Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
File: xNN466ZI9D5TpKQeE0uQExypPNg.mft (raw, json)
Hash identifier: SvWFp1fhut9lU95xvXWlI/PfMOnwMc4tdgkx0Ww/VxU=
Subject key identifier: 8A:AC:FA:26:A3:AF:E6:B8:F5:B0:73:D2:45:9C:5E:13:D1:31:AF:DB
Authority key identifier: C4:D3:78:EB:A6:48:F4:3E:53:A4:A4:1E:13:4B:90:13:1C:A9:3C:D8
Certificate issuer: /CN=c4d378eba648f43e53a4a41e134b90131ca93cd8
Certificate serial: 019CAB343F67E5AE26DC3A34819A25242C18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
Manifest number: 0D87
Signing time: Sun 01 Mar 2026 21:00:53 +0000
Manifest this update: Sun 01 Mar 2026 21:00:53 +0000
Manifest next update: Mon 02 Mar 2026 21:00:53 +0000
Files and hashes: 1: LTb5vPloqkbClBKB9zASxlBnfTI.roa (hash: UXcXLrrBaIHA3rxo2Vg1OLmswtJ0WJsGAG20BgieLSw=)
2: xNN466ZI9D5TpKQeE0uQExypPNg.crl (hash: qq+scEWPqbMyrstR8Y5RiNvXWmpk9zwc7Ho3NyjxLRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:3f:67:e5:ae:26:dc:3a:34:81:9a:25:24:2c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d378eba648f43e53a4a41e134b90131ca93cd8
Validity
Not Before: Mar 1 21:00:53 2026 GMT
Not After : Mar 2 21:00:53 2026 GMT
Subject: CN=8aacfa26a3afe6b8f5b073d2459c5e13d131afdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3a:9b:c8:e9:7b:e1:1b:0d:b7:24:f8:8f:5f:
28:02:fc:ce:a6:3c:1c:95:1a:ef:ff:c6:51:81:a9:
51:3f:73:4d:bb:02:fa:ca:27:44:ba:cd:c0:8a:cb:
7a:7a:ee:39:fc:e9:a0:7a:06:cc:5a:f4:6f:b3:13:
2c:40:48:c0:d4:df:b0:64:0c:9f:d6:9e:75:3a:3a:
5c:de:9b:96:5c:ca:32:7f:1b:c4:ec:90:23:19:37:
1c:1c:76:ac:4d:c0:b2:aa:60:81:44:7f:af:a6:6d:
89:7c:be:c4:97:c4:93:21:06:b2:54:9d:b0:3f:bd:
68:b1:9e:5d:81:1b:48:be:df:f0:a3:4f:55:8d:63:
77:45:72:fc:b9:ec:85:0d:ed:6a:2e:13:1e:b9:f7:
26:c4:3f:ae:ef:1b:87:ef:b0:3e:26:bf:6e:d2:96:
47:1f:d0:a9:29:be:43:61:60:90:8d:c6:05:d5:67:
3e:33:3d:7f:54:8e:8f:34:bb:e0:89:71:51:4a:1a:
d3:57:26:6b:6e:58:e2:41:9c:3a:15:5e:6f:7f:cc:
c3:28:38:bc:01:44:d7:0e:aa:de:56:89:f6:af:14:
54:66:bd:53:08:e0:87:a4:c3:41:0b:38:80:83:20:
68:c2:76:5b:2e:34:28:07:c1:b9:c5:de:f0:16:a4:
c7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AC:FA:26:A3:AF:E6:B8:F5:B0:73:D2:45:9C:5E:13:D1:31:AF:DB
X509v3 Authority Key Identifier:
keyid:C4:D3:78:EB:A6:48:F4:3E:53:A4:A4:1E:13:4B:90:13:1C:A9:3C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f7:c7:d3:e8:72:8a:f2:f6:31:e4:8d:5a:b2:2a:35:cf:a9:
6f:74:f2:ae:f9:55:88:6a:ba:c1:45:cb:0c:93:b6:8f:cb:07:
3f:15:ca:3d:2d:ed:04:d0:9b:2d:aa:f6:2b:af:19:e1:ba:b9:
da:9b:40:e8:f6:ea:1e:6f:38:46:bd:d6:73:03:33:a9:95:ca:
2d:69:12:be:90:34:62:18:a6:da:f8:c4:09:29:14:04:90:57:
a3:5c:5b:94:d5:b0:b7:4a:93:c0:d2:9b:ab:b9:98:1a:5e:01:
86:70:ac:2b:91:51:c6:a0:dc:4d:fc:da:a9:4a:5b:be:58:96:
64:1f:83:44:6c:0f:ff:eb:3e:7e:be:c9:53:7c:45:ce:8d:1c:
72:f2:73:c3:1d:8c:ea:6d:b2:8d:59:a3:a5:c2:b1:03:7a:7f:
71:68:a5:14:b2:ee:07:3f:72:1a:58:74:7d:fe:bb:aa:c6:01:
45:fe:2e:25:6f:90:b9:b7:08:3d:dd:44:55:d3:a2:b7:39:4f:
b3:24:09:68:0c:c5:87:d5:45:c0:c0:46:89:c3:76:df:81:27:
0e:36:6a:79:c2:25:59:e4:22:66:41:50:1e:43:32:af:94:f3:
64:21:68:04:39:d0:c3:22:99:8c:6c:67:8e:d8:6e:5c:6f:0d:
4b:3c:f7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:19:49 2026 by rpki-client