Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
File: xqvTc8xZUGDxozB2tT4RYlEsPNc.mft (raw, json)
Hash identifier: uHyoJdlfSCIBuQY9Imw9aem2HFbNoqwI9z6YGnmEi10=
Subject key identifier: FD:0B:78:F3:78:2D:F0:D7:8E:94:2A:34:DC:41:E6:E8:24:89:14:FD
Authority key identifier: C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7
Certificate issuer: /CN=c6abd373cc595060f1a33076b53e1162512c3cd7
Certificate serial: 019CAAC71663039203A21119FE2D21EB7F2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 19:01:39 +0000
Manifest this update: Sun 01 Mar 2026 19:01:39 +0000
Manifest next update: Mon 02 Mar 2026 19:01:39 +0000
Files and hashes: 1: 5AsWyF1f4ujjHWSDojwUCJzIsQo.roa (hash: i1HUG5lw4XQU4xSl9+H4tPoxXwRgahcdEdU4boFga8o=)
2: aTIoEqt3GwezbAZZTmKXYT0O0SQ.roa (hash: K+hfO/BW2nP6cpPF3ceYJcKox+Ctdij1CCqhzl808Eo=)
3: xqvTc8xZUGDxozB2tT4RYlEsPNc.crl (hash: ozdu9JE33dylFnGSJwAoKA3VSCrmblff4rii8PxGa7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:16:63:03:92:03:a2:11:19:fe:2d:21:eb:7f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6abd373cc595060f1a33076b53e1162512c3cd7
Validity
Not Before: Mar 1 19:01:39 2026 GMT
Not After : Mar 2 19:01:39 2026 GMT
Subject: CN=fd0b78f3782df0d78e942a34dc41e6e8248914fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f2:15:68:7b:d4:f2:92:7a:c2:65:8d:cf:2f:
7a:d4:fd:39:66:6f:af:79:cc:2f:ce:f6:69:b3:bd:
db:36:00:c8:cd:17:e8:d1:00:5c:d2:6c:2d:30:75:
7e:b7:27:e2:27:a5:f5:58:05:4e:63:4a:40:d7:51:
65:4b:92:f7:ca:30:71:53:7b:6f:54:76:f7:83:43:
16:18:7f:cf:2d:d4:4e:1e:d3:8d:79:d7:fe:58:df:
ef:66:ff:97:ea:e0:58:f9:c5:2c:45:1f:89:b2:92:
fb:82:95:06:96:40:39:9b:4f:36:f0:f3:fe:d7:95:
c8:89:51:7e:1f:dd:0a:3f:d9:28:6f:5d:47:df:b3:
0a:9d:27:0f:67:f9:17:be:cf:b9:18:0b:72:6e:a7:
a1:cb:45:56:03:c2:59:d5:9f:5c:1d:3f:f1:82:e8:
b7:d5:7a:d5:20:85:a7:37:77:91:91:96:a4:a8:91:
85:c8:12:46:6e:5c:0a:ef:63:45:f2:88:96:7f:22:
90:e0:5b:aa:32:45:30:7c:ec:12:f1:7c:21:04:18:
58:d5:a2:59:4a:cf:e2:a1:df:7e:7b:37:79:a6:45:
ac:d8:fa:51:91:21:be:2a:31:9b:c6:6d:2a:16:8c:
81:1c:80:0f:eb:91:ce:4e:f5:81:a1:f0:02:31:27:
12:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0B:78:F3:78:2D:F0:D7:8E:94:2A:34:DC:41:E6:E8:24:89:14:FD
X509v3 Authority Key Identifier:
keyid:C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:13:4b:1f:24:77:61:2a:77:64:09:65:10:c3:6e:bc:d0:33:
a7:03:14:42:b4:30:56:0f:92:8d:14:4c:cb:e4:70:06:3c:be:
d6:1b:e4:48:c5:ea:5e:a7:ab:8a:67:75:d3:d3:6e:04:1a:64:
03:94:45:f8:f2:42:31:62:cf:ad:24:55:50:b9:f5:b6:28:24:
9e:ab:ba:7d:35:70:ac:e3:c5:ae:05:15:a8:06:1f:54:c1:99:
fc:b1:83:dd:6c:6c:e1:62:e4:ad:15:bf:06:6c:5e:bf:88:7a:
b8:6f:fd:7a:fe:b3:18:7b:8e:ae:63:87:2a:83:11:4e:bb:b6:
cd:07:30:53:05:f6:42:95:a7:b5:a3:bf:20:c0:4e:aa:81:cb:
b6:ec:e9:1c:ea:63:33:00:9a:bb:1e:bf:1d:ad:af:b8:44:ba:
52:6e:26:af:54:21:f6:eb:99:7a:5d:3d:f9:21:c6:e3:2e:81:
fb:7e:00:de:ac:d5:8b:df:4f:ef:7c:6d:74:ae:8b:85:ad:12:
b9:1b:31:2e:47:a6:31:49:9f:8f:db:fa:3b:c3:36:d0:b5:47:
df:ad:5c:33:d6:9f:90:23:3f:0f:d6:80:d3:af:77:92:cf:ed:
6d:f0:5b:da:a9:fc:9d:cd:45:d6:5d:60:be:22:60:e6:a1:86:
dd:3d:e6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:08 2026 by rpki-client