Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
File: X6OG6XZW1kirU4GylmZBQIGwAIQ.mft (raw, json)
Hash identifier: JtpId1lHnPZ+nlhfjE+VipilWWUwYCzEZ4MOZ6++UhU=
Subject key identifier: C1:20:D5:F2:11:92:60:E2:A6:AE:BF:D9:22:22:0D:A7:A5:3B:ED:C6
Authority key identifier: 5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
Certificate issuer: /CN=5fa386e97656d648ab5381b29666414081b00084
Certificate serial: 019CAAFD0B35D02C8C2457214B7A09DBA681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
Manifest number: 07CD
Signing time: Sun 01 Mar 2026 20:00:35 +0000
Manifest this update: Sun 01 Mar 2026 20:00:35 +0000
Manifest next update: Mon 02 Mar 2026 20:00:35 +0000
Files and hashes: 1: X6OG6XZW1kirU4GylmZBQIGwAIQ.crl (hash: T9o0J5UE2E0MDj2AUdpaG+PSRCNB5x36BrYvKQzVjto=)
2: xhYgnKDXKCLXTlxGKn83qxGD5Wk.roa (hash: 4Tr8pcApL7OMPNYK6DHiqFf/BMOwe5lvOFY1rUx8z6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:0b:35:d0:2c:8c:24:57:21:4b:7a:09:db:a6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa386e97656d648ab5381b29666414081b00084
Validity
Not Before: Mar 1 20:00:35 2026 GMT
Not After : Mar 2 20:00:35 2026 GMT
Subject: CN=c120d5f2119260e2a6aebfd922220da7a53bedc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f9:7c:90:61:b6:89:73:d6:28:4e:20:04:78:
68:c7:9d:ec:36:fc:33:bc:16:7a:5a:61:b1:c6:10:
71:eb:2b:8c:c6:7a:81:67:6c:d3:4b:61:83:17:97:
10:6a:fd:ef:ff:d0:ee:54:87:28:20:c6:c7:09:93:
a7:35:8b:dd:d8:9a:a8:37:fa:bf:40:df:01:97:e4:
72:38:0c:59:b2:03:de:f3:b3:cf:9a:12:b2:91:4f:
11:95:40:48:c1:22:8b:f2:e4:e2:35:83:a4:92:5a:
25:9e:37:ab:33:3f:3b:83:57:0a:90:25:02:9b:09:
8e:08:9d:a4:3b:52:fb:29:54:29:9f:1f:e3:47:9b:
5a:78:1b:e6:e3:65:62:e1:63:af:92:bf:3b:c4:91:
8b:30:7a:54:11:a6:1c:45:cf:d4:ae:d9:96:ee:6f:
ca:17:37:bf:c7:34:3e:49:e2:49:16:76:27:9f:36:
a3:39:c1:cf:a6:e2:16:a1:3d:08:e0:11:08:2e:46:
26:02:c6:45:4e:4e:81:70:5d:dc:c7:db:49:8f:12:
0b:36:d8:c4:08:22:be:c5:95:1c:0f:b8:39:d3:8f:
f3:fe:52:cf:9d:27:30:b1:22:23:e3:0e:e4:68:05:
96:cf:2a:54:81:a6:cc:74:c6:55:a7:6b:e4:76:c7:
4b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:20:D5:F2:11:92:60:E2:A6:AE:BF:D9:22:22:0D:A7:A5:3B:ED:C6
X509v3 Authority Key Identifier:
keyid:5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:17:26:f4:d4:2b:ef:2f:0b:d5:65:b9:e4:1e:80:29:4d:a0:
a6:c6:88:85:87:6e:5d:d4:07:54:bb:99:b2:40:39:f4:32:fb:
04:66:9d:1f:6f:1a:90:ff:7e:30:3f:81:72:f2:31:2e:65:dc:
75:d5:f9:25:39:ed:90:62:38:ec:83:17:4d:bf:8b:d9:fe:50:
16:56:53:aa:5d:ea:2b:5d:dc:28:68:ab:7f:61:20:56:44:25:
84:6c:3e:2a:c1:ed:f6:81:78:0f:8e:47:93:ce:e2:14:a1:6d:
2a:d4:2d:08:24:cc:71:9f:40:66:73:11:74:c9:55:45:2e:88:
7f:37:8f:2b:22:57:d8:88:06:4d:a7:6e:c8:d8:60:0c:cd:da:
b2:34:da:1c:3b:38:fd:fd:bf:67:19:bc:2a:5a:40:70:94:2e:
8b:b1:fc:4d:d6:83:9f:07:5f:e6:02:63:e4:6e:0d:fe:95:b3:
7c:dc:9d:35:ab:b3:35:d0:e3:17:ee:03:f7:1e:a7:49:7b:cd:
53:8c:bb:a1:ab:6b:be:03:ee:8c:00:ca:a2:5d:1e:26:c1:6d:
8a:2a:ea:e8:57:4d:78:bf:cf:a5:fa:ee:64:77:ab:16:a2:3b:
b6:3a:83:a4:a2:4e:a7:db:a3:21:8a:23:d4:ea:38:65:a8:36:
fd:68:2d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:47 2026 by rpki-client