Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
File: xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft (raw, json)
Hash identifier: +Qds8ozWMnk4YTzf8T1QlSJzyGG0wNaRPjDIg0twhYc=
Subject key identifier: 87:A2:15:1A:6F:45:AC:D2:E8:2E:A3:48:8A:19:36:7E:8C:E0:33:C4
Authority key identifier: C7:1E:F0:AD:43:C7:B8:E2:6C:17:5F:DC:1F:16:96:D0:08:1D:C4:DA
Certificate issuer: /CN=c71ef0ad43c7b8e26c175fdc1f1696d0081dc4da
Certificate serial: 019D39E57E78D488E0FDBBF199738B0E5FE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 14:00:34 +0000
Manifest this update: Sun 29 Mar 2026 14:00:34 +0000
Manifest next update: Mon 30 Mar 2026 14:00:34 +0000
Files and hashes: 1: 3ab_o0Nl-S6Ei86C2hafif65fQo.roa (hash: dJDFaPL1IxpS3bFn7gG9LpNkmVG6kmHGyMD/BQus07s=)
2: xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl (hash: RlyTfbIUIh8hnhoGb22VoBGxpKa8KbchejVoPZFbchU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:7e:78:d4:88:e0:fd:bb:f1:99:73:8b:0e:5f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c71ef0ad43c7b8e26c175fdc1f1696d0081dc4da
Validity
Not Before: Mar 29 14:00:34 2026 GMT
Not After : Mar 30 14:00:34 2026 GMT
Subject: CN=87a2151a6f45acd2e82ea3488a19367e8ce033c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c8:9f:27:de:6f:52:86:04:06:27:25:b2:58:
c8:bc:ec:eb:a6:07:6c:95:3a:69:b7:f7:e2:c7:d9:
8f:da:2b:83:66:fe:74:9b:78:2e:4a:97:be:79:0f:
27:48:a9:0b:f1:98:78:4e:39:1f:3b:e4:61:89:d5:
3a:0b:2c:06:71:78:9d:64:87:d2:f3:6d:5d:ee:00:
fb:b8:9c:ec:e0:93:27:f1:63:5c:05:38:ed:62:81:
fb:45:d8:bf:3c:c3:2c:aa:29:c7:09:16:fc:4a:f7:
89:fb:58:1f:c7:0f:ef:0b:24:42:af:b4:20:ed:b2:
b9:52:52:ab:4c:6c:5d:2f:dd:e4:2b:63:a0:7e:aa:
83:dc:d8:f9:bf:c4:61:59:4e:64:89:83:0d:61:3d:
d6:08:4c:90:95:b0:e8:7a:30:9b:d4:76:b8:e2:23:
11:a9:87:90:ec:35:ad:64:25:8b:08:8a:82:03:4e:
f4:3f:96:f7:cb:db:cf:b7:17:93:91:91:da:d2:10:
2c:70:88:3f:1a:4a:62:a8:06:f0:f1:5c:7e:ee:bf:
ac:48:16:3e:06:8b:be:79:bd:3d:ec:d7:48:e2:04:
2f:82:95:6e:90:1c:0b:41:2d:63:d2:61:56:d5:a0:
6e:2e:44:74:80:fa:aa:1c:54:b3:d9:e0:e9:30:31:
85:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A2:15:1A:6F:45:AC:D2:E8:2E:A3:48:8A:19:36:7E:8C:E0:33:C4
X509v3 Authority Key Identifier:
keyid:C7:1E:F0:AD:43:C7:B8:E2:6C:17:5F:DC:1F:16:96:D0:08:1D:C4:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f2:92:4a:7b:ae:ea:e4:10:db:e4:80:4d:eb:8a:4d:0b:d6:
aa:6e:e6:aa:bb:d8:4c:4c:41:9e:a5:48:b8:3d:ed:7b:4f:fc:
54:46:c8:9d:8e:eb:7e:88:82:22:41:b4:ce:17:a5:7f:4d:25:
be:20:2a:d1:aa:bb:5c:51:df:54:8c:39:16:26:5f:5f:bf:d9:
9a:98:41:6b:1f:60:ad:cb:cf:f2:eb:8d:7a:94:96:1b:e9:40:
f7:98:63:c5:7b:70:98:b4:13:eb:8f:d6:fa:94:07:94:8f:27:
59:10:bd:9f:22:c9:77:06:b4:a8:b1:0c:15:a5:aa:0e:26:64:
fa:87:a7:6f:08:8f:b4:51:af:91:5c:06:e8:ff:60:9c:93:72:
13:0b:bc:b5:f0:47:77:30:d7:6e:44:67:97:d8:e2:2b:90:42:
85:08:f6:76:f0:ac:10:9d:e5:0e:8e:d6:93:95:c5:65:1e:36:
be:a9:c9:38:31:97:cc:75:85:ce:82:6b:8d:09:d3:c9:8d:34:
b8:f3:2e:b9:22:dd:3f:fe:79:46:12:f5:e3:a5:88:1d:06:7b:
48:03:12:08:fb:ca:ce:78:ce:fb:ca:eb:bd:73:e9:47:0d:1b:
ff:4a:7e:9d:b0:f6:0e:45:0e:59:dc:da:52:66:8b:45:a0:2b:
72:d9:c9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:20:56 2026 by rpki-client