Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
File: xPiLXG5RFuUM8rW99D6HIPHYxg8.mft (raw, json)
Hash identifier: iJrYxMsln4NcQAxLXV5wjYPQvSXpmph9YRh1awhpHno=
Subject key identifier: 98:10:60:16:21:97:1C:2E:0D:6C:36:1D:3F:4D:42:50:71:51:2F:40
Authority key identifier: C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
Certificate issuer: /CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Certificate serial: 019D28BB85B687D0D9B02030BA00B6595002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
Manifest number: 133B
Signing time: Thu 26 Mar 2026 06:01:11 +0000
Manifest this update: Thu 26 Mar 2026 06:01:11 +0000
Manifest next update: Fri 27 Mar 2026 06:01:11 +0000
Files and hashes: 1: 02JNfVWYOVA2OBy17TDgR9