Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
File: xmJhwznF7fjYxIPwjka4SAqAXvE.mft (raw, json)
Hash identifier: ueEDEUkUAswZrahSDoMyV1Au8IIOcc+3+mTzb+RW1Aw=
Subject key identifier: C9:4A:17:F5:3B:7F:13:A1:C2:4E:98:D9:4B:36:1B:0C:A8:94:9E:1C
Authority key identifier: C6:62:61:C3:39:C5:ED:F8:D8:C4:83:F0:8E:46:B8:48:0A:80:5E:F1
Certificate issuer: /CN=c66261c339c5edf8d8c483f08e46b8480a805ef1
Certificate serial: 019D37C0E773444D7CCA041BFAF5218351A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
Manifest number: 17CB
Signing time: Sun 29 Mar 2026 04:01:22 +0000
Manifest this update: Sun 29 Mar 2026 04:01:22 +0000
Manifest next update: Mon 30 Mar 2026 04:01:22 +0000
Files and hashes: 1: GkysysiUBXozBtdhxp6l182WpJ8.roa (hash: VR1FnjecjyRiwX08EOHPvLrD5A0SMs3OVYweJtUa454=)
2: xmJhwznF7fjYxIPwjka4SAqAXvE.crl (hash: bnvpF2v/i/v9lc4+R9Z9KRQjFxGr/SEN/ykrrEetJdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:e7:73:44:4d:7c:ca:04:1b:fa:f5:21:83:51:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66261c339c5edf8d8c483f08e46b8480a805ef1
Validity
Not Before: Mar 29 04:01:22 2026 GMT
Not After : Mar 30 04:01:22 2026 GMT
Subject: CN=c94a17f53b7f13a1c24e98d94b361b0ca8949e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:41:b8:cb:76:66:3a:05:d7:75:85:51:7d:aa:
27:f2:b0:a6:ee:90:b1:ab:b8:76:2e:2a:f0:85:b4:
fb:d7:aa:46:e7:af:cf:e5:bd:35:5b:96:6b:62:62:
3d:2d:9a:a3:c8:64:fa:8a:9f:6b:f9:c6:38:4e:05:
db:4e:97:84:02:c5:70:22:4e:71:35:e3:ab:8b:e5:
f3:30:49:39:82:0b:94:99:02:d9:b0:71:26:49:5c:
9b:10:d0:d5:4e:54:d4:88:0e:02:6d:a5:30:6d:0b:
0f:58:b3:fe:08:a1:24:0d:8b:d1:ca:cb:18:0e:2d:
0f:29:e9:f4:5f:13:7e:cf:78:95:60:a7:f0:f0:a7:
e6:50:09:52:6d:20:7c:5d:63:47:c8:8d:08:45:c1:
d9:a8:8a:cd:5a:c3:92:37:98:d4:a2:f3:95:17:97:
11:db:48:82:24:a4:6d:5d:3b:f1:2f:64:13:72:e9:
d0:fc:46:52:55:7c:a2:68:9b:b7:9e:67:17:5f:c6:
dc:bf:62:50:8b:23:20:9b:78:f2:9d:50:1f:d8:ba:
4e:ed:e8:b2:44:d8:93:8c:55:6f:5f:2e:23:8e:99:
99:dd:70:55:2a:6a:38:61:b3:06:68:d8:fd:ec:6c:
21:d3:c9:28:06:8a:56:21:06:04:c7:1d:ed:b6:b2:
76:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4A:17:F5:3B:7F:13:A1:C2:4E:98:D9:4B:36:1B:0C:A8:94:9E:1C
X509v3 Authority Key Identifier:
keyid:C6:62:61:C3:39:C5:ED:F8:D8:C4:83:F0:8E:46:B8:48:0A:80:5E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:2a:b6:1a:22:c6:c3:1e:4b:26:39:59:be:8f:1a:2d:2f:76:
60:d5:94:e9:a8:a2:7c:0e:d7:16:ea:9c:7a:b9:d5:fb:a2:bf:
ae:a9:e6:e6:13:05:40:99:e4:a3:f8:29:98:94:e6:39:8c:af:
e5:41:97:9a:ac:52:29:b3:0d:10:9b:67:59:53:35:23:e8:5c:
39:e1:0e:4c:e0:f8:de:39:24:67:07:fb:7b:d4:e4:de:7d:fd:
0c:89:25:d9:b1:ea:71:f7:f1:89:d2:a1:ea:bb:8f:e8:2f:73:
80:74:62:8d:23:f1:62:0f:1f:d4:8c:d6:a3:9d:02:33:c1:0d:
d5:02:00:95:6a:f8:82:73:1c:3d:7f:f0:0f:18:c9:3e:90:cd:
c7:b4:89:73:de:b1:dd:ff:69:e4:8d:f8:10:14:f9:76:19:12:
e5:e7:ec:7c:6f:ba:28:b5:98:a3:b0:42:52:67:4d:aa:95:aa:
17:7a:ce:a4:2b:e9:5a:d4:55:05:5f:31:d5:6c:ef:24:8f:36:
0a:4b:73:84:34:f4:89:1f:ae:23:bf:13:a1:c0:24:3a:d8:ac:
5a:5d:8a:a7:b7:50:b1:39:ee:9a:f2:53:90:88:08:70:dc:80:
83:50:cc:0c:df:34:c6:30:0a:5e:97:98:fe:20:83:0f:67:e6:
a1:bd:62:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:23 2026 by rpki-client