Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
File: xW93K_PEZBpxv39LxN4RyTrd_qY.mft (raw, json)
Hash identifier: 6RVXZKpcw7B8nuIwhEyWyCCyAwPhWm1m8OZOpwM1y6Q=
Subject key identifier: 22:5E:53:C9:72:24:9E:DD:C2:05:71:01:B8:F0:B3:9A:70:2C:CB:43
Authority key identifier: C5:6F:77:2B:F3:C4:64:1A:71:BF:7F:4B:C4:DE:11:C9:3A:DD:FE:A6
Certificate issuer: /CN=c56f772bf3c4641a71bf7f4bc4de11c93addfea6
Certificate serial: 019D3909D8560E9944184AA9C4F7187ABEC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
Manifest number: 11C6
Signing time: Sun 29 Mar 2026 10:00:39 +0000
Manifest this update: Sun 29 Mar 2026 10:00:39 +0000
Manifest next update: Mon 30 Mar 2026 10:00:39 +0000
Files and hashes: 1: UZbrORTP_ETM2yJiPplsddvS7KA.roa (hash: KMKv//YG/qKlJS3aeSyQju59WADPz9oMFmNno9Nz5a4=)
2: xW93K_PEZBpxv39LxN4RyTrd_qY.crl (hash: UMG5Pr1Lq1GJ08XOEy7zvRasX1MMlq/qS/ZYCtizjD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:d8:56:0e:99:44:18:4a:a9:c4:f7:18:7a:be:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c56f772bf3c4641a71bf7f4bc4de11c93addfea6
Validity
Not Before: Mar 29 10:00:39 2026 GMT
Not After : Mar 30 10:00:39 2026 GMT
Subject: CN=225e53c972249eddc2057101b8f0b39a702ccb43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ea:b0:af:a8:bf:8e:af:16:b2:b5:94:28:40:
5e:34:37:b9:4c:00:e6:ff:cd:c0:5c:62:84:47:2c:
b6:53:3b:26:ed:98:53:de:cd:94:6b:67:a7:90:78:
cc:3b:eb:50:3c:1a:92:8b:f9:6c:7b:c5:45:bf:af:
32:1c:0c:2e:5a:23:fa:01:1a:09:ed:ed:64:1c:22:
ef:af:bc:96:6c:bd:bc:5c:e1:cd:47:d5:15:36:3d:
09:18:41:02:ab:bf:a3:7b:59:7c:fc:7b:ee:53:e1:
30:05:d9:23:1e:eb:e3:63:e9:a9:63:9b:5d:69:cb:
5a:5d:ef:37:bc:e8:61:df:1a:cb:1d:b5:3a:f3:04:
81:70:0b:6b:93:e8:b3:20:e7:94:c5:22:2f:57:d5:
ba:4c:4d:30:97:3e:30:93:ac:d7:ad:3a:0a:56:54:
2c:1a:91:8a:90:15:7b:60:b8:af:66:5b:94:05:63:
78:8c:71:5b:4b:1b:17:61:1a:4d:c9:f7:4f:7b:72:
73:ce:b7:61:85:b6:69:a6:dd:77:dc:15:ba:6e:5f:
ef:7e:bf:e4:ce:5d:91:51:c7:ab:d6:6f:ee:92:f8:
32:e9:54:41:7d:86:5e:cc:6d:c9:fe:e9:ec:60:59:
25:64:67:9b:59:e7:e4:a3:fc:6e:bb:be:62:15:9b:
5a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5E:53:C9:72:24:9E:DD:C2:05:71:01:B8:F0:B3:9A:70:2C:CB:43
X509v3 Authority Key Identifier:
keyid:C5:6F:77:2B:F3:C4:64:1A:71:BF:7F:4B:C4:DE:11:C9:3A:DD:FE:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:36:5f:c1:55:ff:4f:7c:75:31:2b:4a:93:3a:63:81:4c:a9:
a1:d2:e7:ec:76:66:2c:36:52:64:41:af:55:6f:67:77:f3:52:
6b:c2:c9:6e:72:0d:55:08:cf:c3:6b:ca:6e:b6:18:b8:b0:11:
0a:99:dc:ef:57:03:2f:bc:53:39:a8:0a:46:cc:0f:c3:0b:18:
d7:85:d4:e7:1e:56:a1:ee:90:ef:78:d4:33:ad:60:94:b5:e9:
70:bb:37:94:86:8c:24:aa:73:61:d8:57:f8:af:73:35:94:71:
51:aa:ee:6b:9e:f5:1e:05:97:cd:a9:ca:f3:f4:4d:43:d1:99:
4b:39:0b:7e:ee:b2:cc:ee:85:fc:89:00:ee:a0:de:2a:bc:09:
c7:27:42:34:46:1f:c6:6d:26:7d:1b:d3:26:05:a1:29:37:ca:
ea:df:05:5d:33:1d:67:75:a3:ed:99:af:7d:ac:14:53:6f:f3:
dd:e9:2b:f5:5c:7d:dd:c6:bb:bb:bd:0b:6c:b7:ed:ae:c9:08:
55:11:ca:e6:15:df:d1:2f:8d:b1:c7:c3:77:c4:81:f8:1d:d0:
16:c5:30:7c:51:79:49:09:46:ef:4e:d2:53:0c:6b:6f:f8:3e:
80:1b:b8:b9:8b:6f:bc:57:58:75:70:05:dc:d3:67:1b:9f:f0:
bf:52:1f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:53:47 2026 by rpki-client