Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
File: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft (raw, json)
Hash identifier: Or7kIZQ6iCcrPo7fw1YqUe6OeVv2fu1sQToI4QnXOAo=
Subject key identifier: 0F:F7:A5:BE:BB:32:BE:C8:52:9F:B7:0D:DB:F7:CB:F7:A4:82:52:21
Authority key identifier: C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6
Certificate issuer: /CN=c53b29170b56a84241f4b84fd4daff0836d503c6
Certificate serial: 019D98188DC13CEBF13EBF0276F91869D695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
Manifest number: 0CAC
Signing time: Thu 16 Apr 2026 21:00:38 +0000
Manifest this update: Thu 16 Apr 2026 21:00:38 +0000
Manifest next update: Fri 17 Apr 2026 21:00:38 +0000
Files and hashes: 1: QehD96f5TABcvSMwJKFdikzIbO8.roa (hash: SRLpbEp6q6uyhKVlw7Pt60kWZXK8snPed5qV+0O6aV8=)
2: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl (hash: IBmKLcUtruf9T4kDOFQXMz37h3yTTPIq5x0qZtYvQcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:8d:c1:3c:eb:f1:3e:bf:02:76:f9:18:69:d6:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b29170b56a84241f4b84fd4daff0836d503c6
Validity
Not Before: Apr 16 21:00:38 2026 GMT
Not After : Apr 17 21:00:38 2026 GMT
Subject: CN=0ff7a5bebb32bec8529fb70ddbf7cbf7a4825221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:14:4a:de:ac:39:8b:cc:a4:7b:40:e3:68:da:
63:69:36:88:f9:20:03:f4:95:4d:52:51:bb:f7:09:
0b:b3:2a:c0:ee:1f:0b:80:04:5a:0d:31:1c:45:cf:
35:58:ac:0c:a4:57:c0:4b:69:a1:b8:f2:78:31:f7:
bd:2f:ff:db:80:67:79:7f:f3:f8:43:ed:17:7b:c8:
45:39:c5:dd:d4:94:e8:0b:54:c9:ea:44:71:ea:a7:
63:3e:30:2e:a3:f9:66:41:73:fb:7a:be:98:a7:cb:
15:01:9b:7c:a3:a0:42:c3:90:ee:51:34:29:18:29:
25:9b:6c:d8:f1:cf:ec:b9:58:39:46:51:0a:16:a5:
e8:5a:c1:74:41:58:b7:71:12:6e:db:b5:ee:8e:11:
fa:b2:20:78:1b:3b:46:5b:95:e1:74:40:18:ae:5f:
21:36:3e:bb:78:0b:d7:0c:87:0c:78:6e:df:7b:e9:
4a:ef:83:5c:32:86:1f:6f:a0:1f:11:eb:4c:55:27:
40:61:7f:57:0e:3b:5f:54:65:4f:68:ce:0c:b2:85:
ba:4a:8a:d1:fd:7f:7d:7d:62:a1:59:af:86:ef:ec:
c2:87:d5:ad:92:e7:8a:38:36:4e:07:ad:0a:81:78:
4c:d0:b1:ee:2b:4d:be:7e:17:18:ca:72:56:9f:54:
44:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F7:A5:BE:BB:32:BE:C8:52:9F:B7:0D:DB:F7:CB:F7:A4:82:52:21
X509v3 Authority Key Identifier:
keyid:C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:12:d6:cc:4a:f8:f0:e8:81:79:74:e6:2b:33:f0:08:f5:4c:
4b:72:11:d7:cc:17:66:9c:91:87:ad:44:f9:40:5d:6e:9a:e2:
4d:40:64:b5:b4:7b:8a:e9:a3:19:55:8d:f5:f4:91:bd:4c:25:
f1:ad:05:53:15:77:7c:56:9b:02:b9:ce:62:6f:99:f6:cc:d7:
23:4e:b1:48:8a:ae:24:c7:a3:01:44:a4:18:87:bd:16:5a:30:
ab:2b:50:54:66:a9:80:ae:17:08:12:3b:fe:c8:cf:81:94:2d:
3e:a5:65:a9:d3:5b:4f:02:11:7f:52:b4:c6:82:b6:04:e6:22:
5a:a5:a2:18:f8:91:6f:09:cd:fc:c0:7c:38:bd:88:60:0e:1b:
53:27:83:b8:1b:4d:cc:c2:2f:7f:4b:5d:41:84:b4:18:83:8d:
4b:73:f5:b2:f3:5b:40:79:b7:5d:ad:e5:d7:75:71:53:d7:f4:
3c:46:a6:6f:cb:36:02:ce:a1:02:b7:43:c6:6e:9c:c6:f4:88:
6c:b7:15:c9:b9:94:22:79:d6:22:73:6b:cb:df:bc:40:38:d5:
8d:83:69:da:2f:f5:cf:21:6d:41:46:98:b0:c6:3a:f6:64:b6:
2a:ee:14:6d:65:54:91:76:31:b8:12:a8:d9:ac:3b:14:4f:da:
89:59:fc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:41:37 2026 by rpki-client