Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
File: xJ7uJN6rVSARm2o9oEV9OcQGQds.mft (raw, json)
Hash identifier: kwPUytt1s4iLNnnsnlB7W9M7EJ0JRPs+IzJha7FTbVk=
Subject key identifier: B0:9F:95:59:56:81:35:CD:4A:A6:10:96:04:20:B3:C2:97:27:C5:17
Authority key identifier: C4:9E:EE:24:DE:AB:55:20:11:9B:6A:3D:A0:45:7D:39:C4:06:41:DB
Certificate issuer: /CN=c49eee24deab5520119b6a3da0457d39c40641db
Certificate serial: 019D38656D01842DE34A933B71A54684A5AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
Manifest number: 11B5
Signing time: Sun 29 Mar 2026 07:01:04 +0000
Manifest this update: Sun 29 Mar 2026 07:01:04 +0000
Manifest next update: Mon 30 Mar 2026 07:01:04 +0000
Files and hashes: 1: w_6UCf2xWqx3O-O-dOo2JUNA-Og.roa (hash: fBGvP8lF6sKoiZdNpgR7ynCDnNW1bXWeroCO7zDMZqA=)
2: xJ7uJN6rVSARm2o9oEV9OcQGQds.crl (hash: nRjzlMeZ7sw0Qvy2qR5L+lWRsTOp0mu7wCDIuwJ+I0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:6d:01:84:2d:e3:4a:93:3b:71:a5:46:84:a5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49eee24deab5520119b6a3da0457d39c40641db
Validity
Not Before: Mar 29 07:01:04 2026 GMT
Not After : Mar 30 07:01:04 2026 GMT
Subject: CN=b09f9559568135cd4aa610960420b3c29727c517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b5:f7:4a:c1:e8:6f:a3:5c:b8:19:c8:33:9d:
17:2d:31:50:12:d4:22:ff:f8:e2:d8:32:c7:77:bc:
3b:5c:a9:a0:3b:41:47:ad:59:b5:f4:1d:0b:96:67:
ab:1e:b2:54:4a:41:d6:e3:c8:8d:82:1f:5e:ad:6f:
e1:d7:a5:e9:4e:e9:66:92:bd:f3:20:ca:37:5a:0e:
28:3b:e9:31:90:03:40:45:a0:68:2a:3d:fb:c2:78:
54:80:a3:2f:94:9a:1f:01:88:e7:37:0c:5b:ef:a7:
89:4c:3d:66:7a:4d:96:a5:f3:fc:a6:76:21:ed:dc:
2c:b5:2a:76:63:5e:f7:df:0c:18:56:0e:ce:26:85:
d8:13:c8:1e:a6:a1:42:f5:42:2b:5d:0e:52:52:bb:
af:79:99:1e:00:c3:62:ef:53:a2:73:ff:5b:9c:c1:
fc:ed:f6:e0:89:ae:ee:6f:1a:f1:19:c2:92:1f:24:
e6:c7:b7:47:86:65:c6:ea:ba:c1:0d:1e:0d:b0:67:
3b:de:96:88:fe:eb:06:f8:99:fb:8a:55:e2:9f:d8:
c4:34:27:c1:ce:fd:f3:ce:9f:78:b3:de:0e:0f:3b:
51:4a:51:93:96:87:64:f7:00:09:eb:de:82:51:11:
bd:75:23:28:1f:b2:f0:18:4b:21:14:5a:ac:6e:90:
06:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9F:95:59:56:81:35:CD:4A:A6:10:96:04:20:B3:C2:97:27:C5:17
X509v3 Authority Key Identifier:
keyid:C4:9E:EE:24:DE:AB:55:20:11:9B:6A:3D:A0:45:7D:39:C4:06:41:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:0f:1a:48:1f:7b:40:a8:10:90:b2:8d:f5:9d:1f:23:ad:5c:
a7:9c:3c:28:56:1c:ca:39:42:63:44:b4:14:4e:6b:f5:54:11:
ee:99:ee:57:56:48:f1:66:f1:69:e4:6b:68:73:08:de:73:f9:
c4:1e:78:c5:5a:39:1e:cf:a6:03:21:01:f8:1c:12:f2:af:fb:
8a:5f:c9:a1:29:99:c9:69:4b:46:72:f3:56:22:32:9c:02:4c:
3b:df:21:9a:9c:eb:3f:12:e9:6a:98:39:47:76:2e:9d:cf:6a:
bf:06:23:2d:a5:17:67:cf:89:51:d5:e5:65:f7:70:ce:ce:c6:
28:ee:ad:95:2b:b7:c4:47:d1:54:53:0c:8f:cc:bf:72:91:c1:
cf:4c:24:39:b1:f5:ae:d6:d0:34:4c:13:62:2d:61:a4:87:bb:
cf:d7:67:ae:b3:d5:47:a5:12:f9:92:d7:a6:c2:14:73:c5:e4:
e0:ba:ca:ab:e4:eb:4e:f6:23:a2:62:42:0a:59:be:26:19:e2:
0f:bf:00:35:18:73:fb:8b:9c:a1:64:ed:4c:36:b2:66:05:82:
66:19:9f:72:d2:ee:ff:dd:98:0c:23:38:55:4a:5a:f8:c5:85:
6c:f2:ec:83:04:8c:0f:b5:2c:fb:b4:e7:28:4c:27:08:ff:3b:
e1:02:8a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:45 2026 by rpki-client