Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
File: xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft (raw, json)
Hash identifier: 7OAWxxsdjMmzBJZSiVOdNJPlu4PH/lBVKQgjdKbx9Cc=
Subject key identifier: FF:96:86:72:CA:76:B0:C5:93:EE:C6:AD:20:11:6D:4D:16:D2:D6:FD
Authority key identifier: C7:22:AD:43:47:1B:60:6B:CC:85:3B:BA:11:B8:ED:66:3C:15:18:82
Certificate issuer: /CN=c722ad43471b606bcc853bba11b8ed663c151882
Certificate serial: 019CAA219FBB5A61DC8D60E704EA687CB39C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
Manifest number: 0F32
Signing time: Sun 01 Mar 2026 16:00:56 +0000
Manifest this update: Sun 01 Mar 2026 16:00:56 +0000
Manifest next update: Mon 02 Mar 2026 16:00:56 +0000
Files and hashes: 1: mLbMcmnO4JRmubQP1AmCwO0ZZgA.roa (hash: vJDJ7XvSOkplRv6UMGVogwJjO5lohuWAIXAROmc7RJg=)
2: xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl (hash: ajfNKZybHC0OyhV0gzNfuEJfTxgbL4s1xD0EQAhSwaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:9f:bb:5a:61:dc:8d:60:e7:04:ea:68:7c:b3:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c722ad43471b606bcc853bba11b8ed663c151882
Validity
Not Before: Mar 1 16:00:56 2026 GMT
Not After : Mar 2 16:00:56 2026 GMT
Subject: CN=ff968672ca76b0c593eec6ad20116d4d16d2d6fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:43:eb:a5:ff:4c:b9:91:d0:de:e3:6e:c0:62:
01:60:e7:56:d4:d8:c8:5c:c5:c9:6f:8c:df:67:2b:
6f:92:67:c1:c3:4f:b5:ba:63:da:e1:97:b0:9b:f9:
46:3b:05:cd:33:5a:f8:17:ed:35:a1:7c:3a:80:34:
60:50:c4:f1:7d:a8:65:24:cb:8f:28:3c:8a:21:0c:
b8:8a:cd:3a:3d:47:cc:30:6f:b9:42:09:bb:2e:a1:
84:cf:0b:92:51:ee:eb:ad:a8:87:aa:a1:82:24:2d:
84:a1:cd:89:07:8a:96:0d:75:8e:da:d9:ef:0d:65:
0b:cd:40:46:cd:a1:02:e2:92:b5:e9:03:53:dc:9f:
e0:2d:5b:47:41:a2:64:e2:1e:d1:ef:e9:b8:6c:38:
c6:1b:1f:a1:44:c2:18:b1:75:3d:41:48:04:78:42:
95:58:73:6a:51:3c:df:9a:23:28:77:df:e2:6d:24:
9e:d7:fb:1f:3b:2c:bb:60:cd:2e:6f:bd:54:ad:b2:
cd:2c:d8:57:2f:41:51:ba:4c:6d:f6:f2:29:5b:09:
c7:5e:93:ca:82:9d:5a:0b:a7:e0:92:ec:c3:0e:e2:
b5:ab:50:f0:5c:50:d9:c5:16:ef:c1:bc:c7:8b:f4:
51:ef:5c:d5:46:8d:f7:64:42:dd:e1:3e:9e:87:eb:
21:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:96:86:72:CA:76:B0:C5:93:EE:C6:AD:20:11:6D:4D:16:D2:D6:FD
X509v3 Authority Key Identifier:
keyid:C7:22:AD:43:47:1B:60:6B:CC:85:3B:BA:11:B8:ED:66:3C:15:18:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:08:b5:7d:7e:62:4a:0f:9b:8e:ef:df:e8:fb:b9:60:4e:98:
e5:0b:d6:51:9f:bd:bd:83:56:b0:c6:aa:82:c8:0f:7f:10:16:
03:ec:27:37:00:af:80:1a:16:e4:80:ce:d3:b2:b6:2a:e2:10:
71:5b:38:91:72:be:21:7a:84:9e:c5:32:2b:d7:e6:25:a6:42:
b3:f5:7f:21:cf:8d:46:ee:80:ed:e4:f6:fc:bb:76:66:ad:20:
45:e6:82:d1:03:70:a7:a9:4a:22:14:90:78:06:e0:f8:4f:91:
41:f1:21:20:fa:61:a7:46:7d:7a:54:a6:85:60:7f:2b:df:32:
97:9e:5a:87:3f:3f:28:87:33:5f:0f:9e:6e:63:4e:a4:24:59:
a7:df:ad:fe:fd:8e:56:0f:ff:a7:88:7d:62:f2:3e:59:25:0f:
00:05:c3:2e:cc:85:1e:5c:36:23:35:a0:86:fc:23:25:b7:cb:
9a:07:b3:bf:d7:75:44:c8:8d:54:67:dc:af:13:06:ec:5d:84:
7f:17:38:ec:f7:b1:76:04:e5:2d:d0:66:9c:89:89:51:07:c4:
2e:e8:64:71:44:cc:10:51:d5:58:9b:af:3e:5b:b7:9e:b1:83:
99:a0:4c:fb:16:3b:cb:09:ba:f3:be:4b:97:6f:de:24:e5:16:
1e:83:1d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:10:29 2026 by rpki-client