Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
File: xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft (raw, json)
Hash identifier: Lj8TSbUqi2OCuuROESCWNU7O19aEKE3GwyuBKo0vPXI=
Subject key identifier: DF:75:2D:E6:1D:1F:A3:AF:05:F9:39:CD:B0:10:61:07:B9:0F:DD:D3
Authority key identifier: C7:22:AD:43:47:1B:60:6B:CC:85:3B:BA:11:B8:ED:66:3C:15:18:82
Certificate issuer: /CN=c722ad43471b606bcc853bba11b8ed663c151882
Certificate serial: 019D390A4973B953478E194A388A4397B670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
Manifest number: 0F7C
Signing time: Sun 29 Mar 2026 10:01:08 +0000
Manifest this update: Sun 29 Mar 2026 10:01:08 +0000
Manifest next update: Mon 30 Mar 2026 10:01:08 +0000
Files and hashes: 1: mLbMcmnO4JRmubQP1AmCwO0ZZgA.roa (hash: vJDJ7XvSOkplRv6UMGVogwJjO5lohuWAIXAROmc7RJg=)
2: xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl (hash: CKP8tpLtJgxZUcmsHvfytUef2ToC9GGJgCZXsqUC54w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:49:73:b9:53:47:8e:19:4a:38:8a:43:97:b6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c722ad43471b606bcc853bba11b8ed663c151882
Validity
Not Before: Mar 29 10:01:08 2026 GMT
Not After : Mar 30 10:01:08 2026 GMT
Subject: CN=df752de61d1fa3af05f939cdb0106107b90fddd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7b:a2:75:b8:2c:0e:45:38:07:0b:27:05:a8:
ad:3c:b5:3a:ad:3c:5a:75:5c:de:2b:3d:36:90:16:
19:3a:1a:a4:e1:f8:8f:20:c0:ad:d5:b2:75:94:43:
a4:3b:1b:8a:7a:ad:46:1f:f1:29:e1:36:e8:49:e4:
94:88:5b:72:a0:fc:d8:f0:46:0f:2c:1e:38:d4:25:
78:c7:83:ac:21:44:83:c0:e6:d3:67:e9:70:11:5f:
65:ca:96:8f:51:7d:c2:51:73:12:13:25:0c:15:e9:
c1:65:ac:24:99:6c:4d:69:15:3d:8c:43:91:8f:f8:
e1:d7:2f:33:d2:29:d0:ee:de:f8:a5:63:d5:46:aa:
b7:cd:a6:c6:b5:34:0f:4e:d3:fb:bc:60:7a:1f:98:
31:09:0c:82:27:9f:ff:2c:a7:0e:c2:79:5f:ea:21:
34:b5:f7:5f:eb:61:91:e5:df:f5:68:3b:84:d9:10:
29:6e:19:fd:c4:c0:e2:31:a1:17:69:c9:7f:84:a7:
5e:ca:ca:4c:15:04:2b:6a:fd:e6:d9:55:58:70:ad:
67:8e:d8:b7:f1:80:af:de:6c:27:5d:de:26:fb:b9:
31:5a:bb:5e:8b:ca:be:73:74:c0:5f:3c:8a:42:c7:
87:c1:e6:12:4c:2b:51:6c:6c:9f:59:36:c1:9e:72:
81:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:75:2D:E6:1D:1F:A3:AF:05:F9:39:CD:B0:10:61:07:B9:0F:DD:D3
X509v3 Authority Key Identifier:
keyid:C7:22:AD:43:47:1B:60:6B:CC:85:3B:BA:11:B8:ED:66:3C:15:18:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:85:c8:fd:24:cb:b7:ae:7e:6e:ce:67:07:8b:e3:7a:98:12:
8a:2b:19:54:78:84:eb:5c:f6:16:82:44:f1:61:02:9a:77:f3:
81:01:84:99:02:dc:ef:0e:5a:0e:45:f1:98:61:5d:86:f7:ad:
a5:63:6d:88:a6:2c:98:14:01:65:ba:10:81:b8:f2:e4:16:8e:
19:a0:38:a3:49:fb:6a:1b:42:91:ec:61:7e:90:af:c7:e9:dc:
15:89:8b:bf:9f:2f:b4:41:4d:56:68:c0:d9:39:88:2b:a8:ab:
86:ba:ef:17:85:b1:c9:99:4f:d8:ad:da:0d:94:d3:eb:5e:a8:
bc:46:c6:0d:73:00:c0:b5:67:5c:11:eb:d4:a2:29:66:57:82:
41:f5:2c:a5:b2:e7:6f:a0:33:66:de:98:0c:4b:c0:1e:7f:98:
50:f2:c0:38:a0:1c:8b:a4:f2:da:93:04:bd:d7:14:39:2c:ac:
80:0b:cf:c2:75:65:2e:e6:75:17:1b:cf:0b:06:cf:77:ae:4d:
eb:ec:09:20:30:b5:71:3c:81:ab:9d:b3:52:d3:7e:e0:6f:8c:
3f:16:6e:49:1a:5f:43:86:ef:64:29:b4:ee:7a:81:f6:b3:2d:
d2:0f:18:fe:5d:cd:cd:d7:15:24:e1:a6:c7:5a:a0:af:98:9c:
e1:38:24:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:34 2026 by rpki-client