Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
File: x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft (raw, json)
Hash identifier: VIIDxr3FHM+t6dLnDJjI4WPsnDKCVDwz2OktRGnoCmk=
Subject key identifier: 2B:39:F9:AA:08:72:22:BB:5E:1B:52:1F:A7:C6:2F:1D:D1:A6:2C:B0
Authority key identifier: C7:6C:36:44:74:13:36:B0:1B:63:85:63:31:4F:40:D1:0C:69:D3:0D
Certificate issuer: /CN=c76c3644741336b01b638563314f40d10c69d30d
Certificate serial: 019D38663052988AEBD4BC0D5CB46858B454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
Manifest number: 0C9D
Signing time: Sun 29 Mar 2026 07:01:54 +0000
Manifest this update: Sun 29 Mar 2026 07:01:54 +0000
Manifest next update: Mon 30 Mar 2026 07:01:54 +0000
Files and hashes: 1: SBXXsuQ2RCCtkfka4gDFjpiCz2E.roa (hash: mV/+p/4ajgUkF2cImFAUrHKdi3q+SL4hKUtvs6QGwDw=)
2: x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl (hash: f5Ug3EaJDnOCDmnopKiFgD2z0JUq+1r8biispHyA8O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:30:52:98:8a:eb:d4:bc:0d:5c:b4:68:58:b4:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76c3644741336b01b638563314f40d10c69d30d
Validity
Not Before: Mar 29 07:01:54 2026 GMT
Not After : Mar 30 07:01:54 2026 GMT
Subject: CN=2b39f9aa087222bb5e1b521fa7c62f1dd1a62cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:61:bf:13:88:10:52:fa:fd:5a:9c:8f:d4:08:
6f:18:1c:e6:c8:37:36:2d:5a:db:7f:bf:c9:2a:65:
ea:9c:67:12:22:75:9e:90:f9:7f:f9:d8:20:71:7e:
8d:29:f3:17:d3:59:47:7e:d0:b0:d6:c8:11:11:f7:
85:2c:09:11:2d:9d:55:00:aa:73:41:63:f7:bc:12:
9c:ec:b4:2e:79:72:3a:77:85:de:1e:37:5d:c6:91:
4b:5d:62:49:93:48:f4:5f:3e:55:06:e9:08:b8:0d:
02:7b:a9:08:db:06:bc:9e:bd:54:03:60:b9:32:85:
d6:77:81:d0:39:ec:d9:b4:dc:c8:a1:15:2e:6b:c7:
5d:82:c4:f0:38:4c:c3:51:08:24:8a:29:07:02:f5:
58:e5:eb:1e:c8:a3:eb:12:ad:d5:b1:62:f5:e7:3c:
5b:2d:15:56:85:64:ad:98:ca:aa:8d:aa:21:72:cf:
8d:ac:6e:9f:68:21:d8:57:1d:bf:a8:09:7b:bd:0b:
0f:b7:a3:ce:df:fc:66:ef:93:7e:15:1b:e4:01:86:
ba:7c:13:41:4f:24:03:7a:36:21:e1:1c:de:68:49:
67:f7:2b:a3:cf:60:9b:54:36:12:fa:27:90:d0:2a:
0e:e6:c6:e1:a8:d4:37:ef:af:68:65:e4:fc:eb:f4:
d6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:39:F9:AA:08:72:22:BB:5E:1B:52:1F:A7:C6:2F:1D:D1:A6:2C:B0
X509v3 Authority Key Identifier:
keyid:C7:6C:36:44:74:13:36:B0:1B:63:85:63:31:4F:40:D1:0C:69:D3:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:30:58:56:c4:3f:a4:fa:95:80:d8:ac:91:cc:17:71:a2:2c:
