Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
File: xhaXFtCuZAaHAxQKo3MON4j91MY.mft (raw, json)
Hash identifier: gqoXlOzRFiOA8DJf10ceSja0IkB7k8DxhlpgoRgLH04=
Subject key identifier: 94:23:9E:E4:ED:4B:BD:12:4F:C1:81:8B:CF:1E:50:59:EE:C1:2D:FB
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 019D37C105CC51A73ED63C89196C132838CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
Manifest number: 15FC
Signing time: Sun 29 Mar 2026 04:01:29 +0000
Manifest this update: Sun 29 Mar 2026 04:01:29 +0000
Manifest next update: Mon 30 Mar 2026 04:01:29 +0000
Files and hashes: 1: FWP58ajjb0tkpM-YIjMEubI9eHI.roa (hash: 8d5KqUUs2iCVjFLb2FSp+rBEK2zv9joKO9sjvkw4TqU=)
2: xhaXFtCuZAaHAxQKo3MON4j91MY.crl (hash: OK+z1L955QEJUf/g4UILLGITESot/tUMm4qhZjqlXqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:05:cc:51:a7:3e:d6:3c:89:19:6c:13:28:38:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: Mar 29 04:01:29 2026 GMT
Not After : Mar 30 04:01:29 2026 GMT
Subject: CN=94239ee4ed4bbd124fc1818bcf1e5059eec12dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9b:49:99:f0:e9:dc:25:1e:bb:9c:1f:d8:2a:
ea:4c:f8:11:67:a4:cc:9d:4b:64:9f:31:d8:f6:f6:
f9:72:58:4f:1d:f9:7c:ec:98:db:71:71:05:11:56:
42:1a:9b:3f:7b:b5:15:bf:25:e9:59:a3:3f:c1:b0:
5e:6a:13:0e:67:6e:67:40:c4:4b:9e:22:dd:1c:16:
b9:4d:ce:92:7e:00:0f:94:7a:5e:e4:d2:3f:cc:5e:
2c:66:ec:9b:71:43:b5:04:57:4d:98:1b:d4:6f:9e:
db:43:c1:7f:de:e9:b3:d8:89:07:5a:d8:81:7a:01:
22:c0:d0:a2:64:9c:63:b4:1a:28:20:f9:47:7f:89:
34:c7:6d:6a:51:3b:28:4d:12:4a:70:a7:34:e0:06:
8e:06:d8:6d:98:af:ff:18:29:7c:f6:c2:fc:02:a0:
93:88:8c:2f:89:12:83:f1:00:a4:15:a5:dd:b6:19:
ba:b5:5f:bd:75:cf:91:2a:4d:81:f0:33:e2:09:f1:
45:6c:0e:ba:da:b8:a9:09:0d:2c:2f:b4:68:1e:0c:
ec:63:d7:c3:fe:06:22:36:45:18:01:09:47:0a:00:
53:b9:85:61:69:00:c2:c5:9e:03:43:98:52:8f:fa:
6d:ee:f0:f0:8e:77:15:38:96:b4:f8:b6:3b:ad:20:
8d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:23:9E:E4:ED:4B:BD:12:4F:C1:81:8B:CF:1E:50:59:EE:C1:2D:FB
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:44:33:3a:e8:01:56:02:55:65:5a:80:10:ad:6b:2f:a6:70:
0f:ce:d3:c3:5e:b0:52:de:1b:f7:fb:f9:67:a0:fc:d9:a3:b0:
cf:9c:e0:4e:cb:a2:6c:7b:54:11:68:87:a7:4d:69:e0:1e:4b:
24:88:d3:d7:6a:6e:67:f0:18:f7:a3:80:7a:04:83:d8:20:4f:
00:34:6c:4b:f5:b5:1e:53:40:3f:22:57:76:9c:fd:f6:e8:46:
4b:37:6e:91:a2:f9:5a:71:1f:75:2c:20:13:ce:f4:af:cf:56:
5b:ad:40:09:fd:6d:0e:0f:76:f0:de:00:a9:39:17:88:66:68:
7d:c7:56:83:e6:a8:71:81:36:f9:11:8b:e1:e5:87:69:a3:7a:
46:84:3f:5b:51:11:a4:b6:da:3a:f3:7c:b4:1e:56:49:93:c3:
74:9d:08:2d:6f:6c:09:69:e9:1c:6d:38:73:ec:8a:bc:b4:7e:
33:aa:a4:0c:c4:50:39:ce:ef:06:53:40:2f:2f:9f:ed:d6:09:
8a:5b:1a:80:34:59:25:fe:c3:c8:bc:bf:92:38:92:d5:7d:11:
c7:90:97:d5:a6:9d:f1:1a:2c:3a:8c:b4:8a:32:6c:b3:3d:5a:
8a:8e:7b:79:e6:1d:ee:2e:77:37:ef:fd:d1:3e:94:62:f9:3f:
2e:8b:9f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:38 2026 by rpki-client