Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
File: xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft (raw, json)
Hash identifier: yk5iW+VrtAr9bzQyhjRLGRG0l5yROrQAaDG7VzcJMpA=
Subject key identifier: 48:1E:35:6F:94:CD:8B:48:E8:FE:6C:8B:85:E0:5D:17:BD:0F:82:9F
Authority key identifier: C7:1E:F0:AD:43:C7:B8:E2:6C:17:5F:DC:1F:16:96:D0:08:1D:C4:DA
Certificate issuer: /CN=c71ef0ad43c7b8e26c175fdc1f1696d0081dc4da
Certificate serial: 019CAAFD136FF1DB6756F392D00BCC1B305C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 20:00:38 +0000
Manifest this update: Sun 01 Mar 2026 20:00:38 +0000
Manifest next update: Mon 02 Mar 2026 20:00:38 +0000
Files and hashes: 1: 3ab_o0Nl-S6Ei86C2hafif65fQo.roa (hash: dJDFaPL1IxpS3bFn7gG9LpNkmVG6kmHGyMD/BQus07s=)
2: xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl (hash: vZ+70gR+is3UVutVI8uU2tvcM68fJ2gNBeHELANntXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:13:6f:f1:db:67:56:f3:92:d0:0b:cc:1b:30:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c71ef0ad43c7b8e26c175fdc1f1696d0081dc4da
Validity
Not Before: Mar 1 20:00:38 2026 GMT
Not After : Mar 2 20:00:38 2026 GMT
Subject: CN=481e356f94cd8b48e8fe6c8b85e05d17bd0f829f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f6:7d:9f:0c:33:b1:20:6a:34:05:71:18:5f:
c8:a7:f1:c9:49:86:20:8b:da:85:e8:90:c7:1c:30:
16:da:37:96:5e:9a:05:7a:ef:d2:33:b1:d1:82:3e:
2c:07:e2:bb:e7:83:59:42:47:d6:9b:31:6b:c7:04:
2a:af:eb:78:da:86:17:10:12:75:04:56:2f:78:70:
42:8b:ed:7e:37:02:58:9c:00:09:91:62:e1:34:ba:
c1:8f:7e:7b:11:3b:16:14:75:0f:74:64:94:d1:37:
73:9e:a1:10:2a:ca:d6:8c:47:b5:34:4c:a1:32:0c:
bb:eb:85:73:6c:93:fe:34:c8:3e:df:3c:29:d2:ce:
78:c6:a1:93:e0:c7:d4:5c:c0:7b:ae:85:45:a5:a3:
95:18:e6:1d:5c:47:ec:7a:80:e0:dd:39:7e:c4:ba:
ca:53:3e:a4:3c:5d:87:40:9f:68:2f:96:07:62:cd:
fe:c7:8b:46:bd:ec:22:4a:fa:47:c5:6b:14:79:fb:
0e:d3:4b:c2:9c:a1:6d:59:75:00:3f:58:1e:91:41:
59:ff:fd:14:bc:54:39:98:4c:6a:44:46:1c:f2:67:
fc:4d:75:8c:a5:47:2b:5b:d7:64:77:b4:19:ad:bf:
e3:70:67:3f:a2:c5:b9:e4:f4:fd:01:9a:f6:68:d2:
d6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:1E:35:6F:94:CD:8B:48:E8:FE:6C:8B:85:E0:5D:17:BD:0F:82:9F
X509v3 Authority Key Identifier:
keyid:C7:1E:F0:AD:43:C7:B8:E2:6C:17:5F:DC:1F:16:96:D0:08:1D:C4:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:53:d7:fc:0e:0f:f3:32:62:42:94:7e:c6:db:9d:7d:8a:b0:
4a:cf:b1:1f:11:ec:7e:df:b1:35:ad:7c:d3:a6:7d:e2:c1:82:
f9:ec:9b:6d:51:aa:b8:c6:52:d8:64:fb:12:7e:e2:4f:a0:4d:
f9:6a:5a:ea:d8:2f:85:f5:f2:ee:93:97:b2:b3:da:0e:99:e7:
5b:fd:3b:be:d3:56:19:03:33:26:0c:cf:2b:c3:85:69:1d:47:
bc:42:70:fc:10:9f:b7:6e:e6:59:d7:cc:db:88:51:35:89:a6:
d3:d7:00:c6:7b:39:0d:3c:e4:89:75:3b:4c:38:13:cc:75:6b:
c0:79:20:73:88:5f:cf:3d:e2:b6:ac:fd:88:66:07:da:bf:56:
ed:63:f3:92:63:bf:07:88:ce:da:b4:a9:70:e7:9f:05:b9:75:
6e:a2:ee:3b:22:32:a2:48:79:76:be:01:35:cd:75:df:a7:c7:
f3:14:23:7c:e2:d0:f8:fc:56:f9:29:96:f7:3b:ac:0b:ad:14:
40:0b:8f:68:1a:ee:80:28:dd:79:7a:3e:29:48:07:33:e5:64:
a8:a8:36:23:8a:10:76:95:44:88:59:b0:79:c1:18:ca:5f:b6:
2d:0a:56:1f:ad:66:c4:0f:01:41:10:24:b0:1d:ca:da:be:cf:
a8:61:b9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:18 2026 by rpki-client