Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
File: xX5Yw0bntBVVDBOurdLPkO3QeJU.mft (raw, json)
Hash identifier: vI3bBaZ0e1trVsPOnGLaCHUuh5pMqfe5aSu9HCB4b5w=
Subject key identifier: 98:96:1F:7A:70:C5:9D:9C:BC:F4:F8:BC:B7:7E:53:94:19:20:C0:83
Authority key identifier: C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
Certificate issuer: /CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Certificate serial: 019D26CD6FEB6E5FE5B2DAE59D4717A3453A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 21:01:30 +0000
Manifest this update: Wed 25 Mar 2026 21:01:30 +0000
Manifest next update: Thu 26 Mar 2026 21:01:30 +0000
Files and hashes: 1: 1kAOPGpT_yO1V9aiYjzOs8fosJ4.roa (hash: uKDlJs0NDCjfdYnB+MfIB/jlA65konDisvJIGcTDJUU=)
2: 9j1B5LLZDXYRtu0JrlF53YNgDew.roa (hash: enCaw1pzt1wj9vxuJHJ4PKIp1awPrJly1Aljj7nxS5c=)
3: xX5Yw0bntBVVDBOurdLPkO3QeJU.crl (hash: 5UpmS8IvE4pdpsegHLgPNwE+Pyi/HsOMEW1kDEDWSYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:6f:eb:6e:5f:e5:b2:da:e5:9d:47:17:a3:45:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Validity
Not Before: Mar 25 21:01:30 2026 GMT
Not After : Mar 26 21:01:30 2026 GMT
Subject: CN=98961f7a70c59d9cbcf4f8bcb77e53941920c083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:61:08:79:f4:f4:5c:ce:5e:44:b3:1a:e4:af:
d2:82:8e:f5:7b:41:5c:87:82:cb:ff:54:a9:a8:e8:
07:f1:47:f2:a3:d0:95:b5:a6:f2:54:f8:16:85:0d:
32:09:6d:b2:3a:c6:62:f4:4e:c1:46:fd:b9:42:22:
7f:7f:ce:54:46:19:52:c0:88:6a:72:d0:87:74:a8:
2f:4d:35:00:5d:29:c2:94:e4:00:ae:6e:b5:d9:9b:
43:39:16:b2:7e:91:8b:0d:db:22:d5:dd:33:ba:49:
1c:ef:85:79:5d:68:eb:9b:52:46:a7:42:14:0b:e3:
05:19:be:a0:21:de:6b:d8:d5:98:c6:9e:78:ce:77:
59:e3:bb:c9:42:1b:c6:66:8d:8d:be:0c:68:c5:f0:
bd:e2:6b:68:31:aa:c6:7b:17:cc:de:dc:5b:f6:c0:
f7:75:7a:a6:ea:0b:83:68:88:0a:e3:30:34:50:48:
a7:9a:0c:6e:9d:40:34:fe:d9:27:f8:4a:31:d8:f6:
20:d2:9f:84:85:03:5a:c7:0d:3e:75:8f:b1:02:fb:
37:69:9a:6f:cd:b4:24:17:6c:f7:13:aa:7a:09:a4:
82:53:87:23:d5:a0:ff:c1:08:36:79:30:71:b7:ef:
ca:15:dc:43:a8:67:94:48:6f:17:dc:e8:1e:85:c6:
b1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:96:1F:7A:70:C5:9D:9C:BC:F4:F8:BC:B7:7E:53:94:19:20:C0:83
X509v3 Authority Key Identifier:
keyid:C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:98:e9:17:63:28:ac:ec:21:12:f3:1b:10:e3:1d:2c:6f:32:
49:a8:79:5c:75:df:66:e2:30:87:74:ec:05:22:40:a3:47:1a:
67:a2:93:a4:92:6c:72:fb:bd:0d:6f:c6:df:dc:02:6d:11:6f:
4c:61:a9:f9:ac:2e:fb:82:22:d9:94:e8:fb:cc:e0:09:c3:87:
48:14:2b:1a:fa:a9:3d:59:eb:ef:dd:14:74:5e:be:d6:e1:d8:
05:09:96:20:24:c0:3c:e9:e5:4f:d3:17:70:b1:80:3d:0c:3a:
f5:0d:42:ec:85:3a:03:c0:9c:41:ad:7e:32:47:0f:62:21:f8:
91:97:60:39:c1:d9:9e:46:87:04:de:bb:05:5f:a8:81:7a:f5:
e8:4a:80:5b:6b:3c:06:81:9a:ea:34:86:ca:7b:54:99:28:c6:
34:cf:86:fc:34:fb:62:1b:bc:f2:1a:60:50:65:24:57:5a:7b:
ad:aa:18:99:60:70:a9:d5:84:8a:68:a0:e1:d1:7b:8e:51:68:
6d:9d:45:67:e8:77:8a:15:e5:25:bb:28:36:46:33:f4:61:0b:
08:f9:0b:1c:99:1b:96:5d:52:3d:9c:28:89:f9:8f:e9:1b:98:
20:3a:5f:0f:5a:ef:e4:cd:5e:40:37:b7:db:1f:57:7b:38:f3:
ed:a2:40:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:33:12 2026 by rpki-client