Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
File: x6TS9okT6s5sn1CSvcfdIPV09Dg.mft (raw, json)
Hash identifier: lu80XJqCxUPJs8IS/P6RCAaW9qOS5KjqACEe/dNp4A8=
Subject key identifier: 9C:B1:75:06:0C:94:13:1B:DD:B1:79:97:A8:56:96:E8:3B:7F:BA:F8
Authority key identifier: C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38
Certificate issuer: /CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438
Certificate serial: 019D3909E86FD0E16D18930EFE865F1807F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
Manifest number: 1896
Signing time: Sun 29 Mar 2026 10:00:43 +0000
Manifest this update: Sun 29 Mar 2026 10:00:43 +0000
Manifest next update: Mon 30 Mar 2026 10:00:43 +0000
Files and hashes: 1: FXTyPwjMGAiU5KxW_Bfbg2AROHw.roa (hash: OnE+aJgFklXNXWETHHDMbnfVlcK0uF/bBVveHl9Em7A=)
2: T3lGsdRYO3Jiv8YeumY1-URxH8k.roa (hash: 2iZU0Zg9KB5iXER8e3UtbINmEwCtWsu/Q8hRWGFKAwI=)
3: x6TS9okT6s5sn1CSvcfdIPV09Dg.crl (hash: kYOHMIsUjuZnUr9P2FhFQBwKQxMMKuiiXGuk8UTgB6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:e8:6f:d0:e1:6d:18:93:0e:fe:86:5f:18:07:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438
Validity
Not Before: Mar 29 10:00:43 2026 GMT
Not After : Mar 30 10:00:43 2026 GMT
Subject: CN=9cb175060c94131bddb17997a85696e83b7fbaf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e8:35:34:10:b9:05:8d:2d:2d:5a:6c:ec:28:
59:94:d2:3c:00:7e:62:1e:cc:85:18:5f:73:38:a8:
69:4a:11:2d:d0:dc:80:85:49:05:70:8c:d5:5a:d3:
3e:0a:6f:9e:81:71:49:95:b5:18:e5:ef:c2:bb:8d:
b8:63:5e:77:b8:c2:bb:a6:45:bc:43:0b:af:2a:23:
8e:ba:ba:d0:60:2e:ce:6a:05:f2:77:28:2c:c7:ff:
ce:19:09:a2:f0:71:2d:d6:4b:18:50:b7:ca:f9:74:
63:3c:89:f8:c5:62:2e:5a:81:3d:ae:46:a8:37:d7:
4e:68:7e:ed:8d:e1:06:c4:e1:d1:c0:05:dd:6b:5a:
8f:54:7f:50:d2:b5:5f:2f:2e:1f:e6:23:00:c9:08:
18:e2:74:2a:dc:d9:29:d4:39:98:d4:cd:43:5f:83:
c6:ea:ae:72:b6:fc:be:56:75:ea:8a:5d:56:8b:c4:
d1:a1:67:e1:a2:1d:76:13:2c:c8:44:b3:2d:f1:5e:
d8:8a:67:59:d3:b0:f4:af:08:e5:a9:10:15:aa:f4:
53:f1:93:d5:6d:87:71:7f:c4:72:26:da:db:4f:d9:
96:de:c4:04:e1:7e:be:2a:59:f0:05:52:6d:55:4c:
69:d0:ca:e2:51:7e:63:a9:0f:cd:ed:38:ea:1a:8a:
c7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B1:75:06:0C:94:13:1B:DD:B1:79:97:A8:56:96:E8:3B:7F:BA:F8
X509v3 Authority Key Identifier:
keyid:C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:11:76:22:94:9f:39:7b:e1:2e:19:3d:e9:cc:bf:8b:47:32:
