Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
File: xmCFijitXhG3sYk5KIO8g-trNh0.mft (raw, json)
Hash identifier: o4XpU8FaHgLxFMFx9L97ZUvx3frJaNrssH+HUzuNaDs=
Subject key identifier: 74:11:CB:95:F0:BD:FC:8A:16:23:31:CF:A2:C7:DF:39:D8:DB:7C:11
Authority key identifier: C6:60:85:8A:38:AD:5E:11:B7:B1:89:39:28:83:BC:83:EB:6B:36:1D
Certificate issuer: /CN=c660858a38ad5e11b7b189392883bc83eb6b361d
Certificate serial: 019D254CA51907EFBD3BE0467C64668436F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 14:01:13 +0000
Manifest this update: Wed 25 Mar 2026 14:01:13 +0000
Manifest next update: Thu 26 Mar 2026 14:01:13 +0000
Files and hashes: 1: xmCFijitXhG3sYk5KIO8g-trNh0.crl (hash: C5pZFAlywURMPuY5m+g6TjsuzYU3pRQ8+HCbU7DAVSQ=)
2: xpQHQe9JK1CUe7FrE6UQJmb2ot8.asa (hash: 4NpowpxrTh5AKJl4K8wnIP5UZeAISCMu/TY3f9v3FM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:a5:19:07:ef:bd:3b:e0:46:7c:64:66:84:36:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c660858a38ad5e11b7b189392883bc83eb6b361d
Validity
Not Before: Mar 25 14:01:13 2026 GMT
Not After : Mar 26 14:01:13 2026 GMT
Subject: CN=7411cb95f0bdfc8a162331cfa2c7df39d8db7c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1a:88:d1:17:c8:ed:c6:f3:2b:1c:59:9a:38:
0a:93:6d:f5:4e:24:00:df:0b:ba:79:63:63:5a:c0:
36:d4:91:84:52:a9:a5:a5:5f:c0:68:89:a2:26:ae:
d3:0a:e5:a9:5b:3b:3a:7a:88:23:a7:d7:77:e7:7e:
97:21:8a:46:c7:b2:68:0a:0c:56:90:56:72:cb:c9:
5f:c9:18:b3:4e:13:fe:70:98:21:b4:76:ae:a2:7b:
54:81:67:f7:2c:fc:91:e2:4a:21:69:18:f1:97:d2:
d6:8c:63:99:59:04:98:0d:9a:09:07:b9:54:9d:0e:
e3:1e:21:8f:ae:ee:64:77:05:d8:53:f4:60:4b:42:
52:64:d2:41:29:57:d4:9c:c6:5c:91:40:a5:e6:28:
ed:57:4d:05:02:2e:01:f0:6c:c8:c3:ea:79:f4:49:
6c:27:43:01:66:b6:06:e9:48:07:3a:3a:a6:f6:d9:
cc:d9:0a:1c:bb:fe:8a:76:b1:7a:51:f5:ef:84:a1:
a1:34:06:33:70:d7:4c:b5:3e:a2:bc:63:6c:18:49:
6c:24:8c:97:92:b8:cc:95:99:2e:cd:18:48:b3:90:
2a:be:00:42:fa:c4:1c:38:75:bb:be:45:0b:b5:e7:
d5:9d:f5:19:3f:39:8b:3d:0f:42:d3:9a:94:7f:9b:
6e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:11:CB:95:F0:BD:FC:8A:16:23:31:CF:A2:C7:DF:39:D8:DB:7C:11
X509v3 Authority Key Identifier:
keyid:C6:60:85:8A:38:AD:5E:11:B7:B1:89:39:28:83:BC:83:EB:6B:36:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:b4:31:45:58:a2:f3:07:4f:ef:dd:52:5a:4a:24:5c:78:47:
7f:72:bc:87:4a:20:ba:5d:be:fd:17:7e:d8:b6:b4:cf:9f:3d:
9b:d9:a9:6b:36:3a:1b:cf:b3:d4:a4:69:02:58:ad:64:a0:8f:
7b:3d:37:b9:55:4c:6e:35:35:e4:cf:e4:10:1b:b6:30:dd:28:
81:b2:0d:c4:e1:99:1a:06:a6:07:23:5f:72:1f:f8:87:99:10:
13:b7:53:6c:40:d4:21:fb:fb:ea:2a:25:b4:f9:4b:1b:9c:c7:
87:4d:22:e6:e4:e4:e3:45:47:b7:8f:9d:81:29:40:54:a9:41:
2a:4a:b5:3e:38:8d:dc:9c:b3:df:8b:9b:cf:9f:d2:d6:92:9c:
ab:73:79:0f:15:32:89:ec:e2:be:66:7d:9d:6c:95:34:d2:d8:
e7:4d:8f:6a:66:02:cb:3d:fb:34:67:2b:bc:e3:cc:63:22:e1:
9f:51:49:6f:d1:d0:cb:76:b9:de:1f:fb:72:c7:3f:60:a0:14:
35:00:1c:20:fc:32:68:b2:03:90:7c:8f:57:82:a6:70:0c:ba:
df:df:25:e3:e5:41:80:89:df:53:09:ae:30:c1:5f:50:61:b4:
23:ea:0a:91:51:5b:38:41:a8:46:e3:7e:eb:e4:5c:df:fb:89:
54:93:29:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:18:05 2026 by rpki-client