Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft
File: x67yqz8unZrAH3J_cwr33x0EGA8.mft (raw, json)
Hash identifier: DFDvT3dBSdvv8qa1LXwlx5KCWJxhg6P1GFWWkXbEx0k=
Subject key identifier: F4:2F:CA:F1:7A:E5:DA:A6:90:6F:5B:32:43:40:79:26:BA:EC:22:52
Authority key identifier: C7:AE:F2:AB:3F:2E:9D:9A:C0:1F:72:7F:73:0A:F7:DF:1D:04:18:0F
Certificate issuer: /CN=c7aef2ab3f2e9d9ac01f727f730af7df1d04180f
Certificate serial: 019D3909CC670A114650B88F84ADCEBA9A08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft
Manifest number: 17A6
Signing time: Sun 29 Mar 2026 10:00:36 +0000
Manifest this update: Sun 29 Mar 2026 10:00:36 +0000
Manifest next update: Mon 30 Mar 2026 10:00:36 +0000
Files and hashes: 1: 832xdcyaMQ6PQMu-wsVkkpXVYxo.roa (hash: nHOliUKQ6iyBnB9SWzQjh04ItWv0KdS+AY354/7+P9s=)
2: x67yqz8unZrAH3J_cwr33x0EGA8.crl (hash: umK8jTemsWfaH3+eov3IKybyxMyUED3dgX6xIm0DhlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:cc:67:0a:11:46:50:b8:8f:84:ad:ce:ba:9a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7aef2ab3f2e9d9ac01f727f730af7df1d04180f
Validity
Not Before: Mar 29 10:00:36 2026 GMT
Not After : Mar 30 10:00:36 2026 GMT
Subject: CN=f42fcaf17ae5daa6906f5b3243407926baec2252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ca:fc:65:ef:91:9b:a3:0b:66:cc:2b:6b:bb:
af:5b:aa:4f:8b:ef:bd:8e:70:6a:e0:73:9e:e2:6a:
86:fa:94:b9:37:86:9f:4f:06:32:5b:cd:73:8c:bb:
08:b9:57:a9:70:50:4e:07:a1:be:73:57:41:25:fc:
62:9a:84:52:9c:af:ad:b0:f8:21:1b:fa:fc:f7:5d:
51:1f:d2:8b:5b:eb:b1:3d:8b:a3:93:ba:d0:ea:91:
be:14:96:73:75:5a:8d:e4:78:a8:bc:77:5f:59:6f:
ac:e5:cd:35:4e:ae:78:06:07:6b:c1:b7:2f:79:b5:
8f:e3:9b:dd:6d:91:35:5c:62:72:bd:7a:f3:4f:0c:
2b:89:2d:06:1b:a6:6b:44:6c:48:5c:09:f7:59:14:
6b:2c:f5:17:ca:d6:c9:c4:ac:f0:67:33:5a:37:3c:
cd:16:65:2d:ad:ad:49:e8:84:31:22:29:cc:8e:af:
c8:7f:ea:91:17:43:58:cf:8e:80:78:a0:70:ee:a4:
27:a3:6b:e0:be:f7:ec:f1:51:4b:0e:b3:fd:23:1f:
69:0c:d0:e6:a2:c2:1c:c4:77:0e:08:76:bf:27:21:
39:37:65:e2:b4:a1:87:69:2b:6a:27:2d:47:ad:51:
65:e3:c3:40:2d:eb:dc:7f:ed:b4:57:ea:b2:7d:cf:
14:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2F:CA:F1:7A:E5:DA:A6:90:6F:5B:32:43:40:79:26:BA:EC:22:52
X509v3 Authority Key Identifier:
keyid:C7:AE:F2:AB:3F:2E:9D:9A:C0:1F:72:7F:73:0A:F7:DF:1D:04:18:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:90:aa:9a:08:48:d0:79:4c:d9:88:1f:fb:16:c9:12:c2:c9:
ae:ec:49:8d:57:38:59:29:2f:80:1d:ec:4d:90:c0:50:30:c1:
32:23:55:63:de:97:6f:4d:bc:20:06:8b:f4:24:01:9c:2c:3a:
cb:1b:14:6a:3a:e4:bf:6e:d9:ed:20:9b:d2:da:13:d4:81:4b:
65:40:06:7b:23:d1:3f:f0:6b:29:34:97:f0:af:e1:52:42:72:
52:5d:7d:cd:7b:f0:41:5c:55:eb:5b:a0:d7:f1:7a:8c:60:7b:
69:ef:29:53:c1:2b:b8:a0:6d:02:c8:d7:88:2c:01:c6:b8:4b:
99:28:c9:3c:a1:1a:e7:08:86:9c:56:44:da:6a:dc:b7:5a:d3:
22:33:ef:6d:31:1f:d9:e8:1b:34:ab:b0:52:e6:a6:e2:29:7a:
ab:a2:54:ce:31:10:75:04:03:11:e2:00:13:c0:ed:54:63:9c:
79:91:fb:40:75:54:12:02:bf:a7:c3:dc:22:c0:c1:35:9c:0e:
7b:c1:1d:c8:c2:1c:f6:ba:ae:27:37:ab:0a:47:a5:b4:3d:5e:
66:07:91:ae:c8:97:91:30:f2:e9:75:72:1e:73:60:a0:ed:29:
e2:27:3f:60:e0:67:71:07:0f:e4:34:bc:ab:d3:1e:10:95:d8:
5e:35:09:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:03 2026 by rpki-client