Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
File: _X0csRSU6ziY8Q09Y1vnXxay3FE.mft (raw, json)
Hash identifier: h9fv2n/ynukfySQuv/aa83Rr5CXAcCGlOx8ZHZMJn64=
Subject key identifier: A6:D5:68:D7:0B:58:28:6D:78:D2:FB:C4:F6:D4:2E:E8:D7:B8:9A:3A
Authority key identifier: FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51
Certificate issuer: /CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51
Certificate serial: 019D382E32765AF908FA1106204EDF8823AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
Manifest number: 0ED3
Signing time: Sun 29 Mar 2026 06:00:44 +0000
Manifest this update: Sun 29 Mar 2026 06:00:44 +0000
Manifest next update: Mon 30 Mar 2026 06:00:44 +0000
Files and hashes: 1: E82B-w4jJKhyGgYx3Ej9sCBHvb4.roa (hash: A+TYWIOmRpCeA175k18MhvZXgytX5Jk9nQ0FQ6VBaqA=)
2: Q4zQF0crGItA_1w0I9xQ7hGAgWQ.roa (hash: JfuU3qW2LSn3VZ4RrrVe6pLBVqp+kUuKYjX2iO0ocCI=)
3: _X0csRSU6ziY8Q09Y1vnXxay3FE.crl (hash: hPB0f3Zxxgw8pgC+f7vdrsj4Fup0AKLgNUrOJHrlQaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:32:76:5a:f9:08:fa:11:06:20:4e:df:88:23:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51
Validity
Not Before: Mar 29 06:00:44 2026 GMT
Not After : Mar 30 06:00:44 2026 GMT
Subject: CN=a6d568d70b58286d78d2fbc4f6d42ee8d7b89a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:60:e2:61:7d:d4:30:ab:00:67:0b:e1:3a:09:
e7:25:12:ed:d6:90:d8:af:49:1d:9f:94:c3:c8:4e:
67:78:6b:d0:54:ca:eb:94:a3:44:3b:9c:04:ee:82:
83:54:51:ca:76:c2:88:6a:f2:a6:14:9f:39:f6:37:
cd:59:91:74:9c:58:40:19:7d:f1:20:9d:9f:91:5e:
6f:29:0b:ea:c0:75:d1:eb:52:77:27:75:ee:76:fb:
f0:3d:d1:21:4f:54:2e:be:61:c0:0e:2a:1d:21:5d:
dd:0a:9d:a3:9a:9a:e3:db:d7:22:7c:90:06:42:c7:
da:43:d9:d4:1a:63:85:4d:ee:a8:15:5e:c2:93:9b:
6b:a4:6e:09:63:e1:3b:cc:02:2d:a8:af:dc:06:fd:
e8:c4:16:05:65:3e:0f:e9:d3:8d:d3:67:3a:74:f8:
5b:55:b1:1f:50:c3:a0:9a:9a:95:ff:51:9d:b7:e6:
07:88:7f:26:8a:8f:89:f5:e3:4f:24:f7:c2:ec:7d:
92:04:13:47:f8:a6:49:d3:86:55:ea:de:51:33:dc:
5b:08:b4:31:46:5d:0b:fa:c2:30:cd:5a:90:8d:ea:
a7:ca:5e:05:f5:e3:5b:9a:3b:32:5e:0f:df:f9:32:
81:71:b9:a9:9f:4f:ed:69:3e:8c:e4:98:db:9a:07:
72:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D5:68:D7:0B:58:28:6D:78:D2:FB:C4:F6:D4:2E:E8:D7:B8:9A:3A
X509v3 Authority Key Identifier:
keyid:FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:db:59:89:d1:cc:b3:ef:37:13:1a:f3:21:c9:21:af:df:d9:
7b:1d:dc:58:04:92:bb:bc:bf:71:2e:b1:97:ef:01:08:12:b8:
ce:77:48:59:a6:58:13:33:5d:07:6f:13:c7:47:32:81:32:7e:
d8:62:96:00:c8:89:43:16:f6:70:c3:40:74:1c:ba:79:0c:15:
42:79:f3:16:f9:91:9a:35:73:df:55:60:b0:7e:2e:0b:0d:a4:
e7:82:e0:a6:f2:7c:70:ea:68:77:12:4f:5c:90:4f:1c:47:d2:
05:4f:6b:cc:a5:45:51:b3:87:c0:6c:f6:24:22:81:5f:ca:ee:
9c:1a:6f:63:20:e9:08:43:a4:94:0a:07:7e:da:84:81:4a:77:
43:25:8d:31:89:4d:a8:d3:0c:06:7b:15:01:57:dc:21:53:d6:
69:cd:5f:3a:28:22:2b:c1:d0:32:56:1f:0d:cd:3e:38:28:9c:
5f:c2:6f:9b:05:23:c8:00:15:29:ec:34:8b:5a:53:60:21:ec:
ef:5d:c2:78:7a:11:a6:99:59:0e:8c:a8:53:db:54:e6:48:ef:
4f:68:ba:cc:7a:18:cf:30:88:00:f4:64:ad:0b:08:15:a0:93:
cc:d8:85:85:fa:73:b1:1e:33:9f:7f:3c:65:21:2f:2c:9b:ca:
96:db:77:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:54:41 2026 by rpki-client