Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
File: xBCR00cDwD74-NKcu9zZjD5wb4Q.mft (raw, json)
Hash identifier: zeAG3ixfxcLLfWaWdjv4EetZe2Rt/6Fx9DgAsqwstJE=
Subject key identifier: 6C:00:87:F3:9F:01:04:BB:3C:1F:2C:C8:4D:06:33:6B:DC:67:F2:9F
Authority key identifier: C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84
Certificate issuer: /CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
Certificate serial: 019D38668BE84D70F8FF8B117509DC7C6112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
Manifest number: 0DF2
Signing time: Sun 29 Mar 2026 07:02:17 +0000
Manifest this update: Sun 29 Mar 2026 07:02:17 +0000
Manifest next update: Mon 30 Mar 2026 07:02:17 +0000
Files and hashes: 1: wj36KuC4KkbAWGdbhxPcToGipcw.roa (hash: /SiPmXieUUyR1/NuMTzivGKUx8ZGueEIDbGfwzhdLBk=)
2: xBCR00cDwD74-NKcu9zZjD5wb4Q.crl (hash: JDCN5NVWPqWXpAPNBA7dIp1Aq4S+8FpeqFnUfRSjIU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:8b:e8:4d:70:f8:ff:8b:11:75:09:dc:7c:61:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
Validity
Not Before: Mar 29 07:02:17 2026 GMT
Not After : Mar 30 07:02:17 2026 GMT
Subject: CN=6c0087f39f0104bb3c1f2cc84d06336bdc67f29f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f6:d6:ed:d5:c9:5d:10:bb:51:d6:10:1e:c5:
7a:a3:34:03:a6:c6:bf:44:41:45:25:e7:0c:c7:0a:
b9:45:37:ef:51:ef:18:d9:e0:be:86:35:5a:1d:86:
84:5f:21:b2:34:e2:1f:6a:2d:5d:21:fc:00:41:64:
eb:8a:10:85:d6:77:10:93:03:11:76:1a:45:bb:8b:
bc:4c:19:32:b0:60:53:50:a8:be:0c:4d:d4:e4:b0:
ac:15:c3:ed:1a:ef:be:79:cf:17:58:4b:d7:a0:99:
84:e1:a8:3d:b5:37:0b:fc:f2:8b:12:98:ab:af:67:
07:f7:76:23:3b:13:43:dc:cc:73:3a:42:b5:27:e8:
c5:eb:d5:ee:db:b3:38:e9:af:b5:79:28:34:60:80:
e8:2f:90:8f:71:c2:c7:c8:f8:f0:d0:74:0a:5a:7f:
b4:3c:b0:df:2f:0a:3d:39:64:19:75:a7:d7:a6:26:
ff:91:01:f4:fa:ae:95:3f:c7:79:ef:9c:1c:e5:2c:
3b:6b:98:ab:79:bb:9f:56:1a:05:13:7e:72:41:2c:
c6:70:fc:91:a9:f3:85:24:28:30:51:35:35:01:fe:
9f:68:36:59:90:05:50:15:33:ee:f2:7b:fd:da:7e:
50:5f:22:3e:28:38:b4:80:b0:bf:eb:06:0a:39:d7:
74:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:00:87:F3:9F:01:04:BB:3C:1F:2C:C8:4D:06:33:6B:DC:67:F2:9F
X509v3 Authority Key Identifier:
keyid:C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:3b:91:7d:2b:83:ef:ad:e1:f7:b9:72:81:bf:df:de:88:4b:
11:27:e1:c2:86:e7:7c:66:cd:39:88:b7:1c:ef:f3:c9:61:dc:
83:b4:41:5e:55:b2:8d:6b:af:5e:c4:d3:c7:99:a9:a0:8c:de:
7b:a4:17:e2:30:9a:4e:02:be:b3:6c:66:f7:d4:0d:66:ca:63:
cc:6d:73:19:34:a4:af:d5:2d:bb:f6:d9:c6:3f:3f:b4:5d:3a:
35:24:55:0a:1d:5b:3e:09:d8:3a:c8:57:60:99:3c:b7:f9:c1:
a5:96:f6:22:3b:5a:05:ca:6c:ac:b1:79:43:30:52:17:1a:45:
f1:a6:44:2b:af:ba:7f:9b:db:89:77:9d:76:f9:89:65:11:60:
b9:af:98:93:f2:d4:38:75:dd:4b:8a:37:8d:07:0e:d9:6b:78:
97:7c:21:7b:97:40:c4:54:40:d6:ce:0d:79:d1:58:74:0f:54:
16:bf:8e:a4:0e:dc:05:12:36:22:d7:02:f8:83:e6:32:7f:39:
e8:24:87:0b:1f:2e:4d:16:be:89:49:34:06:3d:98:2f:82:75:
4d:17:c1:52:a5:d5:15:8d:4e:72:ab:f1:5d:e3:81:6c:2a:47:
fa:a0:e9:cf:e1:53:c4:79:62:60:29:33:67:65:1f:3a:9e:93:
00:7b:f4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:59 2026 by rpki-client