Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft
File: xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft (raw, json)
Hash identifier: usPSYG4iiAlfjoYYvniY+NeaECuYnhqSv5rTKKUaKA8=
Subject key identifier: CD:3A:6C:67:C5:EC:88:79:0D:6A:C6:D2:E5:9A:15:F9:4D:E9:69:6D
Authority key identifier: C5:3F:43:88:AA:DF:0A:E4:FF:5E:E7:BD:37:26:3C:9F:1E:84:67:C7
Certificate issuer: /CN=c53f4388aadf0ae4ff5ee7bd37263c9f1e8467c7
Certificate serial: 019CAD90453F435699450A6DE3A3B842156B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft
Manifest number: 0E47
Signing time: Mon 02 Mar 2026 08:00:39 +0000
Manifest this update: Mon 02 Mar 2026 08:00:39 +0000
Manifest next update: Tue 03 Mar 2026 08:00:39 +0000
Files and hashes: 1: RO-P37ZaJBhYTx2bPXE9-XaK6mc.roa (hash: qyOlC1NYVIRV04UnpCxjxHKBjKTFjIWJJFf105WAhVM=)
2: xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl (hash: XtWqEInRLFDc3m1ITX66Gxm64Pv5uQbAIGuRG3K/KjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:45:3f:43:56:99:45:0a:6d:e3:a3:b8:42:15:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53f4388aadf0ae4ff5ee7bd37263c9f1e8467c7
Validity
Not Before: Mar 2 08:00:39 2026 GMT
Not After : Mar 3 08:00:39 2026 GMT
Subject: CN=cd3a6c67c5ec88790d6ac6d2e59a15f94de9696d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8d:07:a8:0d:f1:a0:a5:c3:24:a3:1c:87:fc:
80:58:59:9b:4b:c8:29:19:7e:ed:66:c0:10:b7:e4:
37:c3:5f:85:72:05:ab:ca:10:fa:af:55:3f:57:4d:
dc:69:b7:9b:3e:d2:43:ce:ce:fa:51:32:58:ef:37:
a0:87:73:85:76:63:49:22:f4:d6:db:a4:64:ea:0a:
1f:2c:f2:55:52:41:ca:bf:c3:a6:1c:41:8c:60:be:
a9:ef:bd:b3:71:4a:62:fb:92:fc:93:7b:bc:e4:76:
83:b6:14:2c:73:52:74:8e:8f:f0:fe:63:a1:02:28:
fe:5e:c8:ec:c5:56:79:20:06:c0:db:5c:29:69:21:
62:fd:3c:5b:72:b5:6c:55:15:8b:59:2d:6c:1d:50:
53:f0:04:7c:d3:a6:96:e8:20:29:ca:4c:f6:17:9a:
d9:92:ae:5c:47:20:e5:98:76:4d:d1:44:67:61:9d:
60:f2:42:cb:58:45:b0:2b:bd:4a:fc:ec:ab:74:7e:
60:86:6c:c1:cb:c9:7d:e4:e6:d6:70:90:9a:7c:d9:
ef:13:72:49:75:73:52:52:06:9a:8a:6f:a8:4f:37:
90:dd:9a:76:fe:1c:e6:c2:8d:14:b1:7c:74:0c:d7:
13:d7:40:dc:7a:5d:30:5f:11:ad:61:79:55:a1:d4:
a0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3A:6C:67:C5:EC:88:79:0D:6A:C6:D2:E5:9A:15:F9:4D:E9:69:6D
X509v3 Authority Key Identifier:
keyid:C5:3F:43:88:AA:DF:0A:E4:FF:5E:E7:BD:37:26:3C:9F:1E:84:67:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:9e:7a:dc:ad:0b:9f:02:de:9e:fc:45:f1:24:5a:6c:f8:cb:
e6:ca:5a:c0:3f:88:9f:0a:90:98:e6:2e:d8:c2:68:b0:ab:9d:
a9:a7:b7:6b:ab:3e:b3:27:fc:89:32:87:1a:55:8f:dc:82:37:
33:aa:08:28:64:0c:2e:1d:b6:36:35:25:84:3c:74:b3:96:06:
8b:be:a2:3f:7f:d7:e3:01:69:53:1c:7c:80:93:79:ad:67:48:
50:e9:43:4b:d6:9c:cf:58:13:95:11:d6:f7:a7:ae:50:c1:1a:
73:cc:05:af:52:f4:93:26:8b:57:e9:ea:17:1b:73:10:ae:4c:
c5:cc:09:05:2b:42:19:ed:4a:cb:c8:0b:0c:52:ce:9a:57:ad:
47:cf:23:24:f7:3e:52:df:ea:8e:5d:51:17:92:bc:97:60:b2:
83:4a:1e:0d:7c:6f:8b:bb:a8:b7:df:42:0e:9b:a3:bf:e1:12:
7a:a4:e3:e5:08:06:10:7f:fb:2a:cb:2d:53:25:17:d4:3e:c0:
51:18:0f:84:53:87:9f:fc:85:0b:56:78:3b:02:77:24:8d:84:
86:91:4f:06:64:77:4b:c4:30:43:88:c4:d7:d2:39:0e:7e:45:
e7:53:7b:ae:61:fa:ec:d2:bc:c9:c2:18:57:40:29:4c:fc:d4:
be:d4:06:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:49:27 2026 by rpki-client