Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
File: xg8yRv3WG6G1eS_hrsStypjXWlw.mft (raw, json)
Hash identifier: 80RXqy6BoX9O10GmIyP8btvVNYTZ+8QCU0hVQ8BgH7o=
Subject key identifier: C0:B4:43:26:FD:37:BC:66:7C:12:71:CB:AD:D6:C6:3C:BB:01:D9:CE
Authority key identifier: C6:0F:32:46:FD:D6:1B:A1:B5:79:2F:E1:AE:C4:AD:CA:98:D7:5A:5C
Certificate issuer: /CN=c60f3246fdd61ba1b5792fe1aec4adca98d75a5c
Certificate serial: 019D39418CD143DB6FC9254168A47A9F3861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
Manifest number: 0271
Signing time: Sun 29 Mar 2026 11:01:30 +0000
Manifest this update: Sun 29 Mar 2026 11:01:30 +0000
Manifest next update: Mon 30 Mar 2026 11:01:30 +0000
Files and hashes: 1: MmQGKSoH5LF3BVkr3ibrE-H9I9E.roa (hash: yWJCfOrBqqRptAvrnSvVrhM/S/WywcoV/IXeHHMd0es=)
2: xg8yRv3WG6G1eS_hrsStypjXWlw.crl (hash: DWomc0fLk+zLvoDwaRyU4K60E+yreYZ4NyiFwwEo9iY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:8c:d1:43:db:6f:c9:25:41:68:a4:7a:9f:38:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c60f3246fdd61ba1b5792fe1aec4adca98d75a5c
Validity
Not Before: Mar 29 11:01:30 2026 GMT
Not After : Mar 30 11:01:30 2026 GMT
Subject: CN=c0b44326fd37bc667c1271cbadd6c63cbb01d9ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ec:74:8f:c8:2e:98:44:9f:77:91:c3:8a:b0:
ff:22:0c:36:4e:bb:33:44:3a:36:aa:c9:0e:b7:d1:
41:df:3b:aa:fc:bc:fe:68:a6:f1:b4:39:6f:62:f7:
1e:e4:75:d3:d7:61:33:1b:8b:08:8f:5b:3f:6a:23:
ad:03:57:b2:97:a2:14:ad:69:ef:71:90:47:db:df:
6c:ff:53:ce:c0:ff:02:61:76:7f:c1:f7:06:37:10:
e7:16:39:06:2e:d7:07:02:07:a7:73:b7:f0:42:99:
fc:24:a7:07:95:ca:b6:5f:42:80:d8:4c:b3:e9:1a:
f9:db:d1:1b:d2:12:bd:08:0e:6e:62:e5:b1:4a:2c:
a4:96:3a:48:f8:2a:03:73:4f:69:3a:1e:da:cc:0b:
9a:ed:1f:0c:8e:e3:99:a6:86:be:75:da:44:5b:56:
01:30:0c:e7:e4:a6:75:0c:54:45:06:6a:37:67:20:
45:9f:fc:7b:81:28:4d:f3:dd:12:8c:95:68:1c:60:
08:d3:c9:28:9c:6c:d3:2d:92:5e:e8:9e:6c:a1:d7:
26:ba:88:34:95:c1:4b:7f:e8:7c:54:32:d2:bf:56:
3f:0c:09:70:8d:fe:e3:2c:eb:a9:e2:ec:2c:01:e2:
d5:6f:cd:46:2d:b0:69:ba:15:74:47:83:18:bf:49:
44:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B4:43:26:FD:37:BC:66:7C:12:71:CB:AD:D6:C6:3C:BB:01:D9:CE
X509v3 Authority Key Identifier:
keyid:C6:0F:32:46:FD:D6:1B:A1:B5:79:2F:E1:AE:C4:AD:CA:98:D7:5A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c0:b4:fa:2b:46:61:1a:5c:00:4b:e4:2e:d7:8f:08:da:f5:
53:eb:a6:a1:e7:46:e2:c4:ad:9e:0b:9c:f6:51:65:08:7a:c8:
fa:9d:23:41:6a:c4:3c:8e:26:b9:f4:26:8c:a3:62:bf:ca:10:
9f:34:eb:64:0a:1c:88:83:e4:f7:2c:bf:09:93:3c:00:a9:aa:
f0:bf:17:f5:98:49:d0:1c:66:80:e2:23:33:f8:54:2f:95:8a:
3e:60:e5:cf:c7:87:37:84:ca:55:cc:03:62:92:f7:26:15:74:
1e:8b:8b:46:9c:a3:b2:68:ff:ef:3a:fb:2a:88:73:c2:84:95:
c0:18:d6:44:c4:16:10:7e:3a:f9:e6:3d:18:c9:cd:de:8c:da:
58:44:4e:41:7a:32:49:bc:ca:80:cf:f0:7d:02:7c:8e:56:3c:
f0:90:b9:02:c3:37:07:f2:63:47:57:15:55:d5:44:11:34:f6:
63:ef:0d:9b:d3:6e:d3:23:f2:81:cb:de:21:52:30:07:28:25:
b8:a5:ac:38:83:f3:62:18:21:94:32:cc:66:8e:e3:77:d2:93:
83:e4:85:8f:bf:a7:90:87:4c:4f:ad:19:da:57:43:9b:0f:51:
94:cc:cb:20:5a:33:98:51:06:01:6a:2b:b3:ae:11:62:b0:83:
90:e2:92:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:23 2026 by rpki-client