Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
File: xP8jscNxNS85tz05pOB_jKmMzWc.mft (raw, json)
Hash identifier: GVlL8K6SkiYtEHIp3y8nAxY21kkyiouUTu3+bL5sttI=
Subject key identifier: 4C:6A:27:9A:A8:CA:74:AA:40:DD:74:12:1E:2D:C7:34:C4:ED:8B:81
Authority key identifier: C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
Certificate issuer: /CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Certificate serial: 019D1DCA00589F1194EF0C61574974A4AF22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
Manifest number: 1713
Signing time: Tue 24 Mar 2026 03:01:10 +0000
Manifest this update: Tue 24 Mar 2026 03:01:10 +0000
Manifest next update: Wed 25 Mar 2026 03:01:10 +0000
Files and hashes: 1: 0dcnrV30Gn7pa5jEvj5KgP9qiO0.roa (hash: A5Y7w1IBePH5KEnAB3b2HcWOuDVZjoYUDuccSlddMpw=)
2: XA8IG6QRQrLsbNV64R-2HjyZbEg.roa (hash: MAJTuBGRkQWXta5nAROoMjVqytepn5bG0MlABDfwKjU=)
3: kReZeiKYeK227CwdOt2peWbzn6o.roa (hash: vijDgPLigLiF+q+U/7SVmc/WWIgze2Hy8w525GeqVG8=)
4: l7CfLnkZArXswZfoQeoUIu_AgpA.roa (hash: RNWlpQMRGNEnmwW1gZu/IBscvvbH2tY8tCACNrgrNfA=)
5: mVQ9FPpVueUhksm65G9KzIV5UC8.roa (hash: aeiYkQy+Q1DkLgKvsKV+KpeuzrUpSXnXOD5PPgZsPjM=)
6: x2-bHgYNNe9EO0e71Kbdkn4WCUs.roa (hash: Dca0K3UX+EGLfg7iHsshpljIoglUEEQdeXIYfckXkFA=)
7: xP8jscNxNS85tz05pOB_jKmMzWc.crl (hash: kmcSDh9hI6AXZ1+6L50ZhejZUgG96KoQvNk9JEcw/ag=)
8: yCcfya-jB3S-Fhloi_JZSoWRN1w.roa (hash: 8VHySyEqz9LaoooRkHWLcdlgezRWIk8QkynQdc9lQz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1d:ca:00:58:9f:11:94:ef:0c:61:57:49:74:a4:af:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Validity
Not Before: Mar 24 03:01:10 2026 GMT
Not After : Mar 25 03:01:10 2026 GMT
Subject: CN=4c6a279aa8ca74aa40dd74121e2dc734c4ed8b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:45:5b:5e:7b:f8:2b:55:48:af:89:97:c3:67:
36:cf:27:12:3b:c9:18:fb:69:50:86:99:55:85:b4:
be:11:56:0a:0a:bd:8b:d6:74:5e:98:22:86:d5:1a:
ce:f4:14:8b:ec:c2:b3:fb:e3:d4:8d:27:d7:0c:45:
df:fa:6d:b9:14:0e:90:36:57:9b:80:fe:92:4e:e2:
7b:6f:43:d6:82:ef:bd:90:57:37:9a:16:76:9b:11:
9a:aa:f2:67:16:95:44:98:e4:03:e1:41:87:16:b9:
fb:90:02:b5:be:96:16:08:44:d8:e1:10:63:2e:99:
bd:02:34:bf:d6:8c:36:b5:13:fd:99:84:89:e3:89:
1e:9d:ea:a8:ca:de:dd:a4:98:06:f7:0d:5b:3a:5d:
01:59:1e:36:ad:0e:55:2b:39:0a:b4:f2:e4:72:d0:
f7:7e:f4:05:f3:c4:61:43:65:a2:1b:f3:37:46:d5:
c1:79:d7:ef:c8:45:bf:d3:f2:31:2f:cd:86:1f:50:
58:3d:e2:5f:00:62:f6:c8:8b:71:60:b4:ed:75:ec:
82:b7:41:52:a7:6e:a9:2d:aa:13:a4:40:2b:d1:4a:
72:13:86:25:0e:23:5e:8f:1f:9d:2f:f2:aa:ce:9e:
74:a4:ac:ee:44:d7:0b:5d:a3:21:63:81:a9:25:ec:
7e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6A:27:9A:A8:CA:74:AA:40:DD:74:12:1E:2D:C7:34:C4:ED:8B:81
X509v3 Authority Key Identifier:
keyid:C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a3:38:2b:b8:e0:60:46:77:47:a8:bd:5b:e5:78:d1:69:3f:
93:ac:64:47:60:ef:c0:76:ed:e6:8f:81:20:f6:d0:5b:cf:0a:
6f:25:80:91:06:26:c9:f9:a6:5c:e7:22:91:ba:a3:9c:e3:80:
ea:d2:0e:cb:ae:fd:af:30:2e:77:3c:49:91:69:22:df:b6:37:
f4:b1:52:80:a5:dc:41:02:6c:b5:b0:9b:96:7a:5d:bc:f3:b3:
b2:dd:97:d9:85:26:aa:b5:6c:15:1b:55:a4:68:1e:f7:ca:26:
f5:d6:67:86:37:7f:d6:0b:b8:a2:13:39:41:4e:92:35:85:86:
2b:97:8f:49:87:c8:c0:bc:e7:23:0a:ef:78:f6:da:10:6f:a8:
f6:ea:ab:fc:e5:22:d9:b2:34:4f:97:a3:3f:5d:d1:74:fa:dd:
c2:8d:94:98:a5:6d:f7:90:83:19:5c:e1:f6:97:3b:98:39:eb:
ae:08:ab:a1:8a:b2:b5:18:f1:2b:7b:a7:84:1d:6d:b5:62:af:
11:7a:50:1e:b2:5e:5b:e0:61:48:71:dc:fa:61:d9:9d:dc:00:
73:ec:b0:82:5a:b1:7c:cd:9a:28:ee:9d:37:ff:41:80:a7:68:
7e:bb:2a:7d:5b:46:f6:71:a9:c1:38:e6:65:09:ed:7e:81:cd:
d6:d6:2b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 11:24:48 2026 by rpki-client