Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft
File: xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft (raw, json)
Hash identifier: qRqim/Y0qG+S9n3PO7sjRjvGVsNk6c+L1H7iQ7JGjh8=
Subject key identifier: 7B:D8:97:76:81:A5:97:28:BB:8B:EF:C7:CA:4E:DF:0C:98:7D:74:D3
Authority key identifier: C6:B3:6F:EA:22:C3:66:D0:8A:4B:54:6A:C8:3F:44:85:B2:B1:E1:59
Certificate issuer: /CN=c6b36fea22c366d08a4b546ac83f4485b2b1e159
Certificate serial: 019D37C0F21C901CA064707F51CDEEABE252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft
Manifest number: 07C6
Signing time: Sun 29 Mar 2026 04:01:24 +0000
Manifest this update: Sun 29 Mar 2026 04:01:24 +0000
Manifest next update: Mon 30 Mar 2026 04:01:24 +0000
Files and hashes: 1: fQX2j2Bq9neKawngCd6r7FvsgZk.roa (hash: Pq3fsjzkXawHi1RCcqpuVO4WOAWLk18WufgTudrWDU8=)
2: xrNv6iLDZtCKS1RqyD9EhbKx4Vk.crl (hash: aiNIP+Idb02v27OkCmRlg5rVZohWFR43PY5V4GER+oU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:f2:1c:90:1c:a0:64:70:7f:51:cd:ee:ab:e2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6b36fea22c366d08a4b546ac83f4485b2b1e159
Validity
Not Before: Mar 29 04:01:24 2026 GMT
Not After : Mar 30 04:01:24 2026 GMT
Subject: CN=7bd8977681a59728bb8befc7ca4edf0c987d74d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:33:52:81:65:3c:c9:54:3a:e9:15:80:5f:01:
c6:38:4e:1b:8d:22:ac:65:c0:29:ee:9b:4b:6d:64:
36:06:8a:c2:6c:0e:f2:3f:e9:1c:e5:72:68:07:81:
43:93:7a:df:5f:99:63:cb:bb:be:06:96:3b:42:2b:
4f:a0:e3:8f:ce:87:a9:82:d9:b0:5e:74:7c:e6:b5:
5d:a3:6c:44:77:af:51:8f:76:72:46:31:2a:f6:3a:
60:ec:cf:e0:78:9b:d4:8c:08:0b:c9:40:b3:72:26:
f7:85:94:03:97:3e:19:b1:dd:c4:6f:f1:62:37:aa:
e4:a2:8b:f9:89:ec:43:d7:ef:e4:c7:e9:66:17:27:
32:ee:ba:d5:e2:96:1b:f5:b0:7b:aa:54:f3:99:90:
8f:57:52:98:8c:12:96:47:ca:a0:a0:d9:1f:04:90:
0d:e4:ff:61:86:86:0a:70:ff:89:23:74:29:fa:32:
71:16:01:5d:24:35:9f:20:42:f3:d4:fd:52:b6:22:
11:37:87:df:e7:5e:29:3e:a5:19:6c:63:93:87:e0:
0b:da:63:b2:85:c6:51:e4:28:8c:70:00:84:d1:66:
95:59:dd:97:1d:b5:ac:d3:6b:b6:0b:c3:0b:7a:a3:
f7:06:05:8a:7c:7c:de:f4:1f:04:52:ea:39:48:2b:
0f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D8:97:76:81:A5:97:28:BB:8B:EF:C7:CA:4E:DF:0C:98:7D:74:D3
X509v3 Authority Key Identifier:
keyid:C6:B3:6F:EA:22:C3:66:D0:8A:4B:54:6A:C8:3F:44:85:B2:B1:E1:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:0a:9a:b1:45:c0:25:c7:6e:23:9b:dc:95:5c:af:80:01:45:
96:95:92:26:96:9d:03:96:c0:d7:72:9b:bb:f5:fa:4a:ae:d5:
c5:d8:d5:78:4e:a0:30:9e:80:ef:c9:ec:6e:81:59:05:42:95:
cb:47:8b:39:1e:eb:57:2c:40:f5:4c:0e:88:14:18:2a:b5:89:
bc:5c:71:a2:aa:76:1d:cd:51:53:99:c5:a5:cc:f0:59:0d:5c:
ca:65:2c:97:d9:85:fd:48:de:1e:31:88:b1:ce:0e:b0:60:d9:
c2:97:fa:5b:78:81:57:2c:ed:8e:36:5c:28:22:84:62:1a:82:
37:b7:89:c2:a2:c5:2c:0a:0b:46:2b:56:0a:00:0e:4d:ba:28:
0e:65:db:2c:ff:27:36:97:de:af:80:09:20:22:04:8a:e6:b1:
ec:25:15:2a:79:07:30:b5:d2:f5:f1:d2:61:08:63:fb:f2:60:
11:90:78:7b:18:a7:06:fc:90:0d:5d:0b:3e:b7:d2:4a:2a:64:
5c:35:1e:40:b7:32:3d:1f:75:6e:81:b3:03:70:b5:b7:b7:d4:
39:34:72:3b:5b:94:79:b3:57:c8:fd:b1:1a:0e:85:e0:45:a6:
7c:d1:ab:7d:60:0e:0a:68:b7:e5:67:9d:51:08:46:45:0a:f7:
77:ef:d1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:16 2026 by rpki-client