Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
File: xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft (raw, json)
Hash identifier: j9EhpPCdillKVyka7tDYswPcEF4lDy/V+YO3TDVrdTs=
Subject key identifier: 7B:2E:C6:CD:AD:26:52:F1:F6:7D:11:A8:DD:D0:38:55:9F:1F:FD:03
Authority key identifier: C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
Certificate issuer: /CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Certificate serial: 019D3865897B41AE068DD296FF7050593A64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
Manifest number: 05AA
Signing time: Sun 29 Mar 2026 07:01:11 +0000
Manifest this update: Sun 29 Mar 2026 07:01:11 +0000
Manifest next update: Mon 30 Mar 2026 07:01:11 +0000
Files and hashes: 1: tOUQl2J5Wpm8LcDuYGUnej7OiFY.roa (hash: 3SzovpialpEoSK1tVIj0K+EFB6CyFsxOHbtKDkoQSb8=)
2: xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl (hash: gAzn+hbaQEOZMxuwUCz8JTuyKVYdcVdey5uP4uF9cF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:89:7b:41:ae:06:8d:d2:96:ff:70:50:59:3a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Validity
Not Before: Mar 29 07:01:11 2026 GMT
Not After : Mar 30 07:01:11 2026 GMT
Subject: CN=7b2ec6cdad2652f1f67d11a8ddd038559f1ffd03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9c:6a:c7:5c:89:2a:56:36:23:31:81:3b:c1:
5a:ae:82:fb:5c:6d:03:c5:9f:e2:48:b5:32:a0:38:
b7:3b:e2:56:be:6d:2d:6f:07:ca:41:bf:61:db:d2:
49:29:4d:c9:7a:81:25:66:3c:81:7b:22:b0:cf:94:
ca:7b:08:2e:2c:b4:4a:ac:c8:cc:09:bc:71:00:a0:
9e:58:4b:48:76:14:c4:87:a9:a5:84:ec:67:fa:a3:
14:a2:91:3c:fe:2a:3f:38:7f:25:e6:81:6f:56:9f:
4c:6b:bf:54:17:8d:4f:93:88:6e:9c:0c:cd:96:aa:
69:8e:a8:1d:a0:0b:f1:6d:c1:90:df:fb:58:af:72:
52:da:e7:6a:5e:b1:6a:c5:29:9d:25:07:dd:0b:67:
f2:7a:b6:d0:0a:eb:01:c8:01:60:c0:07:c4:21:2b:
df:7c:4a:53:00:8a:45:be:89:3e:5d:ff:e1:aa:ad:
bc:17:2c:44:e2:1a:b6:0c:5e:d9:b8:73:e8:d7:f3:
78:e1:ad:30:96:76:d6:58:bf:f3:7b:84:7c:8c:f3:
51:39:89:e7:83:4e:b6:de:69:86:e9:a3:d0:d6:9d:
23:bc:e2:90:5a:2c:50:e2:0b:f9:5e:fb:dc:88:0e:
7b:81:98:be:f3:e9:80:5f:4e:05:4b:2c:c6:a2:62:
f3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2E:C6:CD:AD:26:52:F1:F6:7D:11:A8:DD:D0:38:55:9F:1F:FD:03
X509v3 Authority Key Identifier:
keyid:C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:43:0e:43:b2:ab:84:af:c0:ce:7a:50:ea:3e:f0:d4:ae:d8:
fb:bc:d7:f0:6b:d3:0e:40:ce:14:19:17:60:86:61:34:03:34:
b5:9d:f7:1c:f0:f2:af:0e:2c:91:45:bb:c6:8c:50:c6:c2:6d:
dc:b9:9d:1c:1e:d6:d8:73:89:e7:78:a1:ab:24:fb:9f:bc:e8:
7d:98:14:9c:cf:0f:69:17:74:54:73:e6:56:74:57:be:ae:aa:
cc:e6:5d:dd:3a:cf:d2:47:b3:9c:1f:a9:3a:1a:0f:d2:64:89:
c8:46:dd:89:20:ee:0b:68:f4:85:57:88:50:7b:fb:91:c2:14:
66:df:25:38:ae:b3:f7:55:1d:94:d2:3b:06:2c:25:47:75:59:
32:c3:aa:de:60:cc:f4:a7:8c:d4:64:e3:49:a5:76:91:04:8b:
fa:50:78:39:c3:a8:e1:80:4e:ac:da:66:0c:b9:b3:b2:57:e3:
01:59:10:03:54:57:b2:1f:00:5d:d0:a1:1d:1a:99:2b:01:e4:
ae:e7:4f:06:6e:fc:54:91:6b:32:35:59:f5:ec:66:88:3a:70:
09:b8:11:a5:9f:9e:eb:e4:d9:54:25:e7:c6:33:50:ea:d7:e3:
14:89:fa:a9:73:df:bf:7d:ed:f1:83:f3:b9:98:eb:ef:9b:88:
89:90:9f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:47:53 2026 by rpki-client