Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
File: xt_rrIt1RREi-RT8oCTuH1QXyrs.mft (raw, json)
Hash identifier: pDHJ4YUGxhkol/HxYR0c7Ih2Lo0aW3BJjdkZY+BVP+w=
Subject key identifier: 2B:9B:CC:58:10:79:42:56:90:78:EC:73:A2:1F:83:FC:CB:90:A3:BC
Authority key identifier: C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
Certificate issuer: /CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Certificate serial: 019D389BCAB3E2439EDB8DF55189BF00B5B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 08:00:27 +0000
Manifest this update: Sun 29 Mar 2026 08:00:27 +0000
Manifest next update: Mon 30 Mar 2026 08:00:27 +0000
Files and hashes: 1: LXxDQYBI8a2bgUeaO6Um5RWeWus.roa (hash: eyN2GAZCoXjAEdKeBKmxr2YBtVYHGsGtrSqCUIPElRo=)
2: xt_rrIt1RREi-RT8oCTuH1QXyrs.crl (hash: iDuvKVq6LY1ULNJbwIm3qqWDbnnAIpemAC4Ej9A2I5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ca:b3:e2:43:9e:db:8d:f5:51:89:bf:00:b5:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Validity
Not Before: Mar 29 08:00:27 2026 GMT
Not After : Mar 30 08:00:27 2026 GMT
Subject: CN=2b9bcc58107942569078ec73a21f83fccb90a3bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:56:76:a2:34:3f:8f:90:a7:5a:c4:6d:78:48:
2b:a5:11:cf:f0:14:f2:3c:73:15:14:86:63:b9:6c:
e4:1c:24:42:19:ad:97:bf:36:f2:30:8f:2c:7f:32:
0c:0f:01:be:01:ee:98:9d:96:c0:e7:83:c1:f5:da:
8e:d6:f9:c3:f7:e6:82:ef:9e:16:98:eb:46:d2:23:
0f:2f:ca:34:a5:01:d6:9a:1d:89:b0:1e:38:45:80:
73:d7:ce:b9:61:a5:49:93:df:52:63:6b:a9:93:8d:
87:81:3a:90:fb:9d:72:86:a1:b2:28:87:e4:8f:0b:
91:10:84:df:a7:8e:46:26:57:d2:9a:61:6c:af:2f:
96:4e:27:66:92:d1:38:0f:9a:9d:19:db:52:f9:0d:
d6:ab:0c:88:96:bc:fa:70:b8:bf:0a:4e:7a:71:ed:
67:65:73:10:33:22:50:14:b8:54:18:b1:c5:e2:0c:
85:fc:ce:5e:9a:2e:ca:b0:a7:d2:64:16:0d:83:00:
6f:3b:49:e6:57:e8:e1:c1:a5:e8:66:b7:be:30:56:
da:44:d7:58:00:24:51:c6:57:8c:7f:2f:c8:c0:8e:
a9:b6:73:ce:cb:3a:80:cf:b3:ef:5a:49:6d:ec:14:
cf:f1:cd:d6:ed:35:8d:63:0f:93:6d:b8:c4:10:64:
f7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9B:CC:58:10:79:42:56:90:78:EC:73:A2:1F:83:FC:CB:90:A3:BC
X509v3 Authority Key Identifier:
keyid:C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c9:16:5d:9e:4d:b1:b6:4f:f1:3a:5b:2d:1a:67:94:e1:2c:
7a:35:5f:b5:c6:f9:b4:37:61:44:cc:76:a2:06:e9:bd:a6:5e:
57:58:28:d7:b3:b3:b6:0c:37:41:5d:dc:88:50:47:73:46:7f:
88:0c:88:e2:9c:5f:a7:09:84:2c:14:8e:43:57:74:6b:5c:74:
6b:76:53:21:f2:8d:f3:c4:9a:4a:e4:8c:99:c3:95:4d:1f:2a:
7e:2f:29:58:39:26:fe:1c:c3:ac:45:fb:35:18:c3:33:bd:5e:
c2:da:a7:ff:7b:cd:d5:87:44:f7:ad:2e:a7:85:77:e5:23:65:
2a:1f:bc:d1:b2:ba:64:4f:b1:2b:7d:ba:90:21:d3:a9:ba:c7:
e0:b7:c8:fb:f2:55:08:a9:c0:2f:e0:a8:91:f7:02:51:93:1f:
7c:06:55:e7:e4:3d:67:1b:93:dd:08:28:d7:df:ec:d0:f6:6f:
3a:b8:3f:fb:04:95:f0:9d:9f:d6:f5:bd:67:43:31:69:35:9b:
52:21:3a:1d:f4:bc:62:5d:c1:b0:b8:b4:67:65:b4:81:9b:05:
9e:03:42:32:71:68:35:1d:67:93:50:09:b6:eb:c9:3b:89:82:
a5:e6:86:01:30:1d:8e:4d:0c:98:5d:97:82:0f:f3:65:a3:e7:
c3:0b:1d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:05:01 2026 by rpki-client