Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft
File: x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft (raw, json)
Hash identifier: yFBl17Amkhoug/MkLHMejJqW5lP17IqJrtmfsgrSbo0=
Subject key identifier: 59:F8:ED:3F:C6:BF:64:86:90:AA:62:56:F5:6E:0C:76:BA:34:E3:E1
Authority key identifier: C7:65:D6:3C:91:63:F2:CC:5B:56:14:C3:C7:F3:11:6E:7C:72:F9:F5
Certificate issuer: /CN=c765d63c9163f2cc5b5614c3c7f3116e7c72f9f5
Certificate serial: 019D3940D360C00B1CA6570E5A71C99D3A57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 11:00:42 +0000
Manifest this update: Sun 29 Mar 2026 11:00:42 +0000
Manifest next update: Mon 30 Mar 2026 11:00:42 +0000
Files and hashes: 1: bPyQY6SXWWwE0kxuCGK65w1wEbQ.roa (hash: HBq1ZxOHL2v4vjCZS/Tly78qQg5nD5KUf65a7gSUtF4=)
2: x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl (hash: zR5T45ZmecVgRXaGzODxb/yVUSoLJ1s+vb+32OTsUf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:d3:60:c0:0b:1c:a6:57:0e:5a:71:c9:9d:3a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c765d63c9163f2cc5b5614c3c7f3116e7c72f9f5
Validity
Not Before: Mar 29 11:00:42 2026 GMT
Not After : Mar 30 11:00:42 2026 GMT
Subject: CN=59f8ed3fc6bf648690aa6256f56e0c76ba34e3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7e:d8:b9:85:02:6d:29:ca:34:e3:dc:40:83:
ff:6e:0b:fb:db:11:65:cb:0d:7c:f7:58:07:71:f2:
8e:cb:a3:5f:a7:a7:a0:74:0a:76:dc:13:77:43:d8:
9a:e1:50:48:2b:9d:9c:5c:f4:fc:da:80:19:88:28:
92:6c:e3:ff:2a:3e:2a:87:c1:5c:4b:ec:21:40:e4:
48:70:7b:5d:c3:6b:9a:d9:94:70:69:9b:67:77:d0:
d4:b3:bf:7e:58:f9:b2:96:bf:a2:1a:8e:05:70:45:
a8:c5:d2:8a:36:2f:99:93:3e:e8:e7:08:0a:53:5e:
00:5b:c7:20:c7:48:0c:31:3c:0c:5b:ea:b5:4f:19:
75:7f:ba:6e:4d:ed:53:b8:d3:10:74:19:cd:dc:02:
52:c4:32:db:58:f0:c3:5d:99:95:08:cb:19:64:52:
f4:c6:f8:8a:37:64:6b:c4:12:0f:d7:cd:8b:5a:93:
28:a2:07:8d:84:49:7a:10:dd:e9:d9:51:78:99:89:
5f:61:e2:ec:d9:c2:a3:fa:4f:49:fc:78:72:ed:48:
cc:ed:7b:e5:1d:19:27:a4:c0:2d:fa:6d:c1:36:ed:
e4:57:cb:cb:c7:cb:f8:16:e9:52:53:1a:be:e4:9c:
09:88:98:f6:02:11:89:d7:e2:41:5d:93:ca:f5:9c:
d6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F8:ED:3F:C6:BF:64:86:90:AA:62:56:F5:6E:0C:76:BA:34:E3:E1
X509v3 Authority Key Identifier:
keyid:C7:65:D6:3C:91:63:F2:CC:5B:56:14:C3:C7:F3:11:6E:7C:72:F9:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:a3:97:bb:d0:83:de:99:3d:f5:bb:8b:e0:33:eb:d0:9f:8a:
3e:8d:30:5c:3b:3b:a3:14:fa:30:e4:97:77:37:8f:2e:55:31:
82:b4:2d:9e:5f:e6:79:b9:64:17:fa:db:3c:9e:3b:4e:1c:3c:
82:3c:92:39:52:03:6d:b2:58:b2:4b:21:84:46:e1:9f:b6:51:
ea:23:25:2e:8a:dd:19:58:9c:ea:77:85:07:4b:59:df:4e:9d:
fe:3a:45:63:f7:80:8e:4a:7e:ed:c2:7f:c0:db:16:c8:4a:11:
86:fb:c2:89:44:ab:67:00:b7:3d:21:cf:98:3b:be:06:ae:8b:
d8:16:94:c5:4c:33:ca:7e:22:55:c6:e5:c0:c1:2f:f6:eb:f4:
1a:83:19:1f:3b:4c:fc:5b:76:59:50:32:d8:ee:bf:d5:e3:90:
0b:cb:b7:21:68:03:67:ac:26:7c:1a:6b:4d:6a:50:72:b2:49:
ea:c0:ee:5e:f8:d2:44:40:2b:d5:06:61:12:1a:83:2f:9b:e3:
3f:2f:7a:fc:1f:29:f0:cf:df:cc:f3:b1:9d:dd:99:5e:c8:79:
ad:d9:92:ee:9e:97:a6:37:45:7f:eb:7a:1b:33:56:30:2d:5e:
30:47:55:2b:02:92:6e:7b:97:eb:33:6c:e9:60:07:4d:bd:e3:
d3:aa:57:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:55:07 2026 by rpki-client