Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
File: xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft (raw, json)
Hash identifier: 9dmZWfNRxk7AOHVm8VaQ13QKESdUSIVvULU6oKDVYGA=
Subject key identifier: 7F:70:41:C0:5E:01:1A:3C:FE:71:06:9C:51:41:AC:15:9A:BD:76:94
Authority key identifier: C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71
Certificate issuer: /CN=c441738baab988b1d68693bb05e29bfbb4f0f671
Certificate serial: 019D39E5F8ED7B4DEC2AF3137E2DD01C8D1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 14:01:05 +0000
Manifest this update: Sun 29 Mar 2026 14:01:05 +0000
Manifest next update: Mon 30 Mar 2026 14:01:05 +0000
Files and hashes: 1: 0sxkLDFdb4QelHCb0OZcMbO1jDM.roa (hash: 1xnWSoVsnQK8dLyDSxHxSRJdCC9QJVhSYDLS7qz0b0o=)
2: AjeR0O3ITsCO65xWw0QykqgxNA4.roa (hash: DgIKpLNUmEsPkrau/sY/HOWPCo1ggWtDwl6wxDzmrWM=)
3: JYg_CAMB4ZN8DGnRJNHFpnRes5M.roa (hash: 8yyEuQEPL63uz0pA2x8egSWHyWTxI5pMdw0GJbheT0g=)
4: XfbSuzWnSJ0R_yOnkIG4F7s1WPk.roa (hash: I7f3HuHYguoVsLgmKIELlpLwLVz1wyD/5cmJZXhghjI=)
5: cUu6zP1qDNJzdBpEfOD7tH9ZEq8.roa (hash: voL4FK/goy3Ucp4jv2hDvT1VmoRVg+99FBMAXu49zQk=)
6: sQNC3PZhtT00aBnksKdxFAVZzQQ.roa (hash: 0L2z2BzNlMPl3E12ZeAaZbBCG9ys89MDIPcvR5FtVNI=)
7: tfaKP8IvgQkAwmU3RK8qZmHmzts.roa (hash: hyWKZ+AjnMpt6LR61ItU5+Wmy9Q8i+PxJ269z65RWH0=)
8: xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl (hash: /bPFupbz9ukQlmEP8C9ooMUlDakRFlWh9s/m1OQirhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:f8:ed:7b:4d:ec:2a:f3:13:7e:2d:d0:1c:8d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c441738baab988b1d68693bb05e29bfbb4f0f671
Validity
Not Before: Mar 29 14:01:05 2026 GMT
Not After : Mar 30 14:01:05 2026 GMT
Subject: CN=7f7041c05e011a3cfe71069c5141ac159abd7694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3c:90:5e:16:86:34:77:c0:b6:5d:54:98:f1:
99:fd:61:a5:4b:a4:f3:83:7c:e2:1a:a6:fa:a9:d2:
16:e1:85:a3:b6:3b:57:83:e1:57:d5:18:26:29:75:
b9:56:a4:85:91:e0:5b:60:82:d3:31:53:71:a9:50:
ca:1b:94:09:58:50:60:52:f0:7c:63:d8:0a:a7:de:
a7:36:af:ec:6b:52:8e:46:6e:36:4e:90:49:91:68:
84:49:44:9a:24:5c:da:d3:70:5f:8b:a1:a9:5c:b5:
b0:f8:d7:f6:40:e1:7e:51:b2:ad:82:dc:73:55:7c:
9e:48:4b:5e:e8:75:17:6a:28:e6:91:9f:78:b5:0b:
1c:65:8d:48:ad:9f:26:1f:c4:32:79:c2:1b:d3:d8:
74:3d:16:f7:c8:83:f5:1d:4a:24:b1:bd:86:e6:e3:
e2:a8:56:74:51:28:70:3f:44:10:eb:86:91:d8:f5:
1f:e3:05:f6:bb:4f:c9:93:bc:27:0c:3a:58:d3:d5:
96:40:90:8c:90:1f:53:99:63:e6:45:da:aa:03:77:
8d:2d:73:f7:cb:c3:35:d9:33:2d:de:c5:37:88:ce:
ab:08:5e:99:b5:c2:a5:4d:43:25:9f:59:9d:82:ef:
99:be:8c:46:ed:7d:93:f6:98:37:80:fe:9e:ce:56:
6c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:70:41:C0:5E:01:1A:3C:FE:71:06:9C:51:41:AC:15:9A:BD:76:94
X509v3 Authority Key Identifier:
keyid:C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c6:8e:0c:03:be:67:0d:24:cc:c3:d5:57:6d:e7:62:7a:ff:
95:b1:bf:a9:02:4e:f7:e6:24:56:48:bd:49:00:62:76:37:11:
b2:b6:2c:07:02:f7:b6:8a:58:57:01:fa:7d:7e:5c:56:95:c3:
17:50:96:37:30:11:ed:06:08:41:0c:8e:3f:17:b8:e2:d0:6f:
c7:4b:1b:31:b1:35:8d:e9:a8:4a:0b:c5:af:67:98:db:17:18:
eb:3b:8f:a5:ad:9b:a5:0f:1b:38:89:9d:04:93:c7:2c:ba:bc:
a8:83:62:74:e6:38:43:eb:f8:00:ef:38:f3:c5:c0:c3:02:c2:
3e:1a:49:0f:b3:37:fa:cc:b2:66:12:b6:4a:5a:cd:ac:bd:d8:
9a:15:6d:8e:f3:aa:76:97:ea:49:c9:51:cc:c8:ad:da:cf:0b:
57:8d:9c:06:94:a0:bf:e7:62:de:c7:fc:27:67:bd:69:0c:c6:
71:31:b7:c8:2f:d8:9a:21:df:f6:84:c8:d4:83:5a:dd:a1:37:
57:ec:11:68:d1:0d:28:70:28:92:cc:5a:3f:48:b3:18:f7:bc:
7d:fb:c0:5f:db:1d:f3:8f:93:6f:41:6c:b4:51:69:8d:8f:eb:
3d:7e:db:cb:89:35:13:ff:c1:c3:3d:89:88:71:4f:ab:d0:f0:
8b:b2:7c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:35:41 2026 by rpki-client