 019CABD9DDBB5F6C50CF2DAC2C8CEDAE7183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 00:01:47 +0000
Manifest this update: Mon 02 Mar 2026 00:01:47 +0000
Manifest next update: Tue 03 Mar 2026 00:01:47 +0000
Files and hashes: 1: pl4G0drpVsiUnTNv0aNJRxAq40Y.roa (hash: TIrmY5F1mz/rcq5o0AaF7KuNyHFmI5rxVVBApqp6+Ig=)
2: uCT5qS0TatwLKR2syBgBgC34NYE.roa (hash: 6Pav0LB8Y/JGRbLI7vMShFMSStiFyP+H+ECIrWK519s=)
3: xAZEdsLEf3eEdKFIFsHgakCBPlw.crl (hash: jcz9gBLN1ae7Q2NH9OzPhE8eDwIohju9DffWWWN+Fs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:dd:bb:5f:6c:50:cf:2d:ac:2c:8c:ed:ae:71:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4064476c2c47f778474a14816c1e06a40813e5c
Validity
Not Before: Mar 2 00:01:47 2026 GMT
Not After : Mar 3 00:01:47 2026 GMT
Subject: CN=f6d054ec340760831d1862ba8d03431d0f91a3c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e2:f4:e1:f5:f2:c7:64:a9:cd:71:a0:d9:8b:
a5:f1:51:f0:18:d5:e3:f0:ee:03:2f:8b:49:0a:ed:
b2:d8:df:18:77:be:41:93:dc:c8:d0:0e:36:93:50:
8b:77:d4:68:f6:e4:54:7e:50:88:58:f8:66:49:3d:
3b:54:9c:7e:6a:d6:ec:a6:29:10:b5:70:2b:a7:68:
8b:6c:e1:29:ad:0f:0f:5f:7f:b8:0c:36:71:9f:f2:
b6:a9:d5:ea:88:cd:1d:c1:98:07:7d:3c:ef:67:77:
be:81:88:10:cc:b9:8a:00:1e:20:ea:d7:49:8b:e0:
e6:15:3f:86:8b:80:b4:71:70:15:c9:1d:ab:38:ef:
de:b3:b7:c0:18:a2:bd:4d:a7:24:b3:3c:12:d2:6d:
39:97:e0:de:8e:e1:a4:83:53:1f:9c:36:d2:60:b7:
bc:68:11:21:d0:01:cd:e5:1a:e5:ce:f5:36:b6:51:
13:75:57:73:d9:39:dc:a8:e3:2f:2c:1d:2d:fd:03:
8b:0c:cb:69:72:4d:97:8c:97:da:d6:a4:35:44:b3:
4d:53:4e:eb:15:75:e8:20:a1:08:4e:91:db:4e:1c:
cc:41:c7:a5:6f:63:e2:90:25:d4:d7:d5:f2:d6:3e:
a0:7d:bb:b2:99:64:b1:b3:70:ec:49:e4:77:c7:29:
f3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D0:54:EC:34:07:60:83:1D:18:62:BA:8D:03:43:1D:0F:91:A3:C1
X509v3 Authority Key Identifier:
keyid:C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:b6:bc:6e:57:fd:ef:12:56:15:08:98:fc:23:23:03:ea:0c:
d2:10:df:4c:02:00:f1:47:9f:0b:3e:06:67:e5:ab:49:dc:38:
76:ce:4b:8d:34:13:ad:6a:ed:2c:d1:3d:df:29:72:94:e6:6b:
e9:e3:e7:a3:a5:e1:f2:6a:b1:76:c9:f9:44:f1:2c:c1:77:f8:
9a:c7:9c:cb:99:6c:c0:4e:95:cd:4a:30:5b:bc:4c:45:93:d6:
c6:27:80:16:19:36:ce:d9:60:b8:e9:66:90:df:52:11:5e:61:
05:d5:63:34:18:42:82:c6:30:e6:82:a2:74:da:cd:b4:99:e9:
a0:15:a2:1c:55:c8:9d:20:7c:c3:84:d8:83:ff:8f:4b:35:0f:
eb:d1:24:be:f3:98:6f:f0:5f:5c:0b:f6:37:90:ae:1a:de:0e:
41:a2:99:da:9d:1d:40:64:80:8b:1f:29:d9:c1:05:00:a8:48:
03:63:6f:4c:d6:ad:6f:5a:b9:55:b3:79:1d:7d:44:26:e5:0d:
1a:6a:68:4b:79:6d:95:58:62:e8:f5:b2:a2:ba:2b:09:d0:c8:
7b:e4:73:0c:34:d0:e4:58:db:ec:23:01:01:93:a3:e4:32:5f:
9d:4d:30:eb:c8:35:96:f4:63:d2:b6:6f:2f:a5:0b:7c:61:15:
6b:f0:80:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:58:37 2026 by rpki-client