Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a4ba8f-5e61-4dcc-ba0b-f624ed5f46fe/1/xHC41L-HFAS8pTx3gVME7y6k4co.mft
File: xHC41L-HFAS8pTx3gVME7y6k4co.mft (raw, json)
Hash identifier: Pr5N7Gjm7mCkXnVr8h/eBmoXsgzbnoxgx+4xGO3Lymk=
Subject key identifier: 26:07:94:A2:EA:0D:EE:61:E5:37:90:17:33:56:C5:C2:62:3F:A1:69
Authority key identifier: C4:70:B8:D4:BF:87:14:04:BC:A5:3C:77:81:53:04:EF:2E:A4:E1:CA
Certificate issuer: /CN=c470b8d4bf871404bca53c77815304ef2ea4e1ca
Certificate serial: 019CABD92B5BFFE57B36415FF93266217344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xHC41L-HFAS8pTx3gVME7y6k4co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a4ba8f-5e61-4dcc-ba0b-f624ed5f46fe/1/xHC41L-HFAS8pTx3gVME7y6k4co.mft
Manifest number: 022C
Signing time: Mon 02 Mar 2026 00:01:02 +0000
Manifest this update: Mon 02 Mar 2026 00:01:02 +0000
Manifest next update: Tue 03 Mar 2026 00:01:02 +0000
Files and hashes: 1: DnR3n06izuqiF0c6QLmB63bhByA.roa (hash: wXx/mCp3Tb5hj1tTLAH162/y2WEyBpkE4oI2Qluv1II=)
2: xHC41L-HFAS8pTx3gVME7y6k4co.crl (hash: DRlhW5SBvekgjfXlR14G2GacF7sb9srUOk6YWLWlcaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a4ba8f-5e61-4dcc-ba0b-f624ed5f46fe/1/xHC41L-HFAS8pTx3gVME7y6k4co.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a4ba8f-5e61-4dcc-ba0b-f624ed5f46fe/1/xHC41L-HFAS8pTx3gVME7y6k4co.mft
rsync://rpki.ripe.net/repository/DEFAULT/xHC41L-HFAS8pTx3gVME7y6k4co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:2b:5b:ff:e5:7b:36:41:5f:f9:32:66:21:73:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c470b8d4bf871404bca53c77815304ef2ea4e1ca
Validity
Not Before: Mar 2 00:01:02 2026 GMT
Not After : Mar 3 00:01:02 2026 GMT
Subject: CN=260794a2ea0dee61e53790173356c5c2623fa169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:0c:c7:d5:c7:aa:e9:fa:0d:32:1b:8b:60:23:
bb:56:13:8c:5c:f6:c9:04:c8:65:1a:07:5c:2c:ab:
8b:fb:10:9d:6f:b6:19:bf:1a:2f:39:2b:33:77:95:
77:01:f9:b6:a4:5d:7c:be:b7:7b:32:74:e3:d0:8c:
6b:c1:60:1d:d9:1e:77:ab:91:90:3f:20:7c:9a:31:
5b:e9:76:b8:5d:7d:5c:bf:1b:a6:fa:cb:16:2d:ac:
e8:88:22:b6:51:fc:95:b7:43:5b:fa:76:36:3b:32:
c3:ab:4b:ff:b8:eb:32:0a:53:ff:6b:cf:c8:d0:3e:
ae:76:9d:1f:53:76:97:ff:38:06:f0:7f:b2:56:ca:
27:89:14:7d:7a:6c:f9:12:23:71:45:73:73:cb:97:
78:bf:b9:c6:b1:95:9d:b5:0c:5c:9a:d3:10:77:74:
bd:01:64:d8:0f:ff:73:0f:cd:ee:c7:d4:2c:29:c0:
0a:80:21:03:93:88:57:de:57:4a:3e:19:f5:02:f9:
48:e4:7a:40:6e:d9:2f:8e:2f:b9:97:44:74:3f:14:
68:09:e7:e6:0a:7b:4d:ef:b6:1a:de:70:b5:4c:8f:
e1:98:1e:fe:4d:84:79:91:df:2a:c8:4c:18:47:73:
11:70:89:0f:57:5d:5f:ad:a3:46:56:33:25:04:af:
0d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:07:94:A2:EA:0D:EE:61:E5:37:90:17:33:56:C5:C2:62:3F:A1:69
X509v3 Authority Key Identifier:
keyid:C4:70:B8:D4:BF:87:14:04:BC:A5:3C:77:81:53:04:EF:2E:A4:E1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xHC41L-HFAS8pTx3gVME7y6k4co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a4ba8f-5e61-4dcc-ba0b-f624ed5f46fe/1/xHC41L-HFAS8pTx3gVME7y6k4co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a4ba8f-5e61-4dcc-ba0b-f624ed5f46fe/1/xHC41L-HFAS8pTx3gVME7y6k4co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:0c:4d:ad:6a:71:d1:d4:62:11:f4:8f:6f:92:40:07:35:02:
b7:64:34:40:f9:b0:cb:3a:62:cc:2a:f1:37:d1:f0:bc:e1:dc:
2e:f0:fb:8c:7d:b4:b2:ea:e2:d2:09:9a:94:50:74:94:4a:77:
d4:6a:fa:2f:a9:49:67:df:69:00:59:f2:ce:d0:a2:bd:72:cf:
72:78:d3:1e:71:16:40:68:91:e6:60:76:6b:0c:22:47:8e:f5:
31:e2:0a:4e:43:79:c5:af:b6:89:c6:84:5f:cb:c0:4b:a0:3e:
1f:23:3c:6c:74:e8:b5:c9:f1:2a:47:ca:cf:fb:07:89:5b:09:
ad:ad:b5:12:ee:b2:ff:16:ec:dc:9e:dc:6a:f8:26:bd:14:60:
53:5d:fe:5d:8e:e6:ba:d4:d3:32:00:1d:b3:4d:b4:d9:b1:c7:
02:e2:14:57:9f:29:24:33:a2:51:cb:75:45:29:4a:60:93:65:
09:2c:6c:73:15:0e:85:fe:aa:46:c6:d6:db:02:66:90:55:54:
ba:c1:8e:90:18:09:e3:d7:4e:11:3a:47:70:16:9c:99:7b:a6:
1c:38:ac:07:8b:52:30:14:8e:3f:f7:de:e8:66:96:70:bd:64:
06:72:3f:ff:71:63:4a:22:c3:1a:67:24:be:e1:0c:59:d8:74:
39:ee:af:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:10:32 2026 by rpki-client