Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
File: x6trIlTkVzCq-kWrUZcyA2FLtsw.mft (raw, json)
Hash identifier: +kEFSFEqsqKlNxMMEAVUFT8aPbtVrWDKICiMLxAYu0w=
Subject key identifier: 7D:03:39:F2:3D:46:9D:10:73:28:E9:FF:F2:DA:45:05:A9:D4:6C:65
Authority key identifier: C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC
Certificate issuer: /CN=c7ab6b2254e45730aafa45ab51973203614bb6cc
Certificate serial: 019CAD2287AAD4E40F952DDBA17AF3CDC98E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
Manifest number: 158A
Signing time: Mon 02 Mar 2026 06:00:47 +0000
Manifest this update: Mon 02 Mar 2026 06:00:47 +0000
Manifest next update: Tue 03 Mar 2026 06:00:47 +0000
Files and hashes: 1: YOiCbjbkGoimIbW3nkdcU24V058.roa (hash: jiSJ+O2fFYcLK2VQfO+2IbVyopzNGD9QLV+WZmnKJXk=)
2: qiIZeyX9IxKh6T92ERJD5iYwHJM.roa (hash: wrTzp4KmTWE2/mdXpqaffqeTXDKkOFMqbZCBTP+Yqzg=)
3: x6trIlTkVzCq-kWrUZcyA2FLtsw.crl (hash: jN3HK7A939Zi6zFsGkOa9fCNoS4/5Hum6nC6LMY6Nos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:87:aa:d4:e4:0f:95:2d:db:a1:7a:f3:cd:c9:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ab6b2254e45730aafa45ab51973203614bb6cc
Validity
Not Before: Mar 2 06:00:47 2026 GMT
Not After : Mar 3 06:00:47 2026 GMT
Subject: CN=7d0339f23d469d107328e9fff2da4505a9d46c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:96:b1:84:a1:a9:29:cf:48:38:28:be:6b:52:
6d:2d:f8:33:84:4b:45:c7:9b:6c:2d:b3:5e:6a:b4:
eb:4d:2e:1c:bc:27:da:b2:01:6d:24:2d:cc:1f:a0:
4a:f0:79:44:88:63:b0:ba:ae:03:68:3e:61:8d:68:
8b:35:db:ca:00:ab:a9:46:e8:0e:0b:16:f3:40:16:
71:d6:e0:fa:63:46:5a:46:11:b4:1c:58:19:d4:6e:
af:fe:56:72:b6:b2:89:ad:a6:49:15:b9:83:31:02:
60:ed:a8:68:84:4b:19:f4:b1:0f:14:0d:62:40:90:
e2:1e:ca:2a:16:e8:e0:e5:95:51:b4:a1:50:51:c6:
8b:f4:a1:6a:27:72:b2:56:98:99:ee:8c:71:86:e4:
6a:78:67:35:23:ec:cf:ab:9a:9f:25:d9:c8:cf:a9:
5b:93:c9:a0:aa:8e:d3:a3:96:d0:1a:b9:18:2d:c1:
39:44:4c:ae:0c:11:80:87:15:fe:fc:59:dc:41:d6:
54:78:37:4b:2b:9e:4f:fa:58:1d:92:fd:64:fe:21:
1f:c8:64:a1:e0:50:89:e2:1b:fa:49:29:8e:0a:6b:
a5:cf:38:5b:a8:3a:01:bf:44:eb:48:16:0b:41:26:
43:81:c0:23:ba:77:58:73:88:4f:f5:a2:f8:b9:71:
a4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:03:39:F2:3D:46:9D:10:73:28:E9:FF:F2:DA:45:05:A9:D4:6C:65
X509v3 Authority Key Identifier:
keyid:C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:da:be:d6:05:06:66:0b:f0:68:52:98:d5:16:6c:a5:53:9d:
fc:8b:03:f7:8e:6a:ad:5f:a1:90:f0:54:0e:89:8a:6c:b7:3c:
28:a8:ee:10:ab:ec:20:13:b9:63:a9:6d:5c:7c:89:07:c0:9e:
55:cc:d4:7e:bb:15:3f:ca:59:c9:71:c6:9b:67:e0:d3:9e:aa:
07:82:ce:e4:e6:57:66:db:fd:c9:d4:2d:b2:24:1f:8f:63:fb:
37:7d:60:2d:cd:cf:29:fd:a0:0c:27:b2:b1:e8:a6:94:2a:dc:
22:b7:87:dc:5d:cd:c2:65:bd:86:15:e0:c6:fd:95:88:1e:23:
2e:e2:b0:be:cc:96:d1:9f:b7:e0:11:22:11:b4:e7:47:68:83:
db:1a:23:ab:16:8c:ff:34:84:dc:bc:54:9e:33:35:c5:90:b9:
da:54:f3:a8:de:f3:b3:04:0f:e5:d3:ca:46:21:b5:4f:85:a9:
57:96:5e:b5:c9:4b:e7:ad:ab:d0:6c:38:c5:c9:c9:e6:0e:25:
99:28:c0:ae:9e:af:f6:c7:a4:7d:4d:55:a2:5e:8d:8a:ea:ce:
8a:e3:5a:c0:3c:cc:48:3c:cc:e2:a1:1b:2c:ac:d5:92:4e:0a:
a8:89:b4:c2:79:63:bd:fe:0f:ce:6b:58:f2:4f:0f:58:1b:d4:
b4:3c:a2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:27:39 2026 by rpki-client