Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
File: xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft (raw, json)
Hash identifier: QSGU1rdWQUETSX78R0YJzUtncO2g36Qbnb7dxLwRNAs=
Subject key identifier: 98:4A:8F:B2:34:65:17:05:B3:7C:08:7C:54:FE:B0:62:62:0C:13:4B
Authority key identifier: C7:2E:71:63:53:EC:73:3A:B4:B5:08:53:08:B3:86:D8:9A:74:F1:47
Certificate issuer: /CN=c72e716353ec733ab4b5085308b386d89a74f147
Certificate serial: 019CAA8FE2F1AC279439CE0D4B57195AC7F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
Manifest number: 1092
Signing time: Sun 01 Mar 2026 18:01:22 +0000
Manifest this update: Sun 01 Mar 2026 18:01:22 +0000
Manifest next update: Mon 02 Mar 2026 18:01:22 +0000
Files and hashes: 1: xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl (hash: DxU6pLmzogtkX0VPSS3PxgqJr99mOPZ8EhXiV0yARTQ=)
2: zWTdP30QPHHdohheUhhfVW3hF4c.roa (hash: /i9LH6nCZuFhrfLjUwLanr2mJf1UJXJyn992vVslFf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:e2:f1:ac:27:94:39:ce:0d:4b:57:19:5a:c7:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c72e716353ec733ab4b5085308b386d89a74f147
Validity
Not Before: Mar 1 18:01:22 2026 GMT
Not After : Mar 2 18:01:22 2026 GMT
Subject: CN=984a8fb234651705b37c087c54feb062620c134b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:be:e8:93:d6:b5:6c:36:4a:45:0d:a4:8a:90:
4c:59:4e:d3:4b:84:4d:f2:1c:23:07:4a:74:2c:ef:
c0:8d:83:ce:28:c8:31:b9:b5:80:04:ff:47:f5:0d:
e9:61:49:2b:96:c9:58:9c:35:0f:8f:41:c8:f4:3a:
c8:3f:06:08:fc:5b:ee:09:f0:1e:00:d5:f9:cf:5d:
9e:37:38:f3:8d:3e:75:89:38:eb:7a:46:d7:d0:03:
08:b1:3f:10:07:40:6a:c3:32:11:30:92:f9:92:1c:
e9:9e:40:2c:ad:e5:5b:f7:d9:48:da:45:74:cd:c1:
c7:3d:33:5b:38:25:48:4d:de:11:51:af:12:22:00:
22:01:de:04:0a:62:19:3a:13:83:9a:de:5e:49:ee:
15:cc:8f:f1:16:33:55:21:91:72:b5:3b:0d:5d:79:
4d:88:8f:e1:8b:2a:30:ec:3f:97:50:75:8b:8e:a7:
34:bd:fb:a6:31:89:44:1c:e9:12:ae:40:60:6f:07:
dc:50:70:07:73:03:ca:1c:f4:52:d3:16:11:7c:05:
f2:8b:e9:7f:9d:d2:4c:89:02:7c:08:5c:7e:86:60:
8b:ef:b7:34:6b:de:c3:67:96:97:bb:86:41:b4:75:
53:fa:97:a1:db:d8:04:4a:d5:fb:eb:6c:b1:f8:d9:
11:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4A:8F:B2:34:65:17:05:B3:7C:08:7C:54:FE:B0:62:62:0C:13:4B
X509v3 Authority Key Identifier:
keyid:C7:2E:71:63:53:EC:73:3A:B4:B5:08:53:08:B3:86:D8:9A:74:F1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:5a:82:af:f3:4c:5b:1b:19:fb:0c:d0:d4:c0:cd:09:e1:84:
84:85:91:99:1d:05:f6:34:bf:6f:cf:73:44:69:13:84:d1:d6:
8c:0d:44:3f:b5:de:97:67:ac:51:fe:e8:ae:05:1b:f7:37:9f:
63:92:94:f1:16:3e:bb:8c:d9:af:94:ed:8f:35:6b:91:08:ce:
78:1e:47:a8:64:b7:ea:f5:38:f2:5d:16:51:7c:39:30:7a:f6:
15:e7:44:16:f5:62:0f:e6:7f:ea:63:c8:8a:2c:47:1b:c9:ed:
85:b6:a6:d8:0b:5d:22:11:08:27:78:13:53:5b:a7:ee:4e:43:
f6:98:a2:8f:32:69:1a:3b:82:64:58:09:f9:51:26:e2:11:4c:
cd:dc:82:3e:33:66:4e:e5:8f:22:c1:fd:45:6c:1a:7f:c5:07:
c3:22:85:d7:7b:ac:d5:31:f1:ac:33:f6:ae:36:67:5d:25:a2:
77:71:84:71:de:92:b0:c1:03:b7:7e:9d:d9:33:ab:19:85:d8:
d3:72:54:72:78:56:11:19:67:27:6d:e6:4e:42:cf:c3:59:c9:
1c:4c:68:48:09:da:e0:09:ec:70:9e:28:4d:b1:93:d2:2c:2e:
b8:ce:f5:b5:fc:01:fd:9d:5e:d1:24:c5:23:24:18:ed:b0:aa:
46:1c:04:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:05:51 2026 by rpki-client