Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
File: x9qC6HeTPZwslSyzdsk6qjN919I.mft (raw, json)
Hash identifier: kzFRaLR5QL+ZfC3o2XvUdzyoLSuz62FZSQhD0lah5gM=
Subject key identifier: 40:5D:3D:18:C8:E7:9F:36:DA:17:CD:9A:9E:30:35:F1:4D:B8:E0:83
Authority key identifier: C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
Certificate issuer: /CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Certificate serial: 019CAA586A6B1AC6359909C0DA25CCB2E989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 17:00:46 +0000
Manifest this update: Sun 01 Mar 2026 17:00:46 +0000
Manifest next update: Mon 02 Mar 2026 17:00:46 +0000
Files and hashes: 1: iLa7f2S3_d-gftGTw6gty0-Uiak.roa (hash: rM0PahqNF2zfpsbMJjY2LhMIvSX7eg/hz/KEUHOLLAA=)
2: x9qC6HeTPZwslSyzdsk6qjN919I.crl (hash: TFjFLqBH0WB/sGBwijutfqCdXXWvyOS53dEw9l8dUlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:6a:6b:1a:c6:35:99:09:c0:da:25:cc:b2:e9:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Validity
Not Before: Mar 1 17:00:46 2026 GMT
Not After : Mar 2 17:00:46 2026 GMT
Subject: CN=405d3d18c8e79f36da17cd9a9e3035f14db8e083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e7:69:34:eb:d0:38:36:56:35:d0:63:b2:f2:
68:35:d9:5d:d6:c8:62:a5:35:45:0a:f3:73:05:17:
c3:31:40:25:b0:d6:e9:a8:87:c3:00:54:c4:92:00:
da:4c:1b:6d:1f:0d:53:e4:f4:1f:83:fd:d8:7f:cb:
49:f4:5c:e4:3b:f8:0e:e9:f9:f2:86:83:12:6d:30:
4f:66:bd:e4:1a:88:48:a2:0b:07:a5:18:64:0e:8d:
8a:74:50:34:76:2c:85:17:b9:85:d3:3a:b4:b2:e5:
e6:3d:b8:a9:b6:98:22:34:33:19:91:e9:5e:35:e6:
eb:fc:be:e2:40:e4:b1:e4:8d:d5:28:ce:f5:ac:21:
d0:84:a3:ab:6b:7c:f1:e2:6a:7f:a7:81:c4:5a:ea:
16:0a:71:7e:c5:89:e0:6a:14:d2:1d:0d:fd:ea:53:
87:bc:74:13:60:4a:9b:fd:de:9f:ae:78:fa:b5:1c:
f4:df:99:c9:4b:55:cd:88:26:25:41:fd:0b:96:39:
cf:f2:38:55:30:7f:a8:0f:b0:cf:83:e5:ff:bb:02:
36:a8:f8:12:32:f4:d8:19:cb:f1:fd:3e:44:80:71:
1c:9f:4d:54:11:e7:b5:cf:1f:f5:18:10:1a:26:86:
15:1e:2a:d9:05:bf:ac:83:a1:73:f6:a1:12:a2:b1:
e2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5D:3D:18:C8:E7:9F:36:DA:17:CD:9A:9E:30:35:F1:4D:B8:E0:83
X509v3 Authority Key Identifier:
keyid:C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b5:f2:73:cc:26:2d:26:94:d1:fc:5a:02:de:42:24:dd:40:
c7:17:46:83:f0:9c:a1:db:30:a0:a0:c9:ca:fd:af:cb:6a:fc:
32:a2:7a:a2:88:8f:5e:de:23:f4:44:c4:df:f1:d3:1e:e5:39:
92:ca:65:1d:4f:6e:71:18:aa:61:2f:64:b6:47:03:56:b4:46:
86:4e:66:89:73:9b:bb:c6:90:fb:71:b8:cc:a4:31:bd:a4:c1:
4e:b0:ac:0b:f9:16:fb:05:35:9d:bb:bb:91:d7:42:e8:6e:0d:
38:0b:7a:37:18:eb:0e:1d:38:83:06:1c:70:2f:5b:93:26:e2:
47:1e:5e:41:2c:b2:dd:fe:12:ce:94:61:7a:5f:b7:37:eb:54:
4b:37:ef:f6:db:f6:bd:fb:42:e7:f9:cc:89:9a:b5:cb:dc:80:
3b:69:28:dd:21:83:09:36:5d:bc:a7:fe:27:3f:5a:17:75:8a:
02:64:17:f1:6f:05:b8:59:ea:97:4e:67:30:05:0b:86:b1:e8:
f2:db:58:19:50:00:f1:8e:b8:d5:d6:a3:7f:12:87:be:dc:9b:
5b:10:17:f4:72:36:00:40:14:4f:44:12:24:f5:42:7d:e9:aa:
6d:5f:d2:0d:71:af:d2:c5:2d:4c:d8:f3:2b:af:7d:62:df:a6:
3a:71:21:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:56:13 2026 by rpki-client