Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
File: xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft (raw, json)
Hash identifier: XZXuhjugrOCIY7URXnml/Tjdxt9VAVnyfyR3Ry0Zy+k=
Subject key identifier: 10:DB:76:F8:3E:B8:01:A7:0A:94:1E:CC:01:62:DB:60:0D:57:F2:61
Authority key identifier: C7:2E:71:63:53:EC:73:3A:B4:B5:08:53:08:B3:86:D8:9A:74:F1:47
Certificate issuer: /CN=c72e716353ec733ab4b5085308b386d89a74f147
Certificate serial: 019CE2909331B0C3E6BFD36B344AECA381F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
Manifest number: 10AF
Signing time: Thu 12 Mar 2026 15:00:51 +0000
Manifest this update: Thu 12 Mar 2026 15:00:51 +0000
Manifest next update: Fri 13 Mar 2026 15:00:51 +0000
Files and hashes: 1: xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl (hash: SjeW4bYZ6RGVvPeOsvoYTpPact2LmnVqQ1YXYVAdcz4=)
2: zWTdP30QPHHdohheUhhfVW3hF4c.roa (hash: /i9LH6nCZuFhrfLjUwLanr2mJf1UJXJyn992vVslFf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:90:93:31:b0:c3:e6:bf:d3:6b:34:4a:ec:a3:81:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c72e716353ec733ab4b5085308b386d89a74f147
Validity
Not Before: Mar 12 15:00:51 2026 GMT
Not After : Mar 13 15:00:51 2026 GMT
Subject: CN=10db76f83eb801a70a941ecc0162db600d57f261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9b:a3:10:18:98:ee:7f:19:f9:a1:e7:8d:4d:
d6:70:54:57:19:eb:cd:ed:bd:ae:41:f2:46:bc:44:
d0:1d:aa:dc:0c:d9:85:08:d1:67:eb:ff:ff:a2:f6:
41:ba:35:27:2f:8b:c6:91:68:4e:5d:9e:29:5d:a7:
6b:a2:3e:e4:53:71:d6:fa:af:81:76:ef:a7:9a:50:
a2:0e:c5:45:32:9e:84:c1:e0:9c:83:64:5c:16:9a:
16:01:43:0f:e5:9b:fa:6b:ac:a9:ab:c3:fc:ed:cf:
36:61:96:68:e5:ed:dd:fc:2a:0b:97:10:68:6a:80:
db:1d:61:fb:bf:a0:c7:76:1f:43:c1:66:37:1b:cc:
e5:c8:84:7f:c0:15:9e:f4:ae:89:0e:6f:2a:6c:22:
76:04:28:15:cc:c7:89:55:6d:e1:74:c5:7f:94:b1:
a1:62:26:ad:4d:e3:70:4c:ab:cf:ae:c3:6d:83:a3:
15:43:d9:1d:85:96:b5:fc:ee:60:3f:4e:aa:9e:7c:
dc:f6:c7:51:7e:2e:0d:af:c4:16:a9:25:6d:6b:c6:
2a:20:52:6b:b0:c6:6d:5f:c2:e3:b7:f2:70:25:28:
d2:38:65:8b:28:7a:94:b4:0f:61:f5:87:4b:7b:42:
e1:5c:17:7b:3b:0e:9b:71:db:85:35:78:28:45:f2:
f0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DB:76:F8:3E:B8:01:A7:0A:94:1E:CC:01:62:DB:60:0D:57:F2:61
X509v3 Authority Key Identifier:
keyid:C7:2E:71:63:53:EC:73:3A:B4:B5:08:53:08:B3:86:D8:9A:74:F1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:b5:a8:a8:af:ba:46:0a:03:5e:19:0f:bb:70:05:57:60:90:
c4:a5:c9:30:69:09:de:24:cf:88:ba:f0:c8:93:c8:06:f4:3d:
57:71:d3:d2:7f:ae:e8:54:6d:1e:7b:9a:4e:4b:ec:33:ae:c1:
2a:e6:5e:13:c1:1f:f4:ca:04:7e:90:2b:2f:61:dc:eb:d9:e0:
08:ce:2c:3e:a2:57:fe:a5:c6:1b:47:05:e7:03:c4:39:a1:c2:
9a:b3:bd:1f:38:93:ef:93:ee:10:56:bb:47:96:8b:89:20:0f:
49:73:2d:17:dd:49:36:ee:39:ef:02:b6:f1:1a:c9:8d:e3:24:
e6:80:9a:74:d9:84:45:a6:28:af:68:82:b6:f1:cb:4f:49:af:
7c:32:42:4f:21:ff:ed:e1:71:fa:3f:7d:b4:f8:b4:70:7a:2f:
d6:77:a4:12:19:28:d2:d3:72:ae:6c:1e:4b:f9:af:78:aa:db:
16:77:90:ea:1f:ea:58:6d:46:47:52:46:63:1d:0a:e6:ec:f5:
be:c0:90:73:56:89:a9:5a:75:7d:87:d1:e8:f3:cf:87:cb:aa:
98:0a:56:7b:46:63:a7:b8:08:e6:50:0b:4a:a8:37:f6:71:85:
ae:94:7e:7f:20:03:e8:5f:1c:91:fc:b3:7d:c5:36:25:b4:f9:
4d:47:ed:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 00:14:38 2026 by rpki-client