Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
File: xWwoao20vSFr9kx1szhRsARaF18.mft (raw, json)
Hash identifier: RDbvhCMfUFmtM67jvudrKTVkIMsXgTsao8dO2mLoOGw=
Subject key identifier: 75:F9:E3:23:0D:24:10:24:75:18:1F:1A:93:A4:77:8E:48:0E:CD:80
Authority key identifier: C5:6C:28:6A:8D:B4:BD:21:6B:F6:4C:75:B3:38:51:B0:04:5A:17:5F
Certificate issuer: /CN=c56c286a8db4bd216bf64c75b33851b0045a175f
Certificate serial: 019CABD96AF6B3D366F6EFB56C4EC5BFC05D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
Manifest number: 0CAA
Signing time: Mon 02 Mar 2026 00:01:18 +0000
Manifest this update: Mon 02 Mar 2026 00:01:18 +0000
Manifest next update: Tue 03 Mar 2026 00:01:18 +0000
Files and hashes: 1: fzBvwE7sX01y4kB6SSgdE7n9ysI.roa (hash: qCcHE+EY0A9msSwDHW5P3s9hKxDDBKeiCJ6eljce7Pg=)
2: xWwoao20vSFr9kx1szhRsARaF18.crl (hash: VD63cQ08CDuzqUEbZYTShsZaFXhGmM+KhfG3MgMhgss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:6a:f6:b3:d3:66:f6:ef:b5:6c:4e:c5:bf:c0:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c56c286a8db4bd216bf64c75b33851b0045a175f
Validity
Not Before: Mar 2 00:01:18 2026 GMT
Not After : Mar 3 00:01:18 2026 GMT
Subject: CN=75f9e3230d24102475181f1a93a4778e480ecd80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:94:bc:88:d9:95:28:fa:55:f1:52:8a:91:7e:
c4:58:af:c0:ea:27:51:1b:5f:fd:a2:bb:68:d4:c4:
27:ca:50:d9:af:2e:2b:3c:22:eb:12:88:80:9f:f1:
88:0f:12:e4:2c:64:f2:34:84:44:bb:92:f1:14:1b:
a2:56:87:68:d5:5f:22:fb:00:e8:59:eb:99:6f:9e:
d7:19:c4:68:53:f9:aa:ce:62:d2:26:3f:d9:6d:09:
32:29:77:8c:4d:d4:62:49:d3:54:dc:ac:c4:b2:5e:
92:09:8b:2b:70:4b:cb:fe:d2:d2:3b:57:d0:a9:9c:
f0:8d:1f:47:e1:a1:fa:5c:69:75:27:5c:82:d1:44:
0c:a7:a7:19:6d:bb:f8:2e:92:83:22:33:66:5f:da:
f6:e0:45:9a:29:5e:1d:06:a7:47:73:b2:7e:fb:16:
b8:3d:9b:45:74:0b:75:5e:c7:5a:75:c5:69:d9:ec:
08:42:e9:a2:5d:a7:6a:15:60:45:b3:c1:50:be:52:
93:57:68:40:c5:98:46:52:c6:0e:2e:49:32:65:91:
e5:a3:7e:3f:1a:0b:88:8f:98:a8:7d:0f:06:02:42:
bd:ff:11:09:af:4f:6f:0b:c6:e8:66:6e:af:84:9a:
ee:55:87:61:99:23:a2:10:bc:8c:c4:ef:a7:57:31:
08:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F9:E3:23:0D:24:10:24:75:18:1F:1A:93:A4:77:8E:48:0E:CD:80
X509v3 Authority Key Identifier:
keyid:C5:6C:28:6A:8D:B4:BD:21:6B:F6:4C:75:B3:38:51:B0:04:5A:17:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:c1:d5:c3:63:6e:83:0b:47:aa:23:c3:dc:f2:9c:e7:d3:48:
5f:84:d3:fc:71:cc:be:a5:0f:46:43:a6:a1:10:61:a2:62:25:
5a:92:88:ac:a1:15:e9:7c:ce:62:a0:e4:b0:6a:22:dd:6c:f9:
56:df:83:cd:ac:40:fc:b0:a2:1e:5f:7a:d8:8d:c1:4f:0b:78:
f3:6d:b9:b6:a6:e3:ae:66:f8:1d:83:dd:e8:8a:d7:d2:c6:44:
f7:79:53:42:86:19:30:65:16:eb:40:00:6b:58:1b:2c:ae:c8:
a4:e9:c6:51:e3:a7:e9:84:82:9e:1f:41:b7:09:59:c4:2a:23:
16:08:7a:d5:06:3a:13:bc:1e:40:fd:19:bd:fe:4f:f5:99:24:
06:16:46:29:cf:28:14:91:60:cf:a6:e9:a2:bf:99:b5:94:ea:
90:76:b0:a7:69:98:28:cb:66:db:23:6f:0a:ba:d4:92:60:46:
34:87:2d:48:0d:0d:2c:29:90:46:4d:b5:3b:2b:e8:04:3a:00:
38:98:15:db:cd:93:48:8f:cd:d2:a4:87:93:94:d9:ba:2c:44:
cc:20:e3:37:05:83:7e:ff:49:7c:6c:5d:53:62:03:fe:8c:58:
44:60:2a:d2:c1:82:d8:c8:7d:13:b3:66:9b:c2:8c:c9:44:24:
02:dd:6f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:34:03 2026 by rpki-client