Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
File: xW93K_PEZBpxv39LxN4RyTrd_qY.mft (raw, json)
Hash identifier: 48ShSdY+pJuVFRDxniFGBJ4JbTaqLH8DNlHo7vd+PSE=
Subject key identifier: A1:17:0D:ED:AD:0A:9A:9F:F6:80:D9:0B:16:E1:9F:E5:CE:67:A3:87
Authority key identifier: C5:6F:77:2B:F3:C4:64:1A:71:BF:7F:4B:C4:DE:11:C9:3A:DD:FE:A6
Certificate issuer: /CN=c56f772bf3c4641a71bf7f4bc4de11c93addfea6
Certificate serial: 019CADFEC38788944B9A2B498F63A66B56D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
Manifest number: 117E
Signing time: Mon 02 Mar 2026 10:01:20 +0000
Manifest this update: Mon 02 Mar 2026 10:01:20 +0000
Manifest next update: Tue 03 Mar 2026 10:01:20 +0000
Files and hashes: 1: UZbrORTP_ETM2yJiPplsddvS7KA.roa (hash: KMKv//YG/qKlJS3aeSyQju59WADPz9oMFmNno9Nz5a4=)
2: xW93K_PEZBpxv39LxN4RyTrd_qY.crl (hash: dz73GsGS3tOqprqsAvcTjpEluSs80rq4WG67B59LGvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:c3:87:88:94:4b:9a:2b:49:8f:63:a6:6b:56:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c56f772bf3c4641a71bf7f4bc4de11c93addfea6
Validity
Not Before: Mar 2 10:01:20 2026 GMT
Not After : Mar 3 10:01:20 2026 GMT
Subject: CN=a1170dedad0a9a9ff680d90b16e19fe5ce67a387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6c:55:63:c5:98:a1:7e:12:1a:3e:65:42:8f:
ca:43:2a:75:23:ec:67:72:71:ab:28:a6:e0:fe:55:
aa:a5:97:34:5b:2d:37:f5:73:6b:7d:08:b6:a8:cc:
2f:9a:26:39:ed:f1:5c:d7:d5:9a:3f:6a:60:0b:5b:
6a:96:71:46:0a:24:b1:6e:ea:44:55:a5:be:b6:a5:
f8:af:e2:e0:fd:86:c9:7d:a1:5f:55:6c:b1:dd:e4:
98:1e:5d:f2:54:24:d4:b2:b1:61:46:e2:40:0e:8e:
19:ec:d3:35:ae:1b:35:27:4d:df:02:3f:3f:2b:d1:
2d:7f:ae:09:3e:2e:f9:4b:fd:e6:13:3b:54:4d:f4:
d2:15:82:33:8b:5d:45:b5:52:30:1b:a4:0c:37:14:
ca:68:06:ee:b4:a6:7e:f2:ef:72:78:64:5d:4c:63:
97:b5:84:fe:1c:cc:97:d5:3d:17:49:56:de:b3:c4:
e3:3b:2c:42:9e:9a:f7:3f:c9:73:3c:0c:d0:3a:72:
7b:3e:05:a3:a7:04:e7:f2:87:5a:c8:a1:3d:55:9a:
05:7c:02:39:aa:cf:d7:8d:08:8a:61:d6:fa:f6:e1:
fc:a7:d2:bb:4c:8f:e4:04:ed:d4:70:3a:62:f1:22:
05:39:5a:5a:f0:89:a5:94:5d:d3:ce:a9:82:7b:36:
0b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:17:0D:ED:AD:0A:9A:9F:F6:80:D9:0B:16:E1:9F:E5:CE:67:A3:87
X509v3 Authority Key Identifier:
keyid:C5:6F:77:2B:F3:C4:64:1A:71:BF:7F:4B:C4:DE:11:C9:3A:DD:FE:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:16:dd:a3:2b:19:ee:98:c5:f3:84:f8:30:5c:3e:5b:72:8e:
e3:82:8d:a6:be:7a:6d:40:2c:2b:77:1b:31:5b:65:d8:59:dc:
07:03:3a:f7:fc:32:70:42:1a:38:07:74:c4:32:02:fa:99:84:
d3:f1:b6:a7:5e:6c:26:a7:57:57:9d:ad:35:a5:32:48:52:20:
5a:f7:98:2f:1b:e9:ad:7a:b0:68:fd:55:92:60:af:33:fc:06:
0b:6d:53:90:28:12:ae:77:21:66:44:c2:c8:49:81:9a:c0:b1:
dc:95:cc:1e:cd:04:ea:d9:5e:2d:b1:15:c7:32:e6:dc:0e:18:
d0:1b:0e:82:5e:b6:e5:1b:5f:0c:b1:fd:88:41:30:32:80:47:
f3:ed:3c:ba:f6:8a:2a:73:64:c9:d7:f6:ad:34:a1:f0:b9:f2:
85:24:1b:82:80:47:7c:7c:c7:3d:20:cd:63:c0:e9:4a:78:ee:
36:b5:a9:c1:fa:3c:7e:99:85:87:5a:2a:2b:ce:98:b6:c9:63:
3e:2e:36:1c:58:e0:da:09:35:2a:9c:89:12:5a:39:4c:d7:ca:
43:a0:cf:38:09:87:4e:a1:98:ea:9a:09:02:e6:4b:59:01:78:
40:97:92:6c:34:42:c7:27:58:e9:45:62:fe:9b:36:c6:34:26:
9f:b6:80:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:40:41 2026 by rpki-client