Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
File: xBCR00cDwD74-NKcu9zZjD5wb4Q.mft (raw, json)
Hash identifier: i+poc0MdkBA1h0TZ+tMNyldZgk/0O+WQSS86Fh27CZo=
Subject key identifier: DF:0A:59:B3:E1:62:D0:5C:6D:94:3B:44:06:C8:B0:C1:A2:0A:50:60
Authority key identifier: C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84
Certificate issuer: /CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
Certificate serial: 019CAD5A2A38AC2C15612EAB6AE181AB437F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
Manifest number: 0DAA
Signing time: Mon 02 Mar 2026 07:01:33 +0000
Manifest this update: Mon 02 Mar 2026 07:01:33 +0000
Manifest next update: Tue 03 Mar 2026 07:01:33 +0000
Files and hashes: 1: wj36KuC4KkbAWGdbhxPcToGipcw.roa (hash: /SiPmXieUUyR1/NuMTzivGKUx8ZGueEIDbGfwzhdLBk=)
2: xBCR00cDwD74-NKcu9zZjD5wb4Q.crl (hash: dheu2tewbDJ92PZWEfBMaNcBaUUrI9zbgjYVceoEx0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:2a:38:ac:2c:15:61:2e:ab:6a:e1:81:ab:43:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
Validity
Not Before: Mar 2 07:01:33 2026 GMT
Not After : Mar 3 07:01:33 2026 GMT
Subject: CN=df0a59b3e162d05c6d943b4406c8b0c1a20a5060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b7:ab:e7:a6:e9:0d:61:bd:66:c5:40:89:33:
30:a4:cf:71:a4:74:a8:1a:14:0c:c9:99:72:1f:06:
e8:45:be:90:95:ad:69:2b:31:bf:63:5a:87:39:31:
16:5f:1f:63:52:9f:86:cf:15:4d:a0:59:20:c7:a5:
42:95:1e:dd:b5:b3:58:6c:58:e8:10:a8:13:d2:1d:
e1:77:2a:6e:94:64:51:c1:62:a7:ba:a6:46:89:6e:
27:18:15:24:e9:a8:59:70:1e:0f:f0:d5:60:19:56:
99:3f:e7:18:08:22:db:91:fb:53:e2:f7:59:a3:a4:
03:1f:c0:44:a8:07:e2:52:74:34:d2:38:16:ca:1b:
8f:03:c6:f8:d2:82:1d:07:85:2d:89:1a:2b:50:6c:
53:2a:40:25:49:c9:c8:17:cc:ac:2d:ea:b2:a6:f5:
17:65:3b:86:00:3f:07:31:9b:23:81:e9:67:ad:66:
db:27:37:ac:cc:3e:27:d6:ec:31:a4:e2:0a:8b:fd:
ed:52:0f:ea:8e:96:07:f8:74:14:4f:60:6b:7e:c6:
dc:4d:98:63:18:4e:0b:eb:a8:ad:82:22:fa:2f:70:
e2:66:70:09:ad:ed:d4:8c:a0:4d:59:49:84:c6:c6:
d3:34:f7:03:0e:83:d4:db:4d:e8:35:2e:a1:38:a4:
43:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0A:59:B3:E1:62:D0:5C:6D:94:3B:44:06:C8:B0:C1:A2:0A:50:60
X509v3 Authority Key Identifier:
keyid:C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:31:fd:1c:f9:87:37:44:ad:88:a3:09:89:3e:8f:1e:e8:84:
d4:69:5f:1c:07:12:b7:67:de:52:63:2f:e0:83:11:22:e0:b5:
8e:55:03:eb:31:19:d0:84:a8:32:cf:54:b1:84:ae:69:d2:41:
88:57:68:b5:dc:25:50:e5:cf:e0:b7:11:c1:d8:7e:26:cf:48:
aa:fa:0d:bb:90:18:9a:85:9b:5e:dc:52:af:d5:c3:b4:81:82:
ed:49:1e:13:f9:fa:d2:22:f7:b1:91:a9:bd:4e:d3:08:26:27:
18:9c:4c:2c:0d:46:b8:58:d0:d5:7b:a4:bc:df:10:98:a9:43:
97:f5:07:b0:cb:17:90:37:b3:e2:f3:b8:35:a3:ee:34:01:e2:
c1:6b:b7:08:ee:7a:55:cb:d6:e8:36:81:2d:5b:27:2d:e4:04:
a6:a4:be:55:6b:63:b8:64:7c:24:dc:af:ee:c4:06:ab:7b:26:
7d:35:18:90:d5:68:03:fa:23:83:6e:a7:74:4a:50:3c:da:a5:
e4:93:6b:f4:a7:4c:0d:38:27:d2:1b:e7:23:5f:54:db:e8:f3:
6f:62:c4:50:c1:64:4d:c2:86:57:7c:af:e2:36:2d:9b:71:20:
e3:03:60:5f:19:36:cd:8c:4d:3b:a0:b8:c7:aa:06:bd:50:48:
78:1c:9d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:06:52 2026 by rpki-client