Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
File: xvw4sqEAOV-puZGa15LnrLLbLgc.mft (raw, json)
Hash identifier: lkuDoUGBtdUoXIbjCSuS08F/Jlwh5DvtbmQ0dkJFbak=
Subject key identifier: 94:BC:2C:AC:64:53:15:17:7D:F5:C4:FA:3F:93:87:07:FE:83:46:74
Authority key identifier: C6:FC:38:B2:A1:00:39:5F:A9:B9:91:9A:D7:92:E7:AC:B2:DB:2E:07
Certificate issuer: /CN=c6fc38b2a100395fa9b9919ad792e7acb2db2e07
Certificate serial: 019CADC758FCB96D4D195D3EFB3C7C1F586C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
Manifest number: 0814
Signing time: Mon 02 Mar 2026 09:00:48 +0000
Manifest this update: Mon 02 Mar 2026 09:00:48 +0000
Manifest next update: Tue 03 Mar 2026 09:00:48 +0000
Files and hashes: 1: 4kLVVeCRQJrEoKU2Z3FAZr5ZTZg.roa (hash: N+n4RQm/UCrzmjM9BuILs0DGf1giItqSLrBBjPu0qrU=)
2: xvw4sqEAOV-puZGa15LnrLLbLgc.crl (hash: ZSy5/XvqKNSZbDwS1dsjVtIibKRSx7IJcDclvy66kP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:58:fc:b9:6d:4d:19:5d:3e:fb:3c:7c:1f:58:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6fc38b2a100395fa9b9919ad792e7acb2db2e07
Validity
Not Before: Mar 2 09:00:48 2026 GMT
Not After : Mar 3 09:00:48 2026 GMT
Subject: CN=94bc2cac645315177df5c4fa3f938707fe834674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:18:93:9e:a1:ca:2d:30:30:c5:8b:05:54:28:
77:51:47:90:16:35:bc:b2:9b:3f:20:67:02:8f:aa:
a1:54:03:09:54:f8:41:4a:63:3d:47:5e:e5:30:54:
4c:29:fb:2f:5d:96:d2:12:2d:f5:c6:98:e3:ac:3b:
ab:51:6e:66:a0:11:6e:0e:98:57:54:b2:0a:1f:c9:
12:fd:19:ee:ae:0e:ef:a4:24:b9:50:e2:f6:3f:a6:
32:c6:6f:d3:a9:19:5b:9d:38:76:6f:45:91:01:87:
06:20:c3:77:f7:2b:08:46:33:fb:d5:5b:76:e9:b7:
4c:6f:45:87:77:87:3e:3c:6a:ac:ee:d2:9b:bc:f9:
4b:b9:69:08:61:72:f4:28:53:bc:5a:1d:be:e9:b6:
81:e4:53:fe:02:d6:0f:ae:57:53:d7:01:0c:b2:4e:
97:b3:ea:27:ed:1c:2a:43:03:9b:7c:10:9e:88:74:
0f:8d:c1:e0:81:5a:e1:ee:5a:b7:a1:80:fc:54:2c:
6a:be:0b:f6:dd:bd:4c:d2:dd:a7:bb:a8:6e:67:8c:
9e:53:3c:54:56:9d:12:03:65:df:6d:cb:fa:9d:69:
d5:76:fe:50:6e:60:4f:9e:f9:18:71:94:19:cd:fb:
ba:ad:32:75:67:a5:a0:55:48:e2:be:17:50:ee:bf:
f4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BC:2C:AC:64:53:15:17:7D:F5:C4:FA:3F:93:87:07:FE:83:46:74
X509v3 Authority Key Identifier:
keyid:C6:FC:38:B2:A1:00:39:5F:A9:B9:91:9A:D7:92:E7:AC:B2:DB:2E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:7d:e4:54:43:4c:89:6a:da:43:27:14:a5:b9:16:c7:f3:eb:
ca:0a:57:41:45:fb:92:80:79:c0:1c:60:de:e2:b3:0e:9e:5f:
d8:17:19:73:88:7c:f5:00:c6:5d:5d:ba:ed:fb:45:b3:24:fd:
56:ff:7b:82:6f:5f:b5:c3:9e:d4:c8:64:09:a1:6d:a0:49:55:
1a:60:f5:6f:bd:04:bb:4e:d6:44:5b:01:f4:a2:cc:20:08:0a:
bc:ac:bb:80:3c:9a:fb:f4:1e:05:e5:31:29:e6:e3:cc:30:1e:
15:eb:7a:c3:7c:50:4c:01:cc:3a:8a:5e:d0:6e:21:62:8c:6a:
b4:aa:3e:5a:0d:d6:4f:be:dd:6d:bb:d7:53:dc:71:c3:c6:d4:
9c:d5:a1:ed:ee:10:60:cc:2a:d8:1c:8a:73:5e:1f:4a:56:8a:
63:5d:6c:93:e9:c6:7d:fa:f5:9e:b0:74:66:09:2d:9f:ef:1e:
60:d4:a0:5f:9f:c4:b5:40:6c:e5:b5:83:68:c1:9a:89:45:f3:
f8:9d:17:47:0a:69:4c:f3:6b:9e:47:f6:d8:fb:03:32:32:7a:
6e:db:ec:04:ce:ef:ff:e6:df:9c:e0:0f:ab:1d:05:0d:8a:ac:
63:09:1e:02:28:c8:4b:a0:6c:46:0c:d0:e8:a4:ee:86:40:2d:
43:f3:c1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:27:05 2026 by rpki-client