46:56:01:b3:39:c5:39:34:4c:c1:fe:17:65:99:96:d2:1d:a8:
bd:98:be:91:ba:d6:0c:a4:18:d5:ab:80:db:ff:02:22:07:87:
f7:b5:05:e7:61:13:96:e6:6d:36:3b:41:53:3d:73:1f:01:d6:
76:ce:0a:a7:b0:b6:e4:48:7b:13:a3:45:61:d4:ad:05:93:ba:
3c:57:09:39:19:88:4b:d6:58:51:38:fc:f1:e5:c7:d4:6f:6e:
7e:39:5d:52:e8:05:9a:7a:f6:76:84:2c:88:48:95:fd:20:87:
a1:0b:9c:a0:d8:7c:ce:d4:ae:11:0f:95:0d:7d:f5:0e:6a:da:
e6:d3:ca:90:eb:34:11:6c:8f:55:6b:61:fb:0d:2e:67:b4:2b:
48:54:80:81:38:64:da:85:fe:8b:97:09:f2:a5:89:6a:84:8a:
dc:8d:ef:13:61:45:1a:56:43:bf:63:37:07:ee:f1:96:63:f9:
ab:6c:19:d4:2d:c6:74:18:d1:99:4f:12:a2:81:cf:1a:e1:7d:
3f:a2:d0:7c:8e:e6:22:ee:59:e9:a2:15:84:e6:cd:21:2c:aa:
09:6a:68:04:4e:25:93:c3:cf:c9:02:57:1b:4f:4d:07:1f:28:
1f:c1:57:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05Cehv0OFtGJMO/oZfGAfzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YTRkMmY2ODkxM2VhY2U2YzlmNTA5MmJkYzdkZDIwZjU3
NGY0MzgwHhcNMjYwMzI5MTAwMDQzWhcNMjYwMzMwMTAwMDQzWjAzMTEwLwYDVQQD
Eyg5Y2IxNzUwNjBjOTQxMzFiZGRiMTc5OTdhODU2OTZlODNiN2ZiYWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Og1NBC5BY0tLVps7ChZlNI8AH5i
HsyFGF9zOKhpShEt0NyAhUkFcIzVWtM+Cm+egXFJlbUY5e/Cu424Y153uMK7pkW8
QwuvKiOOurrQYC7OagXydygsx//OGQmi8HEt1ksYULfK+XRjPIn4xWIuWoE9rkao
N9dOaH7tjeEGxOHRwAXda1qPVH9Q0rVfLy4f5iMAyQgY4nQq3Nkp1DmY1M1DX4PG
6q5ytvy+VnXqil1Wi8TRoWfhoh12EyzIRLMt8V7YimdZ07D0rwjlqRAVqvRT8ZPV
bYdxf8RyJtrbT9mW3sQE4X6+KlnwBVJtVUxp0MriUX5jqQ/N7TjqGorH9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyxdQYMlBMb3bF5l6hWlug7f7r4MB8GA1UdIwQY
MBaAFMek0vaJE+rObJ9Qkr3H3SD1dPQ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDZUUzlva1Q2czVzbjFDU3ZjZmRJUFYwOURnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9mMDNjYTEtNzI2Yi00ZGU5LWI0MTkt
ZjlhMWJiYzM2ODQ1LzEveDZUUzlva1Q2czVzbjFDU3ZjZmRJUFYwOURnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9mMDNjYTEtNzI2Yi00ZGU5LWI0MTktZjlhMWJiYzM2ODQ1
LzEveDZUUzlva1Q2czVzbjFDU3ZjZmRJUFYwOURnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgRF2IpSf
OXvhLhk96cy/i0cyRlYBsznFOTRMwf4XZZmW0h2ovZi+kbrWDKQY1auA2/8CIgeH
97UF52ETluZtNjtBUz1zHwHWds4Kp7C25Eh7E6NFYdStBZO6PFcJORmIS9ZYUTj8
8eXH1G9ufjldUugFmnr2doQsiEiV/SCHoQucoNh8ztSuEQ+VDX31Dmra5tPKkOs0
EWyPVWth+w0uZ7QrSFSAgThk2oX+i5cJ8qWJaoSK3I3vE2FFGlZDv2M3B+7xlmP5
q2wZ1C3GdBjRmU8SooHPGuF9P6LQfI7mIu5Z6aIVhObNISyqCWpoBE4lk8PPyQJX
G09NBx8oH8FXSw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:16 2026 by rpki-client