Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
File: xTsinnPOa7GW1lwL7xGVYGV6NyA.mft (raw, json)
Hash identifier: lnno1SUDFFVm5wdUEZBJQXi8gY9imQmnjHuijxO9nk8=
Subject key identifier: D3:A9:28:3C:F3:D0:D8:2D:CC:B3:7A:A3:32:4F:60:18:5B:FD:11:6E
Authority key identifier: C5:3B:22:9E:73:CE:6B:B1:96:D6:5C:0B:EF:11:95:60:65:7A:37:20
Certificate issuer: /CN=c53b229e73ce6bb196d65c0bef119560657a3720
Certificate serial: 019CAB6B6CE9FD880B98237954A5E2FF8DF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
Manifest number: 0CB1
Signing time: Sun 01 Mar 2026 22:01:09 +0000
Manifest this update: Sun 01 Mar 2026 22:01:09 +0000
Manifest next update: Mon 02 Mar 2026 22:01:09 +0000
Files and hashes: 1: iflWHVHxpmDjWRQsawE9EnRAAog.roa (hash: Pfv9IcP/hIRl799n9aafLKMa8g4cQzw8aOtBJX7HXA0=)
2: xTsinnPOa7GW1lwL7xGVYGV6NyA.crl (hash: WDh3MKNOLTtlOxg/qp3s5BigZVY8R7/uHqASbeClAbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:6c:e9:fd:88:0b:98:23:79:54:a5:e2:ff:8d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b229e73ce6bb196d65c0bef119560657a3720
Validity
Not Before: Mar 1 22:01:09 2026 GMT
Not After : Mar 2 22:01:09 2026 GMT
Subject: CN=d3a9283cf3d0d82dccb37aa3324f60185bfd116e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:56:5b:4c:42:6b:52:8f:f5:7d:91:b1:90:e2:
1f:40:df:66:0b:b4:92:ef:a9:de:bb:27:cc:27:ad:
79:47:ae:c1:24:7a:1a:31:13:f3:44:84:26:4c:db:
23:d6:bf:44:61:f8:57:f6:d4:f7:6b:27:de:01:e5:
bb:23:0c:d5:66:e3:89:3b:b0:56:3e:15:4f:cd:77:
4a:b1:55:6f:98:20:d1:59:dc:a3:c0:12:bb:c8:03:
44:68:ed:42:e0:51:a3:d5:0d:73:60:8b:4d:35:fd:
92:bc:4c:9c:17:ff:80:3d:87:eb:67:77:10:0c:6f:
64:45:4e:55:8b:8e:29:54:f6:b6:4e:c0:88:81:c1:
47:b9:58:66:d9:7e:68:f4:9a:c5:16:b7:9b:94:19:
b7:56:ea:77:16:b5:ec:42:fd:23:f5:45:c3:83:c4:
d2:4f:1f:ea:a4:07:cb:72:60:0c:83:b4:a9:ee:6d:
00:0c:c2:2f:94:a7:e9:f4:aa:f8:94:6f:f4:79:f0:
9e:65:93:69:e4:82:9e:5f:c4:af:02:29:ce:d8:9d:
b6:4b:3f:09:11:99:fd:25:c0:fb:7e:5a:19:56:20:
58:91:d1:b1:43:1b:5f:ca:e3:0a:c7:49:cf:49:db:
8b:b7:af:57:b2:a3:d3:e2:0e:88:4d:6d:a3:c0:27:
49:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A9:28:3C:F3:D0:D8:2D:CC:B3:7A:A3:32:4F:60:18:5B:FD:11:6E
X509v3 Authority Key Identifier:
keyid:C5:3B:22:9E:73:CE:6B:B1:96:D6:5C:0B:EF:11:95:60:65:7A:37:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f2:33:e6:c2:5f:c1:2c:81:e1:36:aa:14:32:26:43:24:52:
44:52:02:58:a8:21:a1:3b:ce:43:13:52:b7:98:ed:d1:2b:ad:
ca:e4:21:62:c1:9d:fc:f7:b5:bd:ac:04:9b:4f:e7:e0:c9:74:
12:8b:e4:64:b4:fb:6d:11:30:d4:d4:94:c4:63:15:68:a6:74:
96:92:3f:e7:c8:22:6e:29:b1:74:2d:d8:45:b6:ce:b2:7f:a8:
27:03:05:a9:33:4d:16:c3:38:fd:50:df:53:5b:26:91:ac:a8:
c2:ec:39:57:e6:67:6d:7a:17:f8:59:1e:61:57:e0:90:29:51:
60:a0:80:cd:5d:6f:e3:59:41:2b:b4:86:19:3e:25:f3:db:c2:
9d:ba:b7:fe:f7:72:6b:df:0b:17:e9:25:92:31:03:bd:ac:46:
9d:94:8e:d5:d8:e0:35:ae:d8:75:c4:d4:f2:e8:84:c2:a3:2a:
2f:b1:9f:7f:87:4b:a1:2f:b4:6e:73:b1:ca:71:6e:02:a5:16:
57:1e:01:9f:fb:93:89:be:23:b3:a1:85:3f:71:c3:81:ea:d0:
a7:0a:d9:35:ac:26:16:d3:fd:23:13:62:fe:01:09:2c:ee:b1:
75:01:0f:35:94:e8:b2:ce:74:3c:6c:be:3d:d8:72:9d:bd:a6:
d9:21:3e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:04:26 2026 by rpki-client