Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft
File: xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft (raw, json)
Hash identifier: /hpqf7+s3dRt7JgduAGeD1BMGA+w5uXHUF1DeOH86dE=
Subject key identifier: E5:88:0D:42:40:AF:3B:CB:31:C0:E3:72:30:0B:12:C6:62:B8:CD:41
Authority key identifier: C6:13:5E:4A:CF:96:13:9C:E5:FF:2C:FD:D9:5F:55:A8:17:6D:73:24
Certificate issuer: /CN=c6135e4acf96139ce5ff2cfdd95f55a8176d7324
Certificate serial: 019D39778D7864674D6DA875A16E9E0470F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhNeSs-WE5zl_yz92V9VqBdtcyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft
Manifest number: 0965
Signing time: Sun 29 Mar 2026 12:00:29 +0000
Manifest this update: Sun 29 Mar 2026 12:00:29 +0000
Manifest next update: Mon 30 Mar 2026 12:00:29 +0000
Files and hashes: 1: ZvznoF2yyTKB6pJyqzpGeZuFh38.roa (hash: XpznPyFNyd8U/ZoXrqV7HW6khjk/3kzxWSxwOBbLYoo=)
2: xhNeSs-WE5zl_yz92V9VqBdtcyQ.crl (hash: e1xL9hPP0ig6Kiu3HZoTNHrioEGXHvNuM1cjWVeJ9X8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhNeSs-WE5zl_yz92V9VqBdtcyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:8d:78:64:67:4d:6d:a8:75:a1:6e:9e:04:70:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6135e4acf96139ce5ff2cfdd95f55a8176d7324
Validity
Not Before: Mar 29 12:00:29 2026 GMT
Not After : Mar 30 12:00:29 2026 GMT
Subject: CN=e5880d4240af3bcb31c0e372300b12c662b8cd41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d9:5e:38:13:ee:f2:c6:1c:a7:b1:8c:83:8e:
19:30:66:a7:44:a1:5a:df:35:9b:3c:d9:03:e9:cb:
1a:e8:ef:41:7c:e0:43:f6:f8:5f:33:1d:4e:1e:6e:
21:ea:e8:34:c5:84:d8:f8:97:75:e7:63:e7:16:33:
aa:17:8a:7b:44:89:cc:f8:d2:69:f5:1c:5f:ff:b9:
f4:47:4c:59:c2:5a:b1:ba:e4:1c:ac:15:36:30:90:
a9:56:22:54:d2:11:18:4e:b2:27:85:ed:73:df:f3:
27:9b:f4:e2:8a:a5:cd:06:49:ba:67:17:71:21:2a:
9d:21:f4:12:a5:fc:6e:aa:50:61:c9:47:52:5e:44:
94:82:c9:01:40:f0:40:fd:63:5f:11:c5:18:73:a2:
73:3c:78:f0:e0:3f:48:88:8c:6e:b1:75:d5:74:67:
e6:d8:52:0d:58:d1:3f:68:5a:0c:17:29:0a:76:64:
13:b2:dd:db:a9:95:7c:93:ca:60:af:2d:ae:2e:c5:
8f:aa:95:dd:f7:ce:2c:e9:e9:98:ec:c0:e6:35:e0:
90:e5:b9:c3:6a:dc:10:fc:3a:d7:de:6b:68:0c:91:
c1:1d:4e:23:95:4c:ec:97:f7:ee:49:b7:38:cb:37:
09:a7:ed:87:72:bc:bb:f6:fb:81:7e:e1:bb:e1:b4:
0e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:88:0D:42:40:AF:3B:CB:31:C0:E3:72:30:0B:12:C6:62:B8:CD:41
X509v3 Authority Key Identifier:
keyid:C6:13:5E:4A:CF:96:13:9C:E5:FF:2C:FD:D9:5F:55:A8:17:6D:73:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhNeSs-WE5zl_yz92V9VqBdtcyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:f3:18:7c:3e:3e:6c:c6:a6:94:6c:d9:44:21:4d:69:e5:e8:
f8:c0:88:6b:84:14:7c:8a:da:26:b2:90:0b:80:35:c4:82:70:
92:b6:00:f1:78:32:7a:24:02:d7:32:c3:9c:f4:26:0d:ea:43:
77:72:d4:7f:d9:2e:a8:f9:0d:63:01:53:1d:cd:fb:15:ba:a3:
f7:a4:31:8d:b0:53:c8:b2:d5:ca:20:c2:1b:7b:ae:e9:35:6b:
01:c9:f8:c0:cd:86:97:7c:6f:36:91:5c:e7:8b:93:04:c2:dd:
00:36:56:a1:15:8c:41:e0:d5:b9:8e:ac:fe:dc:bf:b5:f8:b7:
3a:09:52:9e:42:dd:a7:37:ed:e0:88:53:f7:4b:24:57:33:79:
9d:24:ce:b7:d1:1e:15:5c:f6:5f:0b:63:7a:34:0c:73:6c:58:
e1:38:22:9d:65:84:88:ff:39:44:ce:1f:24:02:d9:52:b1:05:
50:fc:11:3b:16:2d:c0:0a:7f:74:bf:db:67:ae:7c:97:37:37:
d8:95:61:30:a3:1a:80:89:1e:32:96:7b:47:49:ba:38:b8:8f:
a5:0a:89:08:8f:e6:12:15:cb:4e:e6:5a:28:a0:9c:4d:37:8d:
e6:4d:70:e2:9b:52:28:16:33:52:e3:a3:e1:26:2b:33:30:37:
0e:6b:ac:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:46:27 2026 by rpki-client