Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
File: xzic6Ca8jSaGm0UvPNk2kCxVL78.mft (raw, json)
Hash identifier: ZyKhPRUEx61JTUTkU2FXdGOWLkj5m0fW78u0YRLIOuE=
Subject key identifier: 32:08:D8:26:DA:8E:D6:FC:F1:7B:92:B2:58:B7:66:00:48:01:79:B0
Authority key identifier: C7:38:9C:E8:26:BC:8D:26:86:9B:45:2F:3C:D9:36:90:2C:55:2F:BF
Certificate issuer: /CN=c7389ce826bc8d26869b452f3cd936902c552fbf
Certificate serial: 019D3789B261A07CD816970FFBA0C727C14F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
Manifest number: 0E03
Signing time: Sun 29 Mar 2026 03:01:03 +0000
Manifest this update: Sun 29 Mar 2026 03:01:03 +0000
Manifest next update: Mon 30 Mar 2026 03:01:03 +0000
Files and hashes: 1: AsK2uztnxQm7GmE36ie8VWKszqc.roa (hash: MmG9MMdxlYTR95FSVo5MmqnSkxmRmjdkjXGjYjlA1cA=)
2: xzic6Ca8jSaGm0UvPNk2kCxVL78.crl (hash: ZnAXdRppdvRN7bAN4Z6J0TBLymPhQhlCQXkn+ad9qdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:b2:61:a0:7c:d8:16:97:0f:fb:a0:c7:27:c1:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7389ce826bc8d26869b452f3cd936902c552fbf
Validity
Not Before: Mar 29 03:01:03 2026 GMT
Not After : Mar 30 03:01:03 2026 GMT
Subject: CN=3208d826da8ed6fcf17b92b258b76600480179b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:df:26:12:4c:90:1a:73:89:c1:27:8c:9f:2b:
77:44:3f:a1:40:49:34:f1:9f:f5:73:ed:98:f5:da:
69:13:75:ed:47:23:27:95:88:8a:a7:1a:91:b8:21:
6f:0a:3c:7e:87:f7:8e:34:b0:f7:0d:66:f2:04:3c:
52:85:78:7a:27:82:42:80:ac:c0:80:dc:11:a6:a8:
1f:12:19:4d:db:a5:d7:09:ca:61:02:5f:a9:60:63:
61:de:89:fc:a0:1d:bc:3c:f9:61:36:b1:28:da:9a:
0d:21:b9:7c:d2:0b:f6:14:fe:09:b3:32:ca:cf:e1:
2d:a1:67:28:77:e6:d7:5a:2c:89:90:5a:81:54:03:
98:02:34:76:6f:2e:9b:f7:ea:d7:b8:67:14:35:ff:
94:8e:11:e0:27:63:7b:09:91:59:13:a9:02:89:a8:
c8:bd:d6:45:9c:91:0e:63:b0:45:a0:0a:bd:b2:66:
3d:72:2d:a1:0f:a9:01:be:58:98:bd:18:4a:99:9d:
96:0a:9d:cc:cc:f9:78:64:16:4a:59:7d:19:ae:6a:
cc:5a:bb:1a:31:b2:26:93:ab:d7:71:a9:63:2e:41:
da:f6:ed:a9:09:fb:1d:66:f6:71:27:a8:f2:5e:72:
cf:c8:79:c5:15:f0:39:77:b6:92:9c:ab:b2:21:27:
1a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:08:D8:26:DA:8E:D6:FC:F1:7B:92:B2:58:B7:66:00:48:01:79:B0
X509v3 Authority Key Identifier:
keyid:C7:38:9C:E8:26:BC:8D:26:86:9B:45:2F:3C:D9:36:90:2C:55:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f2:c3:fd:6f:88:d3:a8:fe:9f:c2:dc:b0:bd:01:09:b3:7e:
77:fe:fb:ba:44:98:69:63:90:37:35:5b:37:8d:1d:fa:50:c5:
a6:f9:07:37:7d:66:8d:ca:fd:4a:29:96:cd:a5:64:a2:fa:30:
f5:aa:07:5e:0b:09:f4:d6:3b:a0:54:e5:38:cc:ef:0b:95:2e:
10:9c:13:51:90:61:c9:79:fe:9b:93:91:ef:f2:75:21:d9:e3:
49:76:0c:84:6a:df:0f:53:4d:13:fd:4e:2b:a8:f4:9f:74:81:
d1:3c:1d:7a:8f:62:24:c2:19:8b:5b:33:55:b9:51:45:c0:90:
60:07:c6:1f:0a:72:74:e2:d6:0f:07:5a:bc:9b:79:8e:0e:63:
3a:67:09:ea:33:f3:3f:89:92:a8:3b:07:a2:c0:81:c7:9f:b7:
fb:8f:c3:20:4d:d3:af:0c:34:ae:f6:ab:90:cc:94:dd:21:29:
5c:fc:0b:d8:d7:1c:3a:9f:82:70:05:f9:f9:d4:39:2d:bc:7c:
91:77:ce:d1:d3:3c:77:c9:7e:31:3e:ac:c4:76:9d:98:e0:29:
64:07:d0:f7:0f:98:73:a2:49:8d:4d:2b:b3:cd:dc:f1:4c:26:
d4:56:e6:a0:95:34:7a:b4:88:2d:04:11:64:07:9f:d9:c2:ec:
1d:9f:3f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:34 2026 by rpki-client