Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft
File: xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft (raw, json)
Hash identifier: Rtnrl9zD97UJSSLefdhxZAoC9ZdN8skkKq1FZLs4vj4=
Subject key identifier: 00:2C:A3:FC:40:AF:48:A4:95:48:5A:6E:A7:91:8A:D1:15:AF:E2:C7
Authority key identifier: C6:BA:F8:E3:08:82:17:E4:B7:C0:C2:31:71:8F:AB:90:9B:18:81:E4
Certificate issuer: /CN=c6baf8e3088217e4b7c0c231718fab909b1881e4
Certificate serial: 019CDE45A5FAE982CD114F2E44C98B995DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrr44wiCF-S3wMIxcY-rkJsYgeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft
Manifest number: D5
Signing time: Wed 11 Mar 2026 19:00:32 +0000
Manifest this update: Wed 11 Mar 2026 19:00:32 +0000
Manifest next update: Thu 12 Mar 2026 19:00:32 +0000
Files and hashes: 1: YfYnV8dROfvt9YlNJZwwIzCuaVk.roa (hash: 8h9Qzp6OMQv/b+8I/FjbB7FBpfDNca2A4Lb8PfnMIP8=)
2: muxPZK-ETW8tpLSqLIwKLV3HXOk.asa (hash: /+0xru5+5Z1tOoOAH5nYb2Wl7cyjV1xFYP0ZTNGGwik=)
3: xrr44wiCF-S3wMIxcY-rkJsYgeQ.crl (hash: dtY75TiBIjdh65odqAE83Q55Y1Gq2vg1evL4L8JuX3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrr44wiCF-S3wMIxcY-rkJsYgeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Mar 2026 19:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:de:45:a5:fa:e9:82:cd:11:4f:2e:44:c9:8b:99:5d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6baf8e3088217e4b7c0c231718fab909b1881e4
Validity
Not Before: Mar 11 19:00:32 2026 GMT
Not After : Mar 12 19:00:32 2026 GMT
Subject: CN=002ca3fc40af48a495485a6ea7918ad115afe2c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:75:33:9a:2b:77:c4:05:ca:65:ec:51:b0:99:
22:49:88:a2:2e:e9:7f:e4:4d:9d:2c:32:19:db:a3:
b1:8a:f5:7d:80:2a:14:e9:f4:53:35:96:7a:3b:bc:
7a:31:57:36:b0:ea:a2:70:5c:e9:83:1d:40:fa:d7:
c7:cf:77:cc:9a:32:aa:05:19:75:ee:44:30:16:48:
4b:5c:94:b2:ff:42:26:34:dc:1a:01:17:fc:2d:c6:
1a:70:e6:72:27:91:56:f2:7d:b4:a0:98:a5:10:d7:
91:39:ae:10:9e:f4:5d:e4:40:2a:a2:1d:31:d3:39:
da:bf:f1:50:87:bf:15:a3:65:bf:ef:83:0b:f4:0b:
a7:56:da:14:ef:60:54:32:be:ec:78:95:ec:1a:20:
e0:f4:3a:6f:d4:58:97:0b:81:88:cf:f5:8d:1a:1e:
7d:3f:71:1b:5c:17:5d:40:cd:d9:4d:f5:a0:1c:47:
da:a0:3b:3f:41:1b:7f:1d:fe:01:6e:2b:9e:7b:0d:
02:2f:fc:6f:48:a5:52:c3:05:27:06:37:58:26:21:
81:ef:f7:23:05:ab:f6:3f:f0:da:c8:2e:7a:1c:9d:
30:f9:b6:08:30:c9:6a:dd:13:0c:00:76:f6:fa:54:
09:15:38:77:1a:0b:f3:ad:65:14:36:e5:36:72:c4:
b9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:2C:A3:FC:40:AF:48:A4:95:48:5A:6E:A7:91:8A:D1:15:AF:E2:C7
X509v3 Authority Key Identifier:
keyid:C6:BA:F8:E3:08:82:17:E4:B7:C0:C2:31:71:8F:AB:90:9B:18:81:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrr44wiCF-S3wMIxcY-rkJsYgeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:aa:72:16:5e:b1:3a:df:63:52:84:de:d7:78:60:f7:d4:df:
ae:04:49:2b:97:5e:39:15:b8:b0:49:8d:b1:9c:b7:e4:48:5b:
38:dd:cd:b0:8a:99:0a:bd:fc:ec:2a:51:6c:0f:9a:c2:8f:2c:
85:0b:ef:e1:95:9d:55:f4:bf:f5:c8:12:82:fb:f9:da:63:93:
e5:fd:03:8d:ad:5e:50:72:4e:4e:15:30:e8:33:06:47:6e:c7:
61:9d:b3:a7:ff:8b:7d:b3:bb:99:07:b8:1d:af:df:0f:73:1c:
9a:bc:b7:46:30:0e:67:57:6e:7c:05:02:46:dd:6f:5e:21:b4:
e2:a9:63:59:a2:b1:b6:20:6d:10:53:c6:83:41:fb:20:c1:19:
e4:cd:7e:aa:31:54:83:4d:ea:4f:71:d8:80:3f:4f:72:c6:08:
0b:26:00:5a:a4:62:33:92:5a:38:1a:f3:63:97:f0:19:d5:23:
5d:4a:23:23:e6:f8:68:04:c3:7e:ca:2a:54:4a:56:69:78:7d:
29:8f:a1:6c:9d:74:58:01:8d:6d:fd:b8:bb:85:a0:6f:43:6b:
31:79:59:db:51:78:19:2e:a2:7a:72:6c:aa:b8:81:6f:f6:37:
32:58:81:e0:53:fa:5b:69:f9:16:ee:69:ee:c9:68:14:6e:82:
7c:a8:26:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 05:49:55 2026 by rpki-client