Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
File: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft (raw, json)
Hash identifier: bYOo2NwyhSjYJBrO+iOICdYo1C6oqsh0Fr7QLCc2UM4=
Subject key identifier: 3E:83:22:E0:1C:8D:36:5A:51:C6:F4:36:95:82:78:4B:D9:5E:FF:8E
Authority key identifier: C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6
Certificate issuer: /CN=c53b29170b56a84241f4b84fd4daff0836d503c6
Certificate serial: 019CAC7E1D96873A57307E0B3107B3C76FF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
Manifest number: 0C32
Signing time: Mon 02 Mar 2026 03:01:11 +0000
Manifest this update: Mon 02 Mar 2026 03:01:11 +0000
Manifest next update: Tue 03 Mar 2026 03:01:11 +0000
Files and hashes: 1: QehD96f5TABcvSMwJKFdikzIbO8.roa (hash: SRLpbEp6q6uyhKVlw7Pt60kWZXK8snPed5qV+0O6aV8=)
2: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl (hash: 8ZUIUajrP8SJ+WU1CR8zLmOyyNdLXp4GcmHzwzhyRNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:1d:96:87:3a:57:30:7e:0b:31:07:b3:c7:6f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b29170b56a84241f4b84fd4daff0836d503c6
Validity
Not Before: Mar 2 03:01:11 2026 GMT
Not After : Mar 3 03:01:11 2026 GMT
Subject: CN=3e8322e01c8d365a51c6f4369582784bd95eff8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:42:42:35:04:c8:4e:0f:37:05:43:4f:ac:05:
7b:06:8e:53:9b:d6:e3:5c:b3:66:2c:98:72:80:dc:
aa:f7:93:17:70:ff:4d:9e:fd:a7:c5:5a:00:68:69:
63:cb:75:05:df:46:e3:ae:77:c3:de:d9:3b:0f:e4:
4c:74:36:d2:92:09:1d:45:24:ff:a5:56:32:78:e7:
7b:75:05:05:6e:db:e5:4d:b2:c8:e0:f6:e7:ea:b2:
6f:6f:6d:12:d9:fa:d7:8e:a6:07:7e:9a:5e:0c:1e:
2e:66:2b:24:74:91:c6:b9:35:ac:9c:a5:3a:ff:bb:
cb:12:2c:6c:a9:74:9b:9e:36:b3:d7:24:5d:41:41:
7d:e5:95:fc:b9:7a:a0:df:dc:47:79:3d:3c:4f:77:
e1:73:7c:b4:2a:71:cb:20:5a:85:7e:b0:ee:2f:11:
5d:af:e4:2f:71:b9:8c:be:88:98:88:11:72:55:31:
39:ff:11:53:e2:5d:bd:00:ad:35:56:1f:6a:c7:a1:
dc:d2:70:9b:d6:d0:ae:cb:c4:9d:b9:28:96:c1:d3:
a7:5f:fa:08:17:21:c9:46:fb:94:d1:2c:a5:88:6c:
85:27:74:85:d0:26:e5:3a:fe:65:e4:e6:04:eb:3a:
f7:e8:69:f2:76:68:b1:01:fc:0f:a7:51:27:fd:f4:
c8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:83:22:E0:1C:8D:36:5A:51:C6:F4:36:95:82:78:4B:D9:5E:FF:8E
X509v3 Authority Key Identifier:
keyid:C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ab:08:d8:c2:47:5f:32:b7:f1:eb:fa:51:ce:8c:0d:99:57:
9a:e3:f9:8f:e4:9e:4c:a2:c7:97:7a:93:96:38:ba:50:96:1b:
aa:dc:d0:0a:82:de:9c:7e:a5:b0:41:b3:6d:4f:b7:0f:a9:ef:
40:19:c5:43:dd:ae:6c:5d:fd:5a:52:ee:be:8c:ed:b6:aa:f2:
2a:09:26:0a:fe:a9:8b:ff:56:8f:9d:44:89:b4:9c:97:ba:07:
e0:73:32:f1:03:54:ed:72:5a:02:0c:db:d7:a2:05:d9:24:d0:
ea:d0:16:55:0e:a1:30:da:56:44:8a:fa:47:1d:37:61:77:b9:
15:2e:a8:e4:30:4f:c3:4c:74:a0:85:b1:e8:6e:9c:76:5e:c2:
dc:4d:82:b1:c9:bf:fd:f0:ee:b0:60:b0:f4:20:05:10:84:f4:
e7:2c:b0:bc:10:31:8a:b4:a4:17:1d:e6:88:9c:82:8f:60:e4:
eb:9f:3a:87:f5:1b:ad:8a:dd:f5:73:87:41:d4:66:19:fa:29:
20:1c:72:e6:2d:6c:5e:e1:92:61:f3:b3:88:91:7b:e6:93:c5:
c9:76:35:21:f0:70:f2:e3:61:90:10:f0:4a:46:1f:9e:de:84:
e7:3e:58:e9:9f:30:93:87:ac:26:6e:76:23:40:7c:a5:df:24:
6c:c3:09:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:56:55 2026 by rpki-client