Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
File: X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft (raw, json)
Hash identifier: HF5pE5ik0tabAbM99YsjmV1iGTDVFvYCV8JeW8rKgTQ=
Subject key identifier: B8:94:F3:22:60:50:79:A2:92:CA:2D:B8:57:F1:E9:03:9C:54:DA:51
Authority key identifier: 5F:AB:01:9D:98:B8:8C:58:5D:5F:01:62:04:11:3C:83:9A:E0:67:D1
Certificate issuer: /CN=5fab019d98b88c585d5f016204113c839ae067d1
Certificate serial: 019CAD22524DEC1ED85D981D17468ECB526C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
Manifest number: 066D
Signing time: Mon 02 Mar 2026 06:00:33 +0000
Manifest this update: Mon 02 Mar 2026 06:00:33 +0000
Manifest next update: Tue 03 Mar 2026 06:00:33 +0000
Files and hashes: 1: X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl (hash: hSTcOxgfCjOeLWijgWJ4ugk0uRvdQN3opZWMLoS6SMo=)
2: hZfrHQXQ9gJ1CBuZbvb4HTnn7x8.roa (hash: s7Q9n6FVyTwioyvvcuH0Je0WpF9fajbCSSnTwOxPywE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:52:4d:ec:1e:d8:5d:98:1d:17:46:8e:cb:52:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fab019d98b88c585d5f016204113c839ae067d1
Validity
Not Before: Mar 2 06:00:33 2026 GMT
Not After : Mar 3 06:00:33 2026 GMT
Subject: CN=b894f322605079a292ca2db857f1e9039c54da51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b0:af:fe:70:64:9b:56:68:68:b9:a7:7d:e3:
be:90:a5:39:81:37:be:a6:ea:d5:c1:e1:0f:7d:44:
41:34:71:14:b9:e9:a5:48:ce:0b:8c:ee:41:cf:92:
9e:04:09:66:df:c2:eb:86:67:9a:ed:fc:41:ae:54:
ec:83:8e:e1:54:43:4c:77:9b:3b:72:b2:bb:6e:a2:
81:66:e6:e1:1d:bd:c7:3e:48:5f:30:21:dc:45:ba:
aa:dd:db:ef:b0:9d:ed:fe:f5:9c:f4:a9:cc:4b:25:
50:e1:68:79:ce:30:21:7e:b0:a1:ca:f9:ad:16:af:
ea:c1:79:e8:b2:a5:bc:92:25:22:56:15:21:54:12:
64:05:3f:6c:dd:6d:50:fb:27:41:70:c5:aa:ed:60:
5d:f2:37:15:ac:77:3e:d7:5e:03:10:96:0e:99:70:
d6:a7:f0:a9:b3:3f:8a:24:d8:57:d3:95:12:c1:62:
3e:8a:b0:76:77:95:38:40:2a:74:cc:d6:9e:19:29:
a5:60:a1:07:ec:ef:80:41:33:f9:77:3e:2c:13:fe:
92:f9:3a:f0:95:45:e8:3e:80:a5:c2:87:3c:17:84:
d4:20:d9:5c:6c:4d:1e:80:da:68:d4:9d:7a:7c:fe:
60:2e:17:6f:6d:7d:d7:32:b8:9a:97:70:b0:34:2d:
4e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:94:F3:22:60:50:79:A2:92:CA:2D:B8:57:F1:E9:03:9C:54:DA:51
X509v3 Authority Key Identifier:
keyid:5F:AB:01:9D:98:B8:8C:58:5D:5F:01:62:04:11:3C:83:9A:E0:67:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:26:6d:bb:ee:ce:b6:93:2d:1c:05:fe:68:82:dd:3e:81:79:
39:fc:d1:7c:e2:c1:27:0c:32:27:8d:29:72:b7:d8:63:95:e5:
19:d3:64:2e:2d:86:50:60:43:51:3f:74:e4:2e:a4:21:3e:e3:
87:ac:94:33:b0:d9:d1:d8:7c:76:ba:44:23:62:ad:e7:dc:db:
44:09:4e:98:ce:26:79:eb:15:8f:05:12:55:b0:45:d9:1c:12:
2b:fe:cb:da:d4:c5:40:bc:1b:dc:b1:71:fd:59:29:00:73:6b:
83:ff:4a:55:b1:f5:3d:ca:e4:dc:90:4d:ba:e1:23:ce:69:a5:
42:b2:5f:8f:da:f2:e5:a5:fe:5e:c9:0b:ff:df:e5:5c:a8:8d:
ac:dc:42:ce:c9:05:a0:31:6c:81:df:2c:10:09:1d:a0:38:ef:
94:a6:5c:0e:aa:01:9d:d8:96:30:ea:72:9e:ae:c3:58:47:7a:
52:b0:6b:ee:9e:4e:6e:61:2b:83:49:a3:bb:fc:87:94:fe:00:
40:42:1c:0d:96:ea:a5:75:4c:79:b7:f1:3f:db:a7:cd:71:ef:
75:a3:3e:99:0a:f5:31:3f:89:06:83:7d:4e:5b:53:5b:ff:f8:
8a:56:b3:75:34:08:c8:76:bb:2d:7e:13:20:80:eb:9e:22:a4:
a0:8c:36:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:15:59 2026 by rpki-client