Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
File: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft (raw, json)
Hash identifier: NN6OyLWeytvPUThGa/H2eap3kQEWzoZ7pyUx5onb7RA=
Subject key identifier: 92:0E:66:76:85:D0:59:7F:A0:7C:6D:F7:85:E2:14:35:81:5F:A6:A4
Authority key identifier: 5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
Certificate issuer: /CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Certificate serial: 019CAE6C69C52ADF6A245A48E302EE1C7527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
Manifest number: 0C30
Signing time: Mon 02 Mar 2026 12:01:06 +0000
Manifest this update: Mon 02 Mar 2026 12:01:06 +0000
Manifest next update: Tue 03 Mar 2026 12:01:06 +0000
Files and hashes: 1: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl (hash: E7sCwIVoL6z/y3sFyeiGKP8HkpJhTagtii/I5TZlH30=)
2: YNrAk_rW-_hv_7y0q7L07WQbD3k.roa (hash: Q+lutWQbfqBQmTQcTTUR6g2UUXMHO1t1l0Opc14EpV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:69:c5:2a:df:6a:24:5a:48:e3:02:ee:1c:75:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Validity
Not Before: Mar 2 12:01:06 2026 GMT
Not After : Mar 3 12:01:06 2026 GMT
Subject: CN=920e667685d0597fa07c6df785e21435815fa6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:53:77:19:38:9d:25:f1:28:11:0f:31:9a:31:
6d:12:9a:0a:c1:8e:a5:cd:39:85:6e:1e:39:3b:88:
dc:3e:e2:58:0c:5c:7c:93:06:13:83:c7:8a:48:06:
3c:d4:04:9e:d5:db:ae:37:0c:04:aa:40:26:e8:d6:
5a:e3:38:37:72:db:00:40:03:86:90:65:77:d6:3a:
07:06:b2:77:1b:41:69:8d:a8:7f:a9:24:b0:2e:8b:
77:4b:d2:4a:46:6f:27:7a:01:d2:33:c9:1b:d7:0c:
eb:62:7d:6f:96:e0:91:48:d1:d0:98:c1:6d:cd:0f:
3d:35:c5:8b:2a:d0:4d:27:08:9e:fb:75:b1:d5:30:
60:a9:f0:99:37:07:03:97:b7:c0:24:87:3a:0c:c8:
18:16:d2:ed:a0:04:c4:31:0f:75:a1:01:99:85:09:
f4:a7:d4:7f:7a:b9:76:59:c2:2e:69:1a:d5:b2:5e:
38:8f:f1:d5:5c:0a:fa:3b:c3:7e:8a:61:07:d9:07:
c3:b1:9e:00:c2:1e:95:e7:70:0f:71:2d:d1:ba:d8:
a7:3e:a6:0a:ca:64:2d:7d:98:04:94:78:10:30:92:
b8:4e:af:fc:93:78:86:f9:89:73:3e:93:ef:b1:e1:
19:fb:db:6e:f8:4d:6c:85:de:c3:44:66:48:9d:4b:
81:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0E:66:76:85:D0:59:7F:A0:7C:6D:F7:85:E2:14:35:81:5F:A6:A4
X509v3 Authority Key Identifier:
keyid:5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e0:c2:e2:d2:ad:88:69:5c:c6:e6:66:42:f1:2b:ac:9e:0d:
cf:a8:6c:ea:3d:7b:a3:04:f6:a9:24:58:eb:b1:b2:e6:96:28:
6f:46:f9:dc:42:dd:7b:29:20:b0:da:a4:f5:4e:e5:c6:89:1d:
7e:34:c5:28:7b:32:57:25:bf:66:6a:44:d3:55:b6:7f:78:a7:
14:e2:c2:49:31:e0:39:23:e9:28:ad:97:3f:dc:80:45:14:57:
0d:e6:9c:79:f5:05:5d:15:fc:73:1b:14:ec:14:d2:8b:40:de:
74:cb:e6:b4:a3:14:e0:f0:23:44:f0:c3:fe:e0:9b:38:59:99:
89:2c:3d:a0:fe:45:4d:f9:f2:08:94:b8:7c:98:a4:c7:41:e2:
cc:a3:2d:86:fe:87:c0:56:c5:3d:f8:1e:12:b6:ec:85:77:8c:
ef:17:71:83:c6:70:03:38:7e:d8:ed:11:3c:3e:07:f5:f6:72:
58:16:99:6a:ef:a2:00:47:1b:09:76:21:97:7e:51:95:19:9b:
60:4c:1d:a1:a7:b7:12:97:e4:92:8d:95:48:8d:6d:2b:59:aa:
f5:2a:7d:99:6c:6b:2e:b2:f2:7c:1d:ab:62:89:db:9f:96:1c:
0b:14:f6:49:ea:d6:27:e5:56:f7:d3:c9:a2:d7:c4:94:95:7d:
10:09:b2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:18:24 2026 by rpki-client