Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.mft
File: xFyYQwiFYolxMHxZtc8kFoIQI3g.mft (raw, json)
Hash identifier: SzU+fyVQAwAh2zK6QEPua/OTgRP/5LNdHf9K/GVj1Vs=
Subject key identifier: C0:D1:A2:60:D3:FE:F2:8E:92:CE:08:DD:E0:63:CB:8C:C4:94:CF:B0
Authority key identifier: C4:5C:98:43:08:85:62:89:71:30:7C:59:B5:CF:24:16:82:10:23:78
Certificate issuer: /CN=c45c98430885628971307c59b5cf241682102378
Certificate serial: 019CAAC62EBB26C496F3E1B3F8DACF50C46E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFyYQwiFYolxMHxZtc8kFoIQI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 19:00:40 +0000
Manifest this update: Sun 01 Mar 2026 19:00:40 +0000
Manifest next update: Mon 02 Mar 2026 19:00:40 +0000
Files and hashes: 1: ghzuYkE_gnJGPgiMxRgv65RQqec.roa (hash: 1+GlWtDdPLwRz4VbLN8GbkLKLROJEbW43VoOa31HX4g=)
2: xFyYQwiFYolxMHxZtc8kFoIQI3g.crl (hash: Z91Gpf1g6vw+ehmgDTmp6uRIU38FuPtkUAkseE+ydO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFyYQwiFYolxMHxZtc8kFoIQI3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:2e:bb:26:c4:96:f3:e1:b3:f8:da:cf:50:c4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45c98430885628971307c59b5cf241682102378
Validity
Not Before: Mar 1 19:00:40 2026 GMT
Not After : Mar 2 19:00:40 2026 GMT
Subject: CN=c0d1a260d3fef28e92ce08dde063cb8cc494cfb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:45:7b:3b:bb:85:db:e3:d9:06:13:ec:1a:5e:
83:13:68:d2:55:cd:cc:95:d2:15:a6:20:e3:90:03:
a1:c8:62:a9:6d:8e:bd:b3:aa:34:15:31:5e:04:07:
c2:c5:c8:7b:8b:6a:92:09:b5:03:4c:99:68:35:c2:
eb:09:39:79:16:16:aa:ef:dc:ec:cf:4d:13:ce:34:
6b:4c:da:10:f5:77:9f:59:c9:e0:0b:b0:eb:75:7c:
c2:57:91:66:c9:21:f7:34:dd:ce:f4:3f:54:a5:10:
5d:27:8d:0f:3c:dc:df:f4:25:cd:4d:91:8c:e7:13:
0e:a6:51:f8:5a:a3:4b:d8:77:23:1c:39:d6:38:56:
63:06:da:a0:3d:6e:8b:1c:9b:85:67:d1:0d:73:0d:
1b:5c:b8:e3:6e:94:d0:8d:02:42:2f:6b:77:f1:03:
17:90:0e:bc:7c:d0:4b:e4:0f:e7:a6:ab:c7:53:6e:
38:3d:1a:79:5d:a5:e7:05:28:98:5d:1e:d9:91:96:
07:2d:09:5f:de:da:d9:55:77:4b:19:77:c2:ca:34:
6d:5d:cc:b2:05:58:3c:59:5d:1e:5d:30:1b:f5:b6:
ac:43:26:a8:c4:8d:60:23:45:ba:20:14:28:dc:c7:
fb:72:d8:c1:99:bb:a6:fe:f4:6b:41:8e:25:23:d9:
b7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D1:A2:60:D3:FE:F2:8E:92:CE:08:DD:E0:63:CB:8C:C4:94:CF:B0
X509v3 Authority Key Identifier:
keyid:C4:5C:98:43:08:85:62:89:71:30:7C:59:B5:CF:24:16:82:10:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFyYQwiFYolxMHxZtc8kFoIQI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:cc:38:0f:db:5f:39:22:86:92:19:fd:e4:f7:87:cc:a5:3e:
60:72:81:b8:4d:4d:90:9f:8a:9f:50:e8:75:4c:bb:27:63:70:
eb:70:6b:27:0a:bd:47:f7:86:e3:b9:be:a1:31:bc:03:27:dd:
32:4b:93:ae:fc:b8:f0:42:eb:7f:e6:c6:65:7c:80:bc:d6:a5:
12:01:bf:fe:e2:16:19:70:b3:5d:7d:ae:8d:0a:f4:5a:a9:35:
79:08:a2:03:5f:03:0e:49:d8:39:39:a9:a1:65:9d:94:fe:fb:
d1:de:26:ae:dd:eb:b6:05:bc:55:b6:7b:bd:77:1b:6f:d1:5d:
a2:51:c2:cd:7f:b6:e0:d9:ca:cd:87:0d:f7:cd:ee:6c:a4:7f:
d5:5a:ae:ce:29:f6:a4:c4:32:7f:21:c3:73:81:28:57:35:6b:
ba:f6:3f:4f:d3:ec:06:1a:e2:ab:44:37:f6:0e:6c:5f:8b:5e:
8f:e3:c3:96:b9:1d:2e:77:e7:b7:93:44:3c:b1:1f:d6:ad:fe:
ad:38:ec:73:7e:dc:c2:70:e4:9a:3c:30:ef:62:ee:f8:4d:24:
4e:6f:c6:14:ca:ca:33:c1:82:0a:3f:97:cf:ca:05:70:05:d9:
86:84:3a:78:95:a5:29:8f:4e:f1:a4:19:f0:7f:c0:3e:31:2e:
09:cf:af:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:45 2026 by rpki-client