Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
File: x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft (raw, json)
Hash identifier: q2pDY0cgm5qvNsz/3hPBXLLSpWjlANXWjA3b8KD6G6M=
Subject key identifier: E3:95:16:11:7F:02:B5:13:14:62:4D:0D:A7:EE:FD:B4:F5:DE:34:01
Authority key identifier: C7:6C:36:44:74:13:36:B0:1B:63:85:63:31:4F:40:D1:0C:69:D3:0D
Certificate issuer: /CN=c76c3644741336b01b638563314f40d10c69d30d
Certificate serial: 019CAB6B60E7831B26BA447F7B1DD33466FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
Manifest number: 0C54
Signing time: Sun 01 Mar 2026 22:01:06 +0000
Manifest this update: Sun 01 Mar 2026 22:01:06 +0000
Manifest next update: Mon 02 Mar 2026 22:01:06 +0000
Files and hashes: 1: SBXXsuQ2RCCtkfka4gDFjpiCz2E.roa (hash: mV/+p/4ajgUkF2cImFAUrHKdi3q+SL4hKUtvs6QGwDw=)
2: x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl (hash: QoeyEwG6vro5JDoFSbodNWGGSB+GcMxbMUvBNFoSti8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:60:e7:83:1b:26:ba:44:7f:7b:1d:d3:34:66:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76c3644741336b01b638563314f40d10c69d30d
Validity
Not Before: Mar 1 22:01:06 2026 GMT
Not After : Mar 2 22:01:06 2026 GMT
Subject: CN=e39516117f02b51314624d0da7eefdb4f5de3401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:04:5c:a2:1e:5e:c8:94:e1:f5:60:f8:ce:1e:
c5:f0:a8:5e:b7:f7:34:07:f9:3d:e2:ff:6d:68:c1:
5c:62:6d:4a:3a:10:ab:59:6e:92:84:dd:c6:2c:b6:
9c:b9:42:45:5c:87:1f:69:24:a0:99:52:31:0a:c5:
65:bb:27:e6:9f:ab:26:11:1c:6f:43:88:23:f6:af:
b1:9b:93:26:43:78:7c:3e:99:b6:ba:e0:37:fc:09:
21:21:6e:aa:ed:a1:b7:aa:59:a3:8d:b8:63:65:82:
1b:f2:fe:e0:f9:c6:05:3c:85:11:ed:bd:03:4c:48:
f1:65:44:80:6c:b4:ec:25:af:bf:16:7b:52:d7:fa:
5b:93:d1:e4:bc:21:a9:93:05:0d:7e:02:94:14:60:
11:50:ca:dd:47:4b:c5:54:2f:2c:83:96:f8:2b:37:
3b:13:84:4e:cb:18:4b:b6:46:f2:c9:db:4d:56:41:
dd:f3:29:e4:6e:17:9a:2f:34:0a:c8:96:ff:d8:de:
22:2b:89:f4:5a:ff:08:29:e4:29:f0:67:53:17:ed:
66:03:ba:ed:db:aa:80:d8:b7:41:8b:b4:d9:a5:fc:
7a:d9:36:f0:90:c0:83:02:e2:47:68:fc:fe:36:a6:
39:0d:3e:1e:34:a1:8a:23:31:a6:cf:9c:cb:2c:d5:
df:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:95:16:11:7F:02:B5:13:14:62:4D:0D:A7:EE:FD:B4:F5:DE:34:01
X509v3 Authority Key Identifier:
keyid:C7:6C:36:44:74:13:36:B0:1B:63:85:63:31:4F:40:D1:0C:69:D3:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ca:85:17:98:0a:30:80:0c:98:f0:76:01:ba:95:7e:06:13:
cf:ae:0d:00:9d:9f:21:ff:39:22:92:10:da:9e:c9:54:a4:9f:
ba:ac:5f:82:dc:c9:a3:0a:89:ea:be:1d:84:1f:e8:6b:cb:9d:
9c:68:ab:5d:49:a2:4a:85:3a:96:88:26:34:14:35:e1:d7:8c:
80:57:9a:ea:63:1f:b8:9c:6b:58:ce:3b:21:0a:20:ea:ac:ab:
ce:30:60:78:0e:54:56:39:83:08:e5:d9:da:a5:70:85:f5:31:
1c:cd:d5:c7:51:ae:dd:ea:93:9c:90:1b:10:6a:f8:a2:0d:df:
43:ca:80:a5:05:21:77:e7:14:33:e2:40:56:00:22:94:1a:9c:
bd:93:c0:51:af:41:3d:52:f3:94:e3:f8:4d:5e:fc:df:c3:b8:
6d:0c:c8:e9:1f:ae:b7:54:d2:f5:ec:03:b6:59:95:f5:e5:86:
69:69:eb:9b:40:62:5b:09:80:05:26:0b:8b:3c:87:ad:da:c1:
9c:5e:b4:e8:20:64:ff:bb:9b:b7:c7:e8:06:28:e7:0a:85:ed:
5e:8a:0d:4d:af:e2:9f:70:3f:43:2f:db:7b:26:33:17:c4:52:
60:a5:7b:91:d8:93:8e:7a:a5:40:56:bd:6f:76:f2:c2:dc:ca:
91:c4:0e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:16 2026 by rpki-client