Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
File: xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft (raw, json)
Hash identifier: Lau66grF6avyajQsE3N53YeiD08O++iQm6S6cGf7Sp8=
Subject key identifier: 93:08:F3:98:EF:D1:79:2B:69:10:79:B8:A9:23:4F:27:E0:72:75:4E
Authority key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
Certificate issuer: /CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Certificate serial: 019CABA25B45DD8AF601FBB719FD17EFB649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
Manifest number: 1851
Signing time: Sun 01 Mar 2026 23:01:09 +0000
Manifest this update: Sun 01 Mar 2026 23:01:09 +0000
Manifest next update: Mon 02 Mar 2026 23:01:09 +0000
Files and hashes: 1: Kd-PJMG0I6gP3eU-IVUAKt_gccg.roa (hash: guDscC6GtnjjQhv/AcT64xIdqM0iuOGm1U4WIDOTt8E=)
2: u9MRH0PAmITdYIYdl3L6OV5Ca_E.roa (hash: y7Eo8YjiifOpZz2F++URiefsRuTUyo4S63kmICsvHhc=)
3: xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl (hash: At8/BuhOHT4Sap48L+T9cLavuOLjdwa7rINkp4JY/vU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:5b:45:dd:8a:f6:01:fb:b7:19:fd:17:ef:b6:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Validity
Not Before: Mar 1 23:01:09 2026 GMT
Not After : Mar 2 23:01:09 2026 GMT
Subject: CN=9308f398efd1792b691079b8a9234f27e072754e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5f:eb:c8:7f:fe:48:84:f3:13:7d:ed:3b:fc:
e6:45:2b:64:c0:39:53:20:6d:04:7d:f0:64:2b:da:
a3:03:27:70:35:d3:03:33:2b:da:3b:98:4a:da:4f:
3f:07:7f:7b:f7:a0:78:a0:65:ca:60:e2:51:31:5c:
f0:11:c8:60:d9:61:51:7c:76:46:85:b5:92:5d:64:
4a:ce:df:07:de:b3:f9:f8:8b:f8:12:38:68:93:5e:
03:c7:91:08:e8:9a:0d:cc:49:bb:5d:6b:e4:45:14:
88:b4:16:2a:f1:1b:ed:08:f5:40:f1:70:71:2e:56:
cf:b8:c5:41:2a:2b:28:4a:fe:36:90:65:d1:85:7b:
67:b8:c3:15:f4:31:3c:f3:63:25:8b:17:e4:c5:d4:
f9:a8:28:77:b9:e1:26:35:27:29:5f:7d:c2:ab:31:
12:11:ff:4f:df:6a:65:b3:da:b1:21:19:ad:29:4d:
58:8d:c8:32:23:3b:cc:8e:a3:86:b6:36:16:a2:f1:
c5:0b:29:a9:79:a3:cc:b9:65:b0:25:d2:e4:df:1a:
db:22:e4:90:a7:04:c3:31:1d:25:49:54:3a:7b:e0:
71:b4:4f:d2:86:cf:60:b0:5b:04:e7:e8:91:cf:e7:
94:41:44:b1:ed:2b:a9:3d:0b:ed:26:e2:3e:00:5a:
87:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:08:F3:98:EF:D1:79:2B:69:10:79:B8:A9:23:4F:27:E0:72:75:4E
X509v3 Authority Key Identifier:
keyid:C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:46:bf:3b:6e:c0:97:79:6c:e4:7f:7e:4d:69:44:5b:cc:c1:
83:93:58:15:2e:76:fb:b0:bb:64:55:89:6f:a1:51:f2:de:92:
da:d1:26:6e:8a:0e:ef:cb:85:30:09:6e:cc:28:fd:c8:70:ca:
b9:54:cb:9d:78:05:69:c4:29:56:25:6a:77:5b:41:ea:65:ba:
d7:89:31:b6:b9:47:18:37:8c:76:29:30:40:d5:04:b5:52:80:
d1:73:0f:8f:a2:9c:30:f9:c2:4b:7e:67:19:f5:79:10:25:16:
5d:fa:67:75:5c:6c:04:6e:a1:cc:a1:63:70:1d:34:af:fb:e3:
8b:c3:ff:5e:95:20:7e:41:c2:2d:88:06:88:d2:1b:55:49:eb:
1a:eb:bf:46:28:73:27:85:14:70:94:ae:fb:6c:57:07:17:fe:
ce:b9:3e:53:f9:be:be:99:56:52:3a:7a:86:ca:6b:b6:9e:fd:
31:60:d7:53:34:c1:49:ac:1e:f9:f1:7d:2f:e0:11:39:8c:8e:
2b:21:4c:77:87:8a:60:cb:3e:2c:34:3c:31:b7:8d:4f:97:59:
d0:c1:ce:06:2f:4f:b4:46:d9:cd:9a:2b:ac:41:89:e7:d6:70:
23:7b:0c:aa:ee:18:52:62:1b:b4:62:79:83:9e:2f:9c:2a:62:
c3:1b:b9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:17:55 2026 by rpki-client