bb:16:eb:fd:01:57:64:f3:95:33:d0:1a:56:a6:bf:f8:40:b8:
8c:0f:cd:c8:56:9a:05:cd:74:95:a2:64:af:c8:f3:6e:f4:43:
c1:64:90:25:f4:5a:38:cb:ec:1e:a1:5a:0c:a0:14:19:50:f2:
3b:56:e9:0c:93:68:1e:76:e7:e1:44:c0:b4:fa:a2:1e:90:81:
42:7b:27:f2:87:64:20:09:20:9a:44:fe:27:1f:95:e2:84:0f:
a9:9a:94:57:52:e7:f3:5f:bd:58:69:f8:f4:83:03:6d:c1:f1:
0c:0b:32:95:f1:f6:42:0a:76:21:2d:76:8d:f1:7b:10:1a:54:
8a:af:a1:e7:40:ed:76:f5:bc:18:52:02:6e:94:78:e5:01:de:
36:d6:75:d1:b2:e1:1f:31:61:bc:f1:a3:2d:88:98:55:33:c4:
f8:77:3f:17:71:62:e5:c7:f6:36:a5:b3:22:f5:be:0d:ea:4c:
4a:0c:74:4d:03:be:ec:b2:45:c6:21:7e:6f:d1:3c:5f:3d:64:
50:b8:9f:4c:d1:c8:1a:d1:2b:c2:de:98:14:b9:e1:15:cc:09:
04:7f:0f:d9:0b:a5:32:39:21:32:3a:65:1d:2b:0b:8d:2f:ba:
b6:b4:1a:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZjBSmIrr1LwNXLRoWLRUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NmMzNjQ0NzQxMzM2YjAxYjYzODU2MzMxNGY0MGQxMGM2
OWQzMGQwHhcNMjYwMzI5MDcwMTU0WhcNMjYwMzMwMDcwMTU0WjAzMTEwLwYDVQQD
EygyYjM5ZjlhYTA4NzIyMmJiNWUxYjUyMWZhN2M2MmYxZGQxYTYyY2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWG/E4gQUvr9WpyP1AhvGBzmyDc2
LVrbf7/JKmXqnGcSInWekPl/+dggcX6NKfMX01lHftCw1sgREfeFLAkRLZ1VAKpz
QWP3vBKc7LQueXI6d4XeHjddxpFLXWJJk0j0Xz5VBukIuA0Ce6kI2wa8nr1UA2C5
MoXWd4HQOezZtNzIoRUua8ddgsTwOEzDUQgkiikHAvVY5eseyKPrEq3VsWL15zxb
LRVWhWStmMqqjaohcs+NrG6faCHYVx2/qAl7vQsPt6PO3/xm75N+FRvkAYa6fBNB
TyQDejYh4RzeaEln9yujz2CbVDYS+ieQ0CoO5sbhqNQ3769oZeT86/TWawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCs5+aoIciK7XhtSH6fGLx3RpiywMB8GA1UdIwQY
MBaAFMdsNkR0EzawG2OFYzFPQNEMadMNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDJ3MlJIUVROckFiWTRWak1VOUEwUXhwMHcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ZGY3YzYtZGVjZC00YmJjLWJhYmMt
MjM2OTdmNzUyZjJlLzEveDJ3MlJIUVROckFiWTRWak1VOUEwUXhwMHcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS83ZGY3YzYtZGVjZC00YmJjLWJhYmMtMjM2OTdmNzUyZjJl
LzEveDJ3MlJIUVROckFiWTRWak1VOUEwUXhwMHcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMTBYVsQ/
pPqVgNiskcwXcaIsuxbr/QFXZPOVM9AaVqa/+EC4jA/NyFaaBc10laJkr8jzbvRD
wWSQJfRaOMvsHqFaDKAUGVDyO1bpDJNoHnbn4UTAtPqiHpCBQnsn8odkIAkgmkT+
Jx+V4oQPqZqUV1Ln81+9WGn49IMDbcHxDAsylfH2Qgp2IS12jfF7EBpUiq+h50Dt
dvW8GFICbpR45QHeNtZ10bLhHzFhvPGjLYiYVTPE+Hc/F3Fi5cf2NqWzIvW+DepM
Sgx0TQO+7LJFxiF+b9E8Xz1kULifTNHIGtErwt6YFLnhFcwJBH8P2QulMjkhMjpl
HSsLjS+6trQafg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:05 2026 by rpki-client