Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
File: x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft (raw, json)
Hash identifier: I9tOMVwa3zaKSoLl/iZLK/kgajiAFvTBBnHQOQDy3yE=
Subject key identifier: AA:E1:15:C0:91:47:05:5C:4C:9A:D6:9F:0F:9D:4E:A8:05:CE:5A:DC
Authority key identifier: C7:D9:14:62:C4:DC:1D:F6:A8:A3:A9:7A:1A:EE:57:A0:CC:14:EF:BA
Certificate issuer: /CN=c7d91462c4dc1df6a8a3a97a1aee57a0cc14efba
Certificate serial: 019D39AEA52EE10709153998B30461794008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
Manifest number: 1693
Signing time: Sun 29 Mar 2026 13:00:40 +0000
Manifest this update: Sun 29 Mar 2026 13:00:40 +0000
Manifest next update: Mon 30 Mar 2026 13:00:40 +0000
Files and hashes: 1: XKs6KgfU6aQLIAOaUuz9aSWnClo.roa (hash: vxBudXeCf0peWMd7lO7aysk2NB+ZqNxmrMni5vjOPPQ=)
2: x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl (hash: OGsYPQ8Zg7czYIfYl80x0pjI49G+9RR4EP6KLbtTHv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:a5:2e:e1:07:09:15:39:98:b3:04:61:79:40:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7d91462c4dc1df6a8a3a97a1aee57a0cc14efba
Validity
Not Before: Mar 29 13:00:40 2026 GMT
Not After : Mar 30 13:00:40 2026 GMT
Subject: CN=aae115c09147055c4c9ad69f0f9d4ea805ce5adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7f:2b:79:d8:80:6b:90:f9:65:8f:55:d3:da:
e2:ea:4d:0f:7f:48:76:41:e5:98:3f:8e:58:e5:1e:
eb:d4:de:1b:40:29:9a:8c:35:9c:ed:e6:e4:f1:af:
86:b9:a9:7e:e7:6e:91:a1:e7:86:a6:ca:a1:e2:a8:
76:0f:37:fc:4f:f6:91:91:b0:0f:87:c7:bb:44:be:
38:18:51:fd:a7:eb:f5:18:90:ed:98:f0:c0:59:09:
bf:f5:e3:23:75:c5:5e:ab:ff:99:71:09:8d:eb:da:
01:c0:91:c6:be:ff:6e:61:8a:ae:05:cf:05:13:c7:
07:f3:81:da:3a:9f:ef:08:97:f3:e8:3c:a3:98:f0:
0d:db:be:81:25:d9:94:da:6e:45:1f:e9:91:a1:e4:
c7:1b:da:0c:31:ee:33:e5:09:ab:9c:7a:a2:cc:54:
53:e7:15:b9:e7:5d:64:6c:11:f4:49:41:89:5e:14:
28:50:c4:86:58:44:16:19:63:fa:17:8a:3d:ee:c6:
9c:e1:a6:41:be:ee:28:a3:d1:c5:f9:50:1c:e3:e3:
bd:76:f2:8c:de:1a:0c:bf:11:37:01:cb:8f:5e:b0:
50:e4:fc:fb:a7:b6:77:8f:25:f4:b2:85:fb:0f:28:
cb:21:69:86:6e:e7:ab:f1:7b:15:04:73:ac:db:36:
93:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E1:15:C0:91:47:05:5C:4C:9A:D6:9F:0F:9D:4E:A8:05:CE:5A:DC
X509v3 Authority Key Identifier:
keyid:C7:D9:14:62:C4:DC:1D:F6:A8:A3:A9:7A:1A:EE:57:A0:CC:14:EF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c9:1a:d2:9d:05:1b:be:64:f7:20:c6:78:8d:1f:f9:9e:8e:
8a:3c:2c:96:68:48:24:6a:6c:b1:b0:6d:ea:d8:17:ad:2f:88:
4c:5b:7e:be:55:6e:f4:46:12:99:bd:14:ed:d8:fd:1c:9b:4a:
38:09:a5:d0:41:c6:f6:03:33:90:78:e4:5a:83:28:a3:63:67:
f5:9d:43:75:e4:aa:ee:39:e9:c8:b6:ca:5e:1a:f1:a4:14:fb:
3a:9b:a2:25:ec:9e:73:4b:22:92:7e:97:24:c4:f7:d5:14:3b:
bd:5a:37:34:b2:99:f8:2b:3c:27:e4:06:99:b8:9c:e1:9f:ed:
5a:2e:aa:c7:6e:b7:59:06:fe:6c:f0:ff:d3:ca:5d:3e:27:84:
0d:10:98:35:1c:66:aa:33:38:70:e9:ef:a4:4e:77:9d:d3:a7:
09:6e:4d:dc:eb:87:50:6f:43:3d:7a:36:1a:1b:f6:dd:39:ba:
e5:5a:69:ed:31:08:17:5b:0f:02:4f:79:57:c9:23:93:59:65:
78:58:00:37:f3:58:ea:16:c8:b7:f8:1e:45:9a:67:23:2a:ba:
48:f5:d7:dc:c7:53:48:84:fd:7a:25:6d:d1:dd:00:f5:08:b2:
54:19:e9:af:6b:a4:90:ef:34:2e:0a:4d:f9:1b:59:68:53:b5:
4c:cc:9a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:27:51 2026 by rpki-client