Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
File: xVCFAF0ORJ07r6McXLQp_4nSxLc.mft (raw, json)
Hash identifier: +gobtJXWwvWC+kSmfv63OuLxg/ZoyB7qLMx4ySdRZRk=
Subject key identifier: A2:4C:BB:22:60:BB:7C:98:CE:AB:56:85:B4:E3:0C:BB:FD:AA:93:F1
Authority key identifier: C5:50:85:00:5D:0E:44:9D:3B:AF:A3:1C:5C:B4:29:FF:89:D2:C4:B7
Certificate issuer: /CN=c55085005d0e449d3bafa31c5cb429ff89d2c4b7
Certificate serial: 019D26CD15DB178FCDD6ED539E8B50CD6EDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 21:01:07 +0000
Manifest this update: Wed 25 Mar 2026 21:01:07 +0000
Manifest next update: Thu 26 Mar 2026 21:01:07 +0000
Files and hashes: 1: AeS4mieXzUqA4uwiNDkMCtqXsxo.roa (hash: XlaYDtDtth/9oxGh0H1TjUe63WNIoo3CA9/O+obTGX0=)
2: xVCFAF0ORJ07r6McXLQp_4nSxLc.crl (hash: Wm/Yz7A9s31etBCLC2/1A0bAmybEEAHsXUs0fqS+F+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:15:db:17:8f:cd:d6:ed:53:9e:8b:50:cd:6e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c55085005d0e449d3bafa31c5cb429ff89d2c4b7
Validity
Not Before: Mar 25 21:01:07 2026 GMT
Not After : Mar 26 21:01:07 2026 GMT
Subject: CN=a24cbb2260bb7c98ceab5685b4e30cbbfdaa93f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ad:6c:66:8c:e4:fb:4f:86:ce:84:5d:91:b9:
bc:3a:76:cb:90:94:90:d0:50:63:9c:42:4f:ef:f0:
3f:10:63:1c:79:6a:da:92:b0:30:ed:34:60:e1:a0:
82:cb:3f:83:2b:03:3f:7d:bf:73:68:92:c6:81:68:
84:08:5e:bc:aa:cc:4d:56:1a:6a:7f:9e:3f:0c:1d:
05:8f:84:2e:92:3d:40:5a:ba:cb:4b:01:04:c0:cd:
6c:4c:23:9e:6b:d5:78:a1:c0:77:de:95:f8:a0:da:
ff:35:ab:a2:f3:72:90:6e:05:d5:ff:fd:b1:7b:2b:
80:39:9c:d6:0d:0c:d8:eb:a0:51:2e:3f:c1:ca:38:
a3:6e:40:da:70:c4:e1:ff:51:ea:b1:60:dd:76:92:
dc:21:09:5e:cd:68:2e:38:5c:04:0c:51:ef:e1:0b:
36:c3:26:8c:75:a8:aa:72:07:f6:66:26:13:c1:f5:
ac:1f:07:fe:ca:bd:bd:68:c6:8f:a6:77:23:6d:7d:
b0:fc:bc:5c:ed:85:35:c8:f6:6d:ad:1a:3e:bf:ef:
6a:8f:50:78:cf:eb:71:59:cb:3d:28:48:35:43:3a:
fa:08:ba:42:48:79:72:69:09:b3:8a:22:3f:b5:81:
7a:b7:29:4b:f0:7d:7d:fb:c9:ee:2f:8b:79:73:f9:
8e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4C:BB:22:60:BB:7C:98:CE:AB:56:85:B4:E3:0C:BB:FD:AA:93:F1
X509v3 Authority Key Identifier:
keyid:C5:50:85:00:5D:0E:44:9D:3B:AF:A3:1C:5C:B4:29:FF:89:D2:C4:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:3f:9f:27:eb:26:50:a6:f1:c5:a2:ff:d6:08:58:9b:21:a2:
94:4e:64:f1:6d:65:68:6a:93:6c:2c:fd:4f:11:6d:07:40:74:
13:71:5f:3d:fe:c1:4f:50:d7:12:97:f1:82:0f:d0:ac:24:17:
1a:0b:22:76:fb:c1:4f:60:b3:6f:9e:5e:31:a2:36:04:20:91:
92:be:03:13:a5:54:d9:fa:26:ef:a2:41:13:49:d1:10:67:31:
4a:0f:23:d9:b9:9a:ab:15:cb:87:d6:66:bf:d0:d0:0a:00:dd:
a0:cd:c4:61:ae:27:e2:60:8a:78:f7:5e:f3:1a:d5:a9:b6:11:
54:3b:50:c8:d0:2b:ae:fb:ba:93:80:d0:8c:93:4d:91:f0:6b:
72:b6:d8:52:f8:37:66:21:38:6c:c7:29:de:e7:33:da:a5:23:
a5:44:ef:65:6a:d8:e1:c6:5b:03:c9:eb:ab:ab:e8:bc:06:f2:
00:90:68:cf:41:7e:c2:c8:17:2f:bb:55:08:c2:50:2f:7c:cf:
17:8c:e7:9b:96:1f:c7:e7:bd:41:dc:7e:b6:6b:90:32:c8:d5:
9c:10:7e:40:8c:c0:40:d7:c2:47:22:2e:f3:02:be:c8:3e:be:
fc:1f:75:f3:57:22:2d:89:cf:df:c0:79:28:f0:d7:fb:b7:c6:
17:d4:44:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:09 2026 by rpki-client