Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
File: xZR6QUqIMFFWVtc4p4OCiQFgN30.mft (raw, json)
Hash identifier: L8u7/k54D4AXkrY48ot7/M5TbS/k0MhuDdadJNfzukk=
Subject key identifier: 4D:2A:7A:C6:51:33:EB:D3:16:1E:87:02:FB:3C:D1:9E:C2:6C:14:6F
Authority key identifier: C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D
Certificate issuer: /CN=c5947a414a8830515656d738a78382890160377d
Certificate serial: 019D39410AEBBB83D304D2C111F0EB28FF80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
Manifest number: 07CE
Signing time: Sun 29 Mar 2026 11:00:56 +0000
Manifest this update: Sun 29 Mar 2026 11:00:56 +0000
Manifest next update: Mon 30 Mar 2026 11:00:56 +0000
Files and hashes: 1: xZR6QUqIMFFWVtc4p4OCiQFgN30.crl (hash: +9nNh2YyWQZxUwU5zFleE2o1HXRtReaRScjyGnApurA=)
2: yPfyngOSudI1ySWIfQxdWtyiNIs.roa (hash: 5dFd12MxUEVgWmbdpshfSJRZnDjbazIniCXkVZMmEDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:0a:eb:bb:83:d3:04:d2:c1:11:f0:eb:28:ff:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5947a414a8830515656d738a78382890160377d
Validity
Not Before: Mar 29 11:00:56 2026 GMT
Not After : Mar 30 11:00:56 2026 GMT
Subject: CN=4d2a7ac65133ebd3161e8702fb3cd19ec26c146f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b0:9d:a6:bc:fa:5e:85:02:ff:28:c9:f3:d3:
b3:ec:33:d9:9c:10:90:60:44:4a:c8:eb:05:36:01:
6b:55:60:3e:f3:2b:7d:f0:5f:26:1b:de:f8:57:c1:
ec:ac:49:ff:7e:d7:0f:22:de:f4:80:7d:27:71:3e:
02:34:43:da:db:62:14:eb:d4:6b:51:6a:03:0b:22:
38:a2:44:d5:92:ca:01:76:42:c2:b5:9c:b6:6f:b3:
ff:f7:65:9a:09:9f:18:7f:e9:1b:13:e6:41:83:2f:
21:6c:64:11:5f:dc:bd:e3:25:80:cf:18:91:5b:49:
85:06:18:19:4b:53:64:86:84:4d:0d:7b:1c:0d:dc:
e0:fb:8e:fc:13:2c:ad:97:b9:1a:d6:cc:a5:f6:9e:
99:e3:ab:fc:4e:36:7a:c7:78:e9:c8:8f:9a:a2:fa:
78:a9:bc:47:45:f6:9f:7b:b8:5b:92:b8:54:18:2f:
14:15:16:fe:0c:28:ce:ba:9a:87:bf:e8:ff:37:58:
4c:79:2f:79:8b:7c:88:3e:98:9e:b4:c1:08:c3:3d:
67:42:25:b7:a8:f7:f7:b0:0f:5c:11:dc:5a:c9:ee:
2e:f4:50:29:cb:7d:14:fc:b8:71:42:8b:9a:b0:21:
3f:f5:08:43:f3:4a:6d:36:8d:60:18:6e:45:e5:d6:
9b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2A:7A:C6:51:33:EB:D3:16:1E:87:02:FB:3C:D1:9E:C2:6C:14:6F
X509v3 Authority Key Identifier:
keyid:C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:da:b0:52:71:f5:2b:40:69:9c:86:24:c9:1c:7a:ae:8d:f7:
5a:22:90:90:0e:59:3f:8c:46:d1:f2:b5:3a:1d:be:51:5f:e2:
c4:ae:33:09:98:18:f7:fe:e1:a8:a5:42:0d:95:7b:5b:fe:31:
1a:b3:f8:d4:28:82:1a:7c:dd:34:f6:38:14:b3:12:5e:49:54:
35:af:65:9e:30:06:9e:1d:60:de:6b:5a:30:3d:b9:51:45:eb:
45:ed:63:29:de:a7:aa:e0:b6:c1:c8:e1:3c:dc:10:7e:5f:06:
d1:07:55:fc:a1:3e:69:49:65:8f:57:2a:8b:e4:cd:0d:09:e7:
c1:80:db:a9:e7:0a:34:c0:d1:56:be:09:dd:ae:dd:e9:12:6a:
4c:ad:f8:d8:85:25:cc:97:29:bd:5c:56:6e:82:88:6f:00:df:
14:a9:dc:51:a8:03:6e:4d:7f:c5:64:02:94:40:90:97:e9:8d:
87:3a:12:00:66:f6:0e:1c:33:71:b9:14:78:d6:f8:63:0e:99:
22:c1:68:1d:62:c1:d4:d2:70:d5:97:35:21:29:45:c0:d3:48:
39:42:9d:c6:57:7e:a0:62:20:3f:66:93:16:87:1c:b7:f6:c1:
ba:a4:8b:16:7d:32:c7:bc:38:a7:07:81:0b:1c:ca:f9:38:13:
15:b3:b7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:00:56 2026 by rpki-client