Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
File: xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft (raw, json)
Hash identifier: BNalRcEB+v7MY+l55kEZxKlZAZcBqKWFbNrp4nJeo7Q=
Subject key identifier: 99:C7:D6:0D:DB:DE:D2:27:9F:4D:C2:73:99:5B:03:2E:7A:00:C0:6A
Authority key identifier: C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
Certificate issuer: /CN=c576ba0c098dc472186223c91e7def5216e239f1
Certificate serial: 019D38D2957E1F9CF9DFC4B6607663D9BE92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
Manifest number: 0785
Signing time: Sun 29 Mar 2026 09:00:18 +0000
Manifest this update: Sun 29 Mar 2026 09:00:18 +0000
Manifest next update: Mon 30 Mar 2026 09:00:18 +0000
Files and hashes: 1: D93aVb7wrIXUaG1-CC-3JUagYOE.roa (hash: /8ReYoccQ/vVAZ/EZIZ9ttYSoWEPANiLCShHLXPhYb0=)
2: xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl (hash: YsaVjD0x57rH3ZPrMmQcs2k+iIObqA4LCb+ubX/6APg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:95:7e:1f:9c:f9:df:c4:b6:60:76:63:d9:be:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c576ba0c098dc472186223c91e7def5216e239f1
Validity
Not Before: Mar 29 09:00:18 2026 GMT
Not After : Mar 30 09:00:18 2026 GMT
Subject: CN=99c7d60ddbded2279f4dc273995b032e7a00c06a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e8:f2:c2:09:f4:78:d9:1d:f7:78:63:74:df:
46:e0:6d:bc:dc:4a:b3:e5:bf:f9:e6:bb:a2:c0:2f:
19:44:77:f8:c0:cf:26:31:9f:4d:02:35:fa:87:d6:
18:0c:b7:95:30:5a:e0:91:a7:8d:c8:38:ad:54:e6:
c9:29:97:15:18:00:14:72:f5:66:14:7f:78:aa:ea:
4e:50:aa:09:5f:b3:60:df:fb:37:6e:24:cd:80:15:
73:1a:34:6f:77:c9:b5:27:f9:48:2c:36:f8:cf:66:
8c:5c:28:a5:75:df:d9:b4:49:0d:40:5f:b2:01:ac:
cd:35:1e:42:55:1d:12:5a:eb:ba:b7:f0:08:b5:b2:
3b:f5:5f:d9:4f:0a:de:26:18:cc:ee:1d:3d:c2:35:
7d:57:c3:0f:d1:29:30:c9:f9:15:ef:53:99:56:3f:
96:ff:88:b0:28:13:31:1a:8b:f6:5e:13:26:5f:e3:
cc:e3:86:4e:6b:ec:4b:4d:ed:68:60:2b:f6:de:3f:
b3:a7:e5:db:0d:6e:0e:06:9f:fd:97:7c:80:62:a5:
46:2a:3d:56:d0:52:f9:e2:15:80:39:34:d1:36:06:
5f:3b:18:13:3c:00:2b:50:e8:d2:dc:af:ff:2b:b4:
a1:5a:0f:26:aa:9e:9e:1c:f9:67:69:ca:e5:67:e7:
86:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C7:D6:0D:DB:DE:D2:27:9F:4D:C2:73:99:5B:03:2E:7A:00:C0:6A
X509v3 Authority Key Identifier:
keyid:C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:d6:f9:86:bc:e0:f6:45:57:f5:dc:43:fb:f2:e6:1e:a9:2b:
03:42:1d:19:77:f5:31:a5:20:10:b2:25:75:0e:55:02:19:c1:
54:46:46:bf:ae:e0:a7:4e:84:be:c2:07:68:2e:07:7f:77:55:
37:6a:64:e9:d0:f7:58:35:f5:80:72:31:56:ed:e0:10:cf:7e:
c3:d5:c1:80:55:a9:ed:8c:c5:fa:33:cb:9c:6e:ae:9c:29:13:
d3:13:c5:d4:47:71:95:6d:d2:07:db:93:64:f7:b1:e4:31:97:
bc:af:18:13:2c:23:e3:ed:c9:96:77:27:1a:a4:bd:06:29:cf:
63:b1:8e:5a:9d:38:0c:d2:81:85:13:0e:7c:b8:0f:e1:9d:f8:
3d:03:28:61:94:d1:fd:b0:b6:a8:a8:53:7b:48:3c:6e:fd:d2:
c2:40:f9:cd:bb:c0:22:72:69:5c:d7:4b:47:3f:cf:09:2f:8d:
5b:3f:5d:69:8f:05:d7:41:3b:51:ef:62:c8:65:e1:0b:0e:66:
fb:7e:4f:10:fe:aa:9d:1d:32:5c:80:3c:e9:24:ed:5a:b0:59:
1f:cd:9d:ab:95:fa:76:10:2e:10:08:d2:76:8f:5e:78:7d:9c:
a0:54:4e:88:18:89:06:2b:64:82:66:f4:9e:85:46:da:82:4e:
94:36:92:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:09 2026 by rpki-client