Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
File: x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft (raw, json)
Hash identifier: Bua+7gZzO2TBZj36PVZq2k8jVGlzo2NAIY8DFbyNzyA=
Subject key identifier: D7:DF:B9:DA:38:6C:E4:06:72:C0:8F:99:81:67:4E:E9:5A:BC:4A:61
Authority key identifier: C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
Certificate issuer: /CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Certificate serial: 019D389BC74C29C64E8C10AA401A784370E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
Manifest number: 14D8
Signing time: Sun 29 Mar 2026 08:00:26 +0000
Manifest this update: Sun 29 Mar 2026 08:00:26 +0000
Manifest next update: Mon 30 Mar 2026 08:00:26 +0000
Files and hashes: 1: VVO2x6L7LFTZsVY_zaZrcjz-CLU.roa (hash: mrQRCF7HAxobAPy4OykpZkTQroOOHVdF+aZo6ajUous=)
2: XSKluvUTTgVd2egTpJ08l-exvKw.roa (hash: k4WvTC/++ULE/2LzyeolM06KPsDEfc4ZDC8+guSUNtQ=)
3: x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl (hash: BQcQz7HnLrwEtmQOnoR3jMZhGIe9uCdrUxcjLtrc2R8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:c7:4c:29:c6:4e:8c:10:aa:40:1a:78:43:70:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Validity
Not Before: Mar 29 08:00:26 2026 GMT
Not After : Mar 30 08:00:26 2026 GMT
Subject: CN=d7dfb9da386ce40672c08f9981674ee95abc4a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3e:0e:ae:49:76:35:be:1c:9e:47:f8:ce:88:
e2:3b:ce:89:05:eb:d5:77:b0:fa:ee:0f:88:32:ac:
a8:7e:2d:da:51:27:39:de:11:3d:79:f8:9d:ff:91:
2d:15:a5:97:0e:d8:76:47:13:65:a5:10:4a:21:03:
66:c3:d2:21:52:18:fe:f4:20:99:db:1b:6f:98:8e:
f2:b2:f0:b9:09:c4:69:8d:7b:2f:ff:11:36:76:aa:
ac:ce:06:ad:30:9e:8b:e0:62:ce:12:62:87:40:0b:
77:bb:cd:f1:3c:f0:e1:06:6e:3d:6f:05:86:e0:db:
47:79:60:31:9a:b4:a1:6e:e3:c7:21:fc:96:ac:43:
eb:80:dc:03:eb:92:2c:7f:08:df:fe:06:ec:fd:22:
86:db:0b:b6:f2:5e:18:91:16:92:cb:9c:fd:01:78:
c5:1b:c7:c6:3d:79:31:7f:e7:fb:86:72:ca:a0:84:
ae:9f:26:58:43:e3:aa:b8:51:e7:47:c0:5d:a6:d1:
bd:33:58:64:3e:03:44:b2:44:26:09:ed:69:f3:0c:
e4:b6:96:b1:85:a6:e0:58:93:35:2f:75:f5:a5:ae:
1f:4e:03:47:d1:62:eb:64:b5:20:dc:ed:9e:e8:22:
c5:50:75:56:33:77:17:b4:3c:13:77:c5:13:46:63:
44:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DF:B9:DA:38:6C:E4:06:72:C0:8F:99:81:67:4E:E9:5A:BC:4A:61
X509v3 Authority Key Identifier:
keyid:C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:b0:53:02:0e:35:d5:54:e9:c1:8d:2e:b6:ec:24:5b:96:63:
4a:71:0f:f3:fa:44:20:fd:1a:85:9b:35:87:7b:e3:d2:a6:23:
2d:81:b9:58:24:6d:ae:4e:69:81:ce:62:94:43:e4:72:0b:ca:
01:5a:87:b4:fc:7c:55:fb:cf:7c:bc:55:8b:1e:11:b3:7b:f4:
15:b1:3a:83:c1:b1:24:17:32:b4:f0:67:34:a1:ad:81:3d:91:
ee:8c:76:7a:d3:39:5b:39:e4:f3:37:22:88:be:d8:8a:0c:07:
5b:aa:ca:1d:4f:db:cc:8b:66:06:83:e4:79:6e:d5:2e:5e:60:
88:b6:72:df:53:5d:9e:df:96:db:8e:58:c3:cc:ef:2b:d5:e1:
97:aa:ef:72:60:73:88:9d:e0:81:56:fa:c2:3e:53:eb:f7:c1:
85:d3:39:39:82:44:18:74:0b:58:bb:96:4e:ce:58:d3:06:6d:
e9:df:95:07:6a:d8:18:90:c0:47:ab:79:d5:9a:10:6b:a7:71:
41:be:b5:2f:e7:51:7e:36:1b:a2:5b:1c:6a:7c:aa:79:6b:7e:
dc:be:3e:67:77:d0:3f:74:c9:b4:43:44:40:ee:8b:c2:77:6c:
52:b5:e6:59:00:e7:c3:7b:29:13:b7:b9:0f:d5:c2:49:5c:62:
cd:99:a9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:50 2026 by rpki-client