Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft
File: xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft (raw, json)
Hash identifier: smmYluuZC5lWJ5UV/LtSFXK8otLhqaIa1gby2dxycPY=
Subject key identifier: CB:5A:B7:3A:0F:82:47:7B:38:CA:FE:02:09:66:7C:6B:94:4C:47:1C
Authority key identifier: C4:AC:C9:E2:99:96:47:D8:01:D4:60:6E:C9:4D:6B:72:1F:7A:64:14
Certificate issuer: /CN=c4acc9e2999647d801d4606ec94d6b721f7a6414
Certificate serial: 019D389C45C97FA0C7CF8EDD0C1BD8A800FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft
Manifest number: 044A
Signing time: Sun 29 Mar 2026 08:00:58 +0000
Manifest this update: Sun 29 Mar 2026 08:00:58 +0000
Manifest next update: Mon 30 Mar 2026 08:00:58 +0000
Files and hashes: 1: _JmA3MK8G0qpLNQyx391y06vnEs.roa (hash: U5oRmfOjkS3ly10lkGGT2q8Cjcu7ymVj/6KBitfSLE0=)
2: xKzJ4pmWR9gB1GBuyU1rch96ZBQ.crl (hash: GhHE6l0vhTgeuSmpzb0OILv6E4AWjx1lwRVn41xxtfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:45:c9:7f:a0:c7:cf:8e:dd:0c:1b:d8:a8:00:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4acc9e2999647d801d4606ec94d6b721f7a6414
Validity
Not Before: Mar 29 08:00:58 2026 GMT
Not After : Mar 30 08:00:58 2026 GMT
Subject: CN=cb5ab73a0f82477b38cafe0209667c6b944c471c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cd:e0:a2:f7:75:52:6a:be:2c:8c:75:6e:80:
ce:69:e4:55:38:e9:0b:a0:47:e5:99:db:54:84:2e:
8e:a1:d7:d4:c4:b6:a1:92:11:88:8f:73:da:1a:f5:
79:c7:d2:20:33:6c:95:3e:94:e8:60:28:c5:30:aa:
da:4b:38:e7:e1:fd:79:30:dc:74:63:11:25:07:75:
24:b2:e9:28:92:fc:36:60:bb:76:cd:4d:cd:16:ee:
5d:f9:34:db:99:3e:3e:fe:d8:3a:79:2e:fb:5f:f1:
9e:bf:41:35:2f:52:a2:c6:58:09:76:4f:68:02:09:
ad:ba:f0:74:fb:b6:29:36:65:fc:9f:f0:42:f1:8d:
bb:7c:ee:19:e4:ff:7a:ac:d4:f0:61:6e:7c:22:b3:
a8:60:32:cf:ef:09:52:e5:6a:af:36:c6:03:f4:85:
13:2c:ef:bf:72:c5:63:41:08:20:e5:40:39:17:7a:
a2:65:37:cb:2a:8d:1f:1c:21:bb:d5:f0:23:3d:27:
d2:df:3d:c0:e0:e2:ca:9d:87:92:b2:3c:bd:e4:9c:
ad:e8:3d:36:91:0a:2e:71:a4:85:0d:20:c0:fa:7c:
db:96:bb:90:08:44:41:05:7b:28:a9:34:84:48:ba:
32:9d:ff:a7:b8:38:66:19:e3:75:bb:be:04:93:7c:
cf:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5A:B7:3A:0F:82:47:7B:38:CA:FE:02:09:66:7C:6B:94:4C:47:1C
X509v3 Authority Key Identifier:
keyid:C4:AC:C9:E2:99:96:47:D8:01:D4:60:6E:C9:4D:6B:72:1F:7A:64:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f1:fe:be:8d:be:60:33:9c:29:4e:84:b1:3c:e7:bd:c1:3a:
6e:76:ff:47:d5:69:30:e7:9c:d3:21:2b:20:64:88:4f:01:4d:
21:fc:a4:66:5a:23:d0:dd:f9:0c:3a:be:2c:37:85:bd:ac:b1:
80:15:f7:e9:cc:16:24:e5:1a:ae:e1:a8:fb:3d:13:b2:53:7a:
c3:ef:09:f3:54:5d:c9:f9:cc:7d:80:c0:5f:4e:f9:88:74:cd:
bc:2b:24:03:5a:b7:c0:0c:b5:7f:5c:29:dd:16:c3:7b:51:9c:
14:ce:58:63:42:c0:6f:20:f1:b4:95:67:84:59:54:b3:51:5a:
62:59:f1:e1:06:8c:d5:9b:d9:bc:61:cd:7c:5d:b2:6b:af:82:
ef:52:2f:23:7e:98:7e:97:c8:61:19:5d:49:9b:cf:57:78:b6:
68:7c:26:25:86:c7:e9:e9:7d:54:e7:da:21:77:d3:e7:ba:26:
9d:24:3a:c1:57:20:42:2b:6f:51:f3:1b:78:e5:3a:1a:17:ab:
4f:ab:7e:fe:e3:e5:b4:c2:42:7b:2f:c0:0c:3b:cc:bc:3e:dc:
d8:3d:6c:8a:bf:8b:12:79:83:94:16:11:e4:e1:f2:99:c6:9b:
87:83:9b:7b:ec:e6:08:d2:76:be:be:48:12:e2:e3:4e:21:8f:
95:a7:1a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:49 2026 by rpki-client