Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
File: p_xcZck6dAQIaxelTn4NqWCpspM.mft (raw, json)
Hash identifier: aYXMMyt4PVOFtmGQ/gUEHluThasR85kc4QVd0TW3F4s=
Subject key identifier: 66:A5:18:60:C4:AC:2F:C2:6A:B5:36:BF:3D:72:63:EA:1A:27:47:88
Authority key identifier: A7:FC:5C:65:C9:3A:74:04:08:6B:17:A5:4E:7E:0D:A9:60:A9:B2:93
Certificate issuer: /CN=a7fc5c65c93a7404086b17a54e7e0da960a9b293
Certificate serial: 019D3940E9E309D39C7F7FAA66B5A1A351C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
Manifest number: 1413
Signing time: Sun 29 Mar 2026 11:00:48 +0000
Manifest this update: Sun 29 Mar 2026 11:00:48 +0000
Manifest next update: Mon 30 Mar 2026 11:00:48 +0000
Files and hashes: 1: p_xcZck6dAQIaxelTn4NqWCpspM.crl (hash: WyMRXnpx8cO3P9Eg12zdO4da5I9388SuZQZufidt520=)
2: zyvBgcaKIFGMWYv6OuW2zLjcavU.roa (hash: XTPB93PSeuPbkhF2YYl0hqMFZjAqg6tmVvQv1bPxkjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:e9:e3:09:d3:9c:7f:7f:aa:66:b5:a1:a3:51:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fc5c65c93a7404086b17a54e7e0da960a9b293
Validity
Not Before: Mar 29 11:00:48 2026 GMT
Not After : Mar 30 11:00:48 2026 GMT
Subject: CN=66a51860c4ac2fc26ab536bf3d7263ea1a274788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ba:b8:74:89:25:91:62:62:87:32:38:95:a8:
a2:27:5b:80:02:39:fa:c7:b1:87:99:bf:de:ac:64:
7a:d9:6d:93:74:5d:ce:58:1e:78:17:a9:dd:9e:14:
58:7a:5b:1a:94:ed:78:d1:5e:fa:7f:9c:91:2a:dc:
21:48:0d:6e:49:a4:48:ee:49:51:a6:7e:23:72:2a:
e4:2d:43:c9:c7:c2:b7:3c:15:89:65:2b:7c:e2:45:
9a:cc:d8:16:b0:e2:9f:b8:79:14:2d:a9:cc:97:7f:
36:a9:82:ca:90:a1:c4:87:21:71:24:e3:3c:1d:d0:
29:9b:3c:e1:af:75:bb:80:65:2a:b0:b3:9a:f3:3f:
08:46:26:a6:5b:49:ac:30:fb:f0:34:36:07:20:ed:
99:4c:a6:e8:c5:9d:5d:9b:34:87:1f:33:17:f9:2b:
15:4f:19:bb:88:19:bf:c3:91:10:80:28:f9:72:72:
bf:e4:59:2b:f0:43:c1:2f:30:45:41:bb:4d:e0:49:
1b:ec:49:7a:af:ba:f3:7c:4b:56:85:13:9d:78:c9:
23:04:64:8c:9f:f4:cf:68:aa:a7:1b:81:80:55:64:
dc:1f:97:99:c5:d5:bd:25:3d:70:ca:eb:ed:52:6d:
33:f0:60:17:fe:8a:0f:67:8d:8c:47:76:8d:09:2f:
73:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A5:18:60:C4:AC:2F:C2:6A:B5:36:BF:3D:72:63:EA:1A:27:47:88
X509v3 Authority Key Identifier:
keyid:A7:FC:5C:65:C9:3A:74:04:08:6B:17:A5:4E:7E:0D:A9:60:A9:B2:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:7d:c8:96:47:1b:d9:78:8f:9d:a8:6a:42:1c:2a:1e:a9:41:
c8:bd:6c:68:05:ea:4d:32:d8:be:5f:38:d1:ea:b5:09:17:2e:
30:67:2c:8d:a1:f2:78:41:55:3a:ee:9f:2c:02:07:92:7b:6e:
fa:89:c2:9d:97:c0:25:44:0c:52:d3:24:81:35:1f:c3:49:8b:
fe:a8:c6:17:f7:37:8d:d5:8b:1c:03:3a:b1:43:62:b2:be:de:
6e:1e:74:82:bc:4c:60:b0:cd:95:6c:e3:40:8f:c3:b4:22:3d:
e0:2d:ec:51:29:dd:ab:71:63:41:a4:ef:a0:1a:28:bb:75:be:
cd:93:c7:e1:c8:25:61:b2:78:7a:41:80:3f:04:83:d9:a6:1e:
9c:bf:18:aa:d1:38:98:3f:b1:fe:5c:20:c2:02:d4:55:7f:a3:
8d:1e:c0:39:03:bc:da:48:06:ce:a8:1a:f7:60:cf:af:77:ba:
f5:84:e0:20:2b:9c:62:77:6e:f9:7c:2c:e7:22:c4:c8:cb:63:
15:f9:14:e0:ac:f5:4f:30:d1:6c:bf:9c:3a:fd:ed:77:64:1c:
a0:2c:82:74:ef:97:83:bc:9d:34:d4:67:69:ab:3c:c5:29:de:
e8:2c:50:45:b3:1d:6d:9f:c8:3e:be:53:b9:d3:67:ec:36:53:
27:42:f5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:18 2026 by rpki-client