Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
File: xWwoao20vSFr9kx1szhRsARaF18.mft (raw, json)
Hash identifier: KpYy6ODxkONkxLz7j4Eq8E3F66ehZGeWA7WD922qWnA=
Subject key identifier: 85:ED:F5:15:91:7C:02:F5:B1:3D:18:AD:4E:53:70:12:07:29:58:BD
Authority key identifier: C5:6C:28:6A:8D:B4:BD:21:6B:F6:4C:75:B3:38:51:B0:04:5A:17:5F
Certificate issuer: /CN=c56c286a8db4bd216bf64c75b33851b0045a175f
Certificate serial: 019D38D2C7240D28F4098CED7C3D0D54370D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
Manifest number: 0CF3
Signing time: Sun 29 Mar 2026 09:00:30 +0000
Manifest this update: Sun 29 Mar 2026 09:00:30 +0000
Manifest next update: Mon 30 Mar 2026 09:00:30 +0000
Files and hashes: 1: fzBvwE7sX01y4kB6SSgdE7n9ysI.roa (hash: qCcHE+EY0A9msSwDHW5P3s9hKxDDBKeiCJ6eljce7Pg=)
2: xWwoao20vSFr9kx1szhRsARaF18.crl (hash: t+oUF1FKNHSJlFy4cdNcS4J7hvf1fq9e9Uc0ejTbX34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:c7:24:0d:28:f4:09:8c:ed:7c:3d:0d:54:37:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c56c286a8db4bd216bf64c75b33851b0045a175f
Validity
Not Before: Mar 29 09:00:30 2026 GMT
Not After : Mar 30 09:00:30 2026 GMT
Subject: CN=85edf515917c02f5b13d18ad4e537012072958bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c6:5f:05:6d:0e:db:5b:54:f9:0a:89:5e:38:
74:78:30:48:33:6c:00:93:1e:db:59:e0:c5:1b:0c:
cf:92:72:3e:ec:9f:f6:83:9f:5e:f7:66:1c:04:15:
57:ce:26:38:a1:34:3c:83:44:e9:04:04:85:9d:67:
04:d1:29:79:23:56:24:7c:ee:f3:60:05:38:31:52:
bf:7b:33:16:32:e8:9f:76:30:bd:b8:bb:3a:b5:29:
04:37:7f:6e:cd:11:10:02:75:c7:e5:1e:73:d4:f7:
e3:0b:7f:3b:dc:6b:2b:2a:69:4f:7e:8f:ee:8a:d8:
7a:a8:c0:e1:74:1d:e3:7d:a2:b6:72:bd:da:7c:fa:
1f:4d:de:67:dd:90:2b:e9:af:09:e9:eb:01:fd:ff:
bd:9e:06:f4:55:f3:9d:d1:84:16:12:db:0c:47:44:
97:d6:b2:de:fa:8d:35:b7:90:28:78:f1:c7:a7:38:
d6:91:dc:56:bb:9c:8f:87:71:fb:0e:93:ce:00:c3:
2d:2c:72:f8:23:5e:1c:8e:28:0e:7c:ea:e6:e7:7c:
97:a1:66:8a:17:0d:18:5f:77:3b:d6:fa:17:1e:c4:
a4:6d:94:8b:b9:64:40:0c:f8:f1:8b:71:2b:cf:86:
24:f6:80:90:b0:69:bf:09:17:52:26:33:39:6f:00:
f7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:ED:F5:15:91:7C:02:F5:B1:3D:18:AD:4E:53:70:12:07:29:58:BD
X509v3 Authority Key Identifier:
keyid:C5:6C:28:6A:8D:B4:BD:21:6B:F6:4C:75:B3:38:51:B0:04:5A:17:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:11:83:1c:57:79:7f:51:b3:dd:f6:3a:21:f4:34:ef:a5:c0:
46:24:34:80:95:9c:64:97:8a:60:8a:97:99:0f:a8:0f:ea:54:
d7:70:bf:2c:4d:3b:43:ee:98:9b:f1:52:3c:b2:a7:87:4f:e9:
47:fd:07:55:d6:e1:9a:9f:d3:ee:d6:0d:3d:82:37:11:2a:74:
0b:6f:36:5f:f4:cf:f9:d9:b0:61:83:f9:d2:6b:24:a7:d2:7f:
fa:eb:9b:b7:6e:60:0a:bd:c8:8c:c6:35:50:18:2a:7f:d4:dd:
80:29:28:9a:0f:9d:5f:62:3c:e8:0f:93:3d:a0:9f:f2:05:e4:
33:db:7c:22:04:6c:15:a2:e3:c3:25:ed:74:1c:28:7e:93:ba:
56:fe:84:25:56:fa:0d:2c:97:31:de:f9:c5:c7:d2:ef:30:fb:
c8:47:7d:f7:7d:8f:58:bb:4e:34:81:ac:dc:e2:28:c8:11:99:
58:ad:6f:84:fe:7e:67:fd:ce:38:2d:73:8a:27:47:ac:29:7f:
84:c5:f8:81:2c:19:9b:56:4b:12:c5:c9:f9:35:e4:db:c0:87:
25:40:7d:2b:99:9e:3d:ee:4e:59:9d:81:05:91:e4:5f:03:db:
22:1b:d3:34:e5:3e:c3:ef:43:da:06:1f:f8:61:c4:fa:4e:67:
e8:1b:70:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:26 2026 by rpki-client