Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c055a4-8962-4d41-8b69-d7e31c0e8f11/1/xxJw4qZBzNgjcWx0CWSJrzd9cGI.mft
File: xxJw4qZBzNgjcWx0CWSJrzd9cGI.mft (raw, json)
Hash identifier: Qgqhr6MDXaQ0grNixS5Xq4ox8iJ9X98LmI7f8rGx13I=
Subject key identifier: 64:31:5B:71:C2:93:7C:8E:0E:A5:54:EF:87:31:20:25:80:4E:50:2D
Authority key identifier: C7:12:70:E2:A6:41:CC:D8:23:71:6C:74:09:64:89:AF:37:7D:70:62
Certificate issuer: /CN=c71270e2a641ccd823716c74096489af377d7062
Certificate serial: 019D389BAC44927221713E4E6E35209DED2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxJw4qZBzNgjcWx0CWSJrzd9cGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c055a4-8962-4d41-8b69-d7e31c0e8f11/1/xxJw4qZBzNgjcWx0CWSJrzd9cGI.mft
Manifest number: 2C
Signing time: Sun 29 Mar 2026 08:00:19 +0000
Manifest this update: Sun 29 Mar 2026 08:00:19 +0000
Manifest next update: Mon 30 Mar 2026 08:00:19 +0000
Files and hashes: 1: bW3cNXQ8ETHaIbag1hsdcosAygk.roa (hash: wSM1bSinVbIUHrlZvTgxz1Z+hdxPzIJod8hB6qrthCc=)
2: xxJw4qZBzNgjcWx0CWSJrzd9cGI.crl (hash: NQuGRAEZGc1GUYZ10PNnwiW2Ma8Y8CEt8nwmTlUBuQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/c055a4-8962-4d41-8b69-d7e31c0e8f11/1/xxJw4qZBzNgjcWx0CWSJrzd9cGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/c055a4-8962-4d41-8b69-d7e31c0e8f11/1/xxJw4qZBzNgjcWx0CWSJrzd9cGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xxJw4qZBzNgjcWx0CWSJrzd9cGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ac:44:92:72:21:71:3e:4e:6e:35:20:9d:ed:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c71270e2a641ccd823716c74096489af377d7062
Validity
Not Before: Mar 29 08:00:19 2026 GMT
Not After : Mar 30 08:00:19 2026 GMT
Subject: CN=64315b71c2937c8e0ea554ef87312025804e502d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c1:e6:2c:25:9e:4a:c2:7a:cd:ad:9f:03:ba:
35:8a:53:05:71:95:b6:c1:84:54:f0:12:8b:c8:8f:
4d:ef:89:c5:18:ad:bd:2c:10:25:ca:c4:7a:fa:38:
0b:e1:02:a5:72:b4:f0:dc:f5:b9:2a:61:f0:c9:4f:
4f:14:b8:e4:f4:3f:34:4c:ce:3b:c0:0e:65:f1:62:
f1:54:de:6f:c1:1c:c0:c6:53:13:40:1f:96:07:13:
87:6e:66:4a:e1:1f:f3:7f:a2:8c:00:cb:4e:5c:dd:
2a:05:3f:2d:cc:9d:f7:a0:16:bb:0b:6e:f9:d0:ec:
0a:f0:2a:f7:92:18:5d:19:e2:c9:b2:b9:5f:38:bf:
b2:3c:90:05:9b:80:16:ac:c7:81:b5:2c:94:e4:92:
b4:8e:1d:48:55:d9:ac:c6:b9:09:4b:58:fd:5c:52:
98:80:e1:c2:94:c8:0d:c8:e8:a0:86:14:5d:b4:b6:
f4:72:5b:7d:a0:04:78:c0:ab:e5:c3:e7:7e:b0:b8:
53:96:52:c3:f5:42:33:30:cf:16:34:59:c0:02:3d:
e0:8a:49:b9:57:bc:94:e0:3c:b7:35:c4:50:a4:d4:
ac:9d:e1:6b:77:d1:90:4a:15:78:aa:42:1d:94:62:
65:cf:3c:45:ef:9a:ac:2d:c0:38:8f:f6:df:90:65:
31:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:31:5B:71:C2:93:7C:8E:0E:A5:54:EF:87:31:20:25:80:4E:50:2D
X509v3 Authority Key Identifier:
keyid:C7:12:70:E2:A6:41:CC:D8:23:71:6C:74:09:64:89:AF:37:7D:70:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxJw4qZBzNgjcWx0CWSJrzd9cGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c055a4-8962-4d41-8b69-d7e31c0e8f11/1/xxJw4qZBzNgjcWx0CWSJrzd9cGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c055a4-8962-4d41-8b69-d7e31c0e8f11/1/xxJw4qZBzNgjcWx0CWSJrzd9cGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:18:a2:4a:19:23:be:06:7d:0a:84:67:f2:61:d3:53:01:74:
62:d9:b3:34:20:00:5e:30:41:9d:10:ae:6f:1d:1b:94:61:16:
ae:cf:74:7c:ce:f2:0a:53:f6:7d:44:04:8b:72:ef:1c:44:6c:
cd:27:ae:22:63:bc:4a:56:31:04:dd:c8:a0:c0:4d:9b:74:4f:
56:40:07:08:c0:0c:8e:60:af:2e:21:5a:88:4e:6b:97:58:ee:
6c:b8:ee:aa:ed:7b:f4:50:12:4b:bf:f5:7d:a3:cf:7b:92:9b:
74:67:fe:0f:e4:6a:02:7c:1d:f6:3c:20:97:25:41:71:f8:bd:
cb:f8:fa:77:d2:e3:17:32:33:03:78:71:0f:fc:69:b4:0f:2b:
22:e0:c0:9f:4a:d8:64:7d:6b:8d:87:4e:3d:fb:39:ea:83:a8:
72:29:49:7f:25:6a:ca:65:44:27:2c:92:f2:4e:53:58:d4:ee:
a0:77:08:ab:7e:dc:2a:c6:8d:e7:35:03:ff:fb:26:23:f4:9a:
05:2c:b0:44:98:6b:b0:5e:5f:9f:31:a0:8b:db:f5:b2:49:7e:
43:70:70:a8:e9:05:7d:34:34:26:55:92:92:6d:c9:b9:c6:da:
83:df:f3:84:ed:f0:55:65:84:74:1c:58:b9:34:d1:eb:37:89:
21:57:a9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:28:11 2026 by rpki-client