Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
File: xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft (raw, json)
Hash identifier: LNRJTvAvhGNB2rRWrgjz5aS+gKo/VR7sDXyqFj7I+lo=
Subject key identifier: C2:F7:9E:31:8D:A9:B7:7E:CD:59:56:E3:C4:31:74:BC:DD:08:25:C0
Authority key identifier: C6:25:AF:B9:CE:33:5E:ED:3E:53:12:8B:4A:9E:B2:5F:C4:95:D6:E0
Certificate issuer: /CN=c625afb9ce335eed3e53128b4a9eb25fc495d6e0
Certificate serial: 019CE5FF390D60143C113D493B7E0B6065D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
Manifest number: 17BC
Signing time: Fri 13 Mar 2026 07:00:34 +0000
Manifest this update: Fri 13 Mar 2026 07:00:34 +0000
Manifest next update: Sat 14 Mar 2026 07:00:34 +0000
Files and hashes: 1: amTwSoJu04--PPMgX7cWGoLl7yI.roa (hash: LHgYpMKmWJ/zte9nRlTYZiOamXW79eIiHdCMO+n1Kpc=)
2: xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl (hash: f6kZC1dzk2LcoppFhBrsTKYc6Tmv+VKzLqeRcN5N8NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:ff:39:0d:60:14:3c:11:3d:49:3b:7e:0b:60:65:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c625afb9ce335eed3e53128b4a9eb25fc495d6e0
Validity
Not Before: Mar 13 07:00:34 2026 GMT
Not After : Mar 14 07:00:34 2026 GMT
Subject: CN=c2f79e318da9b77ecd5956e3c43174bcdd0825c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6b:35:6e:ad:11:14:e8:bd:84:c2:fb:d5:b9:
d9:0c:9a:ad:b2:a8:9f:8f:d3:e1:bc:6e:6b:b9:97:
1f:4e:f3:8b:8c:b6:45:d8:ba:39:b5:f2:e5:30:15:
fa:16:c0:73:e0:2d:90:cb:bb:3f:e4:95:f4:48:0c:
95:7c:ac:f8:0c:a3:05:7f:25:23:db:95:59:85:fa:
ac:66:a4:e5:9c:22:6f:0d:94:2d:41:66:d0:15:ae:
8d:62:d9:cf:b4:f3:74:b9:f0:e3:d2:2d:64:f1:29:
91:7a:55:65:9e:24:9a:25:9e:8b:9d:06:3d:cd:78:
97:2d:32:a7:b8:96:24:66:ba:9e:a8:3f:f4:d4:92:
fa:7a:5f:a7:ed:4f:a5:4b:fd:b4:1f:0b:b2:95:da:
5c:c3:81:a6:03:f0:3f:1d:c5:28:d2:fb:93:df:2f:
12:e9:ff:8d:59:e9:b7:93:e2:4c:26:1b:9b:e9:9a:
58:a8:02:6b:8a:97:25:98:15:a8:40:4d:67:c0:d2:
9e:0d:7b:11:1d:68:08:24:d5:75:a4:5b:0e:e2:57:
c0:e2:05:16:e4:ab:35:7d:02:62:60:bd:43:2b:1b:
b6:da:1d:67:58:5d:af:df:35:e7:16:ac:e3:09:20:
ba:b9:76:b4:a1:3d:7d:87:cb:2e:9a:f9:da:7f:80:
1a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F7:9E:31:8D:A9:B7:7E:CD:59:56:E3:C4:31:74:BC:DD:08:25:C0
X509v3 Authority Key Identifier:
keyid:C6:25:AF:B9:CE:33:5E:ED:3E:53:12:8B:4A:9E:B2:5F:C4:95:D6:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:49:91:8c:c7:b5:19:78:45:af:f4:32:c0:e4:00:75:20:fc:
b5:56:07:51:b3:e0:63:70:bb:3c:17:01:2e:3b:79:ea:68:71:
f9:c9:bb:c4:6e:ee:cc:40:f2:94:b4:15:0b:fa:fc:58:4b:14:
4b:d9:e6:7a:99:85:9c:6c:d9:d3:21:ef:fb:89:b2:1e:19:ae:
eb:78:59:c8:24:b0:ed:33:5c:aa:86:fd:62:eb:2f:fd:dd:fa:
18:a3:c3:70:0d:23:4c:39:3a:07:3a:99:d5:01:b3:ce:67:5f:
f4:ec:13:a5:b5:2a:d2:9f:12:76:7c:99:c7:9e:82:17:36:e5:
27:b1:3f:0a:32:0d:f1:0a:96:16:35:9c:b4:75:2f:1d:87:60:
4b:da:c7:8f:85:e0:c2:e6:04:9a:f2:93:49:9e:17:70:58:fe:
00:b1:dd:c5:a0:83:a7:22:4d:54:35:a5:14:90:3c:2c:08:80:
11:a4:c4:11:cd:1b:00:21:0c:71:e7:03:8f:96:ed:26:42:45:
a7:69:5f:8a:90:e4:a5:dd:44:c2:4f:c6:90:7e:ef:99:85:05:
81:83:3c:88:55:7d:69:94:c7:91:26:0d:f7:fc:00:7a:cf:cf:
e7:31:84:7f:35:79:3b:1f:6c:00:b4:c0:a2:d3:c1:f3:d3:e9:
0a:f3:a9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:18:02 2026 by rpki-client