Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
File: x2sILxfCC126JFzqbk5unGCZzvc.mft (raw, json)
Hash identifier: H+vUCf1+5kfCrNnPUVCB2690o/aPzuZbYE5QA5NRvzM=
Subject key identifier: F3:01:72:2E:A9:60:82:48:AB:35:14:59:02:D3:11:ED:20:F6:F1:13
Authority key identifier: C7:6B:08:2F:17:C2:0B:5D:BA:24:5C:EA:6E:4E:6E:9C:60:99:CE:F7
Certificate issuer: /CN=c76b082f17c20b5dba245cea6e4e6e9c6099cef7
Certificate serial: 019D39AE59C94EFD63CD7175591BF8F16963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
Manifest number: 0B6D
Signing time: Sun 29 Mar 2026 13:00:20 +0000
Manifest this update: Sun 29 Mar 2026 13:00:20 +0000
Manifest next update: Mon 30 Mar 2026 13:00:20 +0000
Files and hashes: 1: cnFiZY7qwJbMwSvpZZiZsqKr_Do.roa (hash: 48IPezm1nI8pkv7kwBfhTKNFTjJ1YkJ3TGASpAZ4rvY=)
2: x2sILxfCC126JFzqbk5unGCZzvc.crl (hash: pq3oxt84XZNTK1ZBHwuHi1q3xDG12Of570RH0TaIOJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:59:c9:4e:fd:63:cd:71:75:59:1b:f8:f1:69:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76b082f17c20b5dba245cea6e4e6e9c6099cef7
Validity
Not Before: Mar 29 13:00:20 2026 GMT
Not After : Mar 30 13:00:20 2026 GMT
Subject: CN=f301722ea9608248ab35145902d311ed20f6f113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a3:3f:ff:4a:b9:fb:ae:6a:e4:9a:a9:47:cb:
27:2a:40:02:39:61:28:1a:a8:cc:fc:49:66:e8:e0:
1c:5d:dc:ec:f8:8a:3a:d8:87:67:6c:e8:39:83:ac:
12:17:64:e5:d0:5a:1a:14:7b:9a:a0:75:4f:d0:68:
f0:f3:01:54:df:26:c4:1c:60:cc:84:0d:30:e8:88:
c5:e0:80:15:12:60:3b:da:b9:67:a0:b1:9a:b5:fa:
dd:bd:34:72:65:50:b4:f0:83:1e:59:d6:fd:df:9f:
2f:40:00:a9:b7:9d:c6:8d:54:46:60:4a:7d:4b:62:
29:6c:12:76:62:b7:34:81:1d:00:95:9d:3a:69:fe:
a3:09:b4:c8:df:16:fc:1c:19:10:2e:bc:fc:9a:c1:
c5:4e:a9:10:8c:cc:34:2c:b4:a2:a1:81:80:db:98:
6d:0c:b0:0a:b3:69:9d:3d:4c:94:bb:c4:76:15:98:
22:7c:5b:33:81:95:40:d0:3e:6c:1c:1d:3e:b4:00:
22:c4:dc:15:11:a5:7f:ca:2c:32:66:e5:67:39:c9:
b5:f2:59:3b:73:1f:57:49:78:54:b1:08:3f:7b:0f:
db:e0:91:3c:32:f8:8d:f7:a2:9a:1e:e4:4b:89:0e:
e3:f0:aa:08:b6:1a:47:b2:df:bb:91:73:e2:f4:26:
40:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:01:72:2E:A9:60:82:48:AB:35:14:59:02:D3:11:ED:20:F6:F1:13
X509v3 Authority Key Identifier:
keyid:C7:6B:08:2F:17:C2:0B:5D:BA:24:5C:EA:6E:4E:6E:9C:60:99:CE:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:31:24:30:20:fe:74:57:5c:fd:1b:ee:3e:59:5b:f3:0f:22:
09:4f:ed:fc:07:96:58:87:dd:e4:5b:0c:41:4c:01:5f:30:2e:
69:90:2e:40:e6:d0:e5:1e:6b:32:e5:2a:26:7a:a7:3f:72:65:
8c:fa:8d:80:82:59:85:e1:6f:ff:eb:e3:43:b8:9b:19:98:da:
61:70:50:ac:8d:ad:9a:bc:a4:b8:a4:aa:ca:d1:1b:d7:b9:c6:
32:ff:d1:28:39:c4:cb:f3:71:3d:0e:a5:de:85:07:21:21:2d:
3a:ef:af:d8:79:52:6a:78:87:08:f4:6e:88:83:4c:db:78:a9:
44:dd:f7:71:3c:1f:ae:35:de:f6:a2:44:93:e3:ad:d8:0e:70:
d7:5f:db:4f:fe:f4:2f:4a:32:72:a7:ce:8d:18:0d:c6:1a:b7:
a5:40:b1:0e:a2:4a:29:ae:72:17:c7:a3:45:ff:e4:62:07:ff:
0e:b5:c0:2c:02:22:f7:27:bf:4a:87:77:d3:e3:63:d6:1c:eb:
b4:4b:f3:b5:46:ef:b1:e7:69:f8:b6:f1:80:a9:af:e7:44:f7:
5a:c7:8b:7f:d5:ba:09:cd:a5:b2:b3:54:7a:a2:37:cc:08:8c:
2c:6d:f9:0f:35:75:ad:8c:6a:90:7b:46:a5:4b:1f:ef:7b:8b:
96:e9:55:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:16:02 2026 by rpki-client