Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
File: xIQvgmL-vSPQE9QKMU2I4lSypUI.mft (raw, json)
Hash identifier: k/xz9NPGTWS95joSxOimaA1ly7DTQ0cIdamCg7dD8mM=
Subject key identifier: 7E:60:79:18:4D:9C:D0:95:78:EC:21:9B:09:DC:57:9A:59:A6:26:19
Authority key identifier: C4:84:2F:82:62:FE:BD:23:D0:13:D4:0A:31:4D:88:E2:54:B2:A5:42
Certificate issuer: /CN=c4842f8262febd23d013d40a314d88e254b2a542
Certificate serial: 019D39AF69CF64B0663C880306CB39F4DD58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
Manifest number: 07DD
Signing time: Sun 29 Mar 2026 13:01:30 +0000
Manifest this update: Sun 29 Mar 2026 13:01:30 +0000
Manifest next update: Mon 30 Mar 2026 13:01:30 +0000
Files and hashes: 1: kOwA2VMp0-d5NZ8ZjSEsa9A6-fM.roa (hash: ZSmsV9FGmLqKWen++kiAr3q47+GvBQzYyI0Yg4ZwozI=)
2: xIQvgmL-vSPQE9QKMU2I4lSypUI.crl (hash: XeYo7x7qsUKt0zcWsntYiKNdkC+U3JgvSOkzCHtE38o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:69:cf:64:b0:66:3c:88:03:06:cb:39:f4:dd:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4842f8262febd23d013d40a314d88e254b2a542
Validity
Not Before: Mar 29 13:01:30 2026 GMT
Not After : Mar 30 13:01:30 2026 GMT
Subject: CN=7e6079184d9cd09578ec219b09dc579a59a62619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7a:20:01:40:e9:19:9f:0c:4e:fa:bc:de:b8:
9f:12:92:65:4a:d8:71:e7:67:e4:84:64:2d:dd:9a:
61:f0:c3:c6:c2:e8:60:0a:6b:2c:44:82:8e:bc:8b:
e5:4e:49:91:e9:1f:0d:a3:83:98:bd:4b:dd:4b:6c:
a8:51:cc:a3:00:25:7f:85:15:de:6d:15:8f:f9:9c:
a9:0a:31:36:dd:ab:0e:44:b9:c8:0f:53:f3:8c:35:
bc:47:aa:33:64:26:73:37:8a:f1:39:ee:f1:1b:75:
42:f3:12:1e:ed:39:b2:96:65:d6:d9:85:0c:5e:a0:
ad:d5:15:85:96:5f:17:ac:50:2e:5d:72:65:e5:fe:
99:92:97:30:2b:cf:6f:99:d9:38:cb:ce:99:73:60:
7c:03:9d:b5:28:7e:24:f5:93:35:03:73:c2:cc:b2:
c9:49:d2:a8:64:26:cb:f9:5b:34:a3:1c:ae:52:5f:
ec:6b:71:73:bd:99:77:05:43:03:af:19:44:5c:a0:
45:c0:d5:20:49:a0:d2:6a:cc:27:98:52:19:18:6b:
24:eb:89:7a:55:d2:20:5c:40:39:16:46:2e:35:41:
01:78:c2:3b:df:32:54:fb:4c:72:85:3d:21:18:78:
da:6f:67:c0:e7:07:5c:b7:44:c4:11:a1:a0:d2:95:
d7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:60:79:18:4D:9C:D0:95:78:EC:21:9B:09:DC:57:9A:59:A6:26:19
X509v3 Authority Key Identifier:
keyid:C4:84:2F:82:62:FE:BD:23:D0:13:D4:0A:31:4D:88:E2:54:B2:A5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:9b:b8:40:4b:77:dd:6a:da:f4:ff:d2:97:49:16:dd:46:49:
aa:64:e2:ac:ca:97:f4:cc:1e:62:b0:ce:df:49:76:3e:03:0c:
80:c6:25:db:1a:51:4a:96:a8:96:54:29:a0:41:33:21:b2:b2:
dd:5c:3f:57:bb:25:a0:05:30:55:31:76:6b:d8:72:6f:3b:78:
3c:cb:7b:c2:aa:de:a3:08:19:a2:62:50:5a:07:c1:9d:c1:06:
85:5a:c4:3b:87:64:1e:89:9d:96:0c:3e:22:ef:39:81:c3:cd:
c6:e3:3c:3a:c3:40:a0:c9:93:7e:ac:96:a7:7e:d6:c1:43:6d:
79:de:03:a9:8e:0e:01:62:98:2b:3a:08:2a:82:5c:2d:1b:db:
8e:21:97:a9:6c:e8:05:cd:86:6c:82:6e:4d:57:6a:98:5d:20:
d4:f8:35:7a:98:53:fc:49:e9:93:02:81:7b:90:49:78:fa:2c:
21:8c:af:45:4b:6c:72:20:5e:b8:23:9f:fa:e3:a8:5f:c2:55:
91:79:0e:64:78:3b:0f:06:a7:4b:87:d1:f3:eb:8d:6c:31:57:
2c:01:f1:ba:4b:63:7e:96:94:24:d0:25:e2:86:8c:52:fa:2a:
60:c6:05:bf:be:60:88:d8:de:6d:73:52:7d:71:4f:9e:45:da:
59:6b:2c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:50 2026 by rpki-client