Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
File: X63Q6UW8YRAcabzmSj1yi6G7hmE.mft (raw, json)
Hash identifier: qP6ktcsNgdUDppqroArfLB7lONhmEQtlXV2tvIhzKn8=
Subject key identifier: 4B:45:F8:E2:73:25:E9:F5:BD:AF:14:15:18:CF:55:F2:DC:02:C8:8D
Authority key identifier: 5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
Certificate issuer: /CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
Certificate serial: 019CE6A42CBC6D1B7E1605F916D86E111604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
Manifest number: 1101
Signing time: Fri 13 Mar 2026 10:00:44 +0000
Manifest this update: Fri 13 Mar 2026 10:00:44 +0000
Manifest next update: Sat 14 Mar 2026 10:00:44 +0000
Files and hashes: 1: 8saY52FM3OItyl4VOSm_edBIkos.roa (hash: BD5qCuL+dtuTG+pcsvXNBMfwvdqjtVm3dC9TZz4R5tA=)
2: AgsPlaew9BxC8H6svqcKUEs4Qhk.roa (hash: 4UR8Vh6eTw1Tv7xe4kRQAuAMN978t94veu9L+yIEOOw=)
3: X63Q6UW8YRAcabzmSj1yi6G7hmE.crl (hash: jyu73Ymod7lYCI2XljN118HCzquksYnmOGt1qOI4f5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:a4:2c:bc:6d:1b:7e:16:05:f9:16:d8:6e:11:16:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
Validity
Not Before: Mar 13 10:00:44 2026 GMT
Not After : Mar 14 10:00:44 2026 GMT
Subject: CN=4b45f8e27325e9f5bdaf141518cf55f2dc02c88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:42:93:f0:5f:d3:78:d6:04:17:bd:c7:11:f5:
0e:5d:8b:d3:e0:e8:1e:66:61:f4:48:2b:e3:75:84:
6f:07:d4:74:b3:15:17:d9:5b:76:dd:b6:f0:e5:2a:
2b:50:a4:4f:ea:9d:0d:f7:b4:da:45:7d:71:31:38:
1b:a6:f5:19:f6:d0:b9:b3:30:7f:a3:c3:27:92:d2:
8f:36:d8:9f:6f:47:d9:bc:b9:99:94:48:48:23:5f:
3e:a3:04:70:cc:02:c6:7d:50:5c:e4:1e:e3:bd:2d:
79:bc:60:b2:a2:45:06:7e:34:2e:b8:74:dd:10:45:
0b:96:54:ac:e7:61:b7:57:df:d2:20:79:10:ee:5b:
2f:d2:4c:a8:11:8b:57:56:09:92:09:24:cc:07:6d:
5b:87:74:2a:2c:78:de:72:8b:42:42:c2:a7:af:2c:
46:b8:17:ea:25:5e:2b:35:01:cb:69:c4:eb:7e:d1:
ea:58:87:a4:1e:09:7b:93:a0:3c:96:75:30:21:dd:
68:83:70:52:a0:7a:22:2b:53:b6:81:10:75:9f:51:
df:48:8e:90:d4:7b:ed:12:73:f3:e4:0a:28:b2:11:
11:7e:8d:77:e6:0b:85:eb:9e:25:30:89:7d:cf:05:
8d:08:c0:2a:2b:e9:25:0f:95:e4:58:bb:e3:2e:d8:
60:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:45:F8:E2:73:25:E9:F5:BD:AF:14:15:18:CF:55:F2:DC:02:C8:8D
X509v3 Authority Key Identifier:
keyid:5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e8:9f:f3:0a:5c:76:9c:4f:7c:fb:5a:f7:65:59:58:52:4a:
bd:1a:2e:b7:d2:aa:b2:f4:c0:11:06:c0:82:59:86:eb:3b:db:
86:b6:9d:64:09:e1:48:49:c6:73:49:f4:11:3d:05:ba:77:38:
1b:15:70:e0:93:45:90:ae:c9:e7:bf:e8:62:99:d8:a5:38:21:
5d:39:e9:f6:f6:98:2e:c6:b4:9c:35:c5:82:d3:f6:b8:e1:5b:
de:05:3d:ca:cb:29:2c:9e:ed:32:09:f0:79:20:fc:13:bf:31:
1c:25:e6:cd:bc:37:2a:50:01:56:aa:95:da:c6:46:b6:34:ec:
74:54:9e:83:a9:58:a8:59:54:81:b2:ff:57:ce:50:c2:a5:9e:
04:81:34:6a:6e:3a:63:c7:cb:ed:4d:59:06:ad:4c:80:88:1c:
86:81:a5:ec:f0:b6:1c:4b:3f:6a:6e:08:49:8c:3f:b3:74:6e:
f6:f3:d0:7d:8f:f6:8b:2d:b3:1c:cf:f8:c1:e5:f3:11:d2:3a:
12:55:86:d4:8e:be:6c:90:2a:25:64:fb:1a:35:f8:a4:44:1a:
31:b3:b4:b1:ff:61:c6:a8:9f:70:7c:3a:9f:19:5a:3b:cd:36:
d2:f8:2d:03:2f:4d:f6:16:37:4f:90:34:b6:75:19:20:6c:e3:
c2:84:08:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 18:57:08 2026 by rpki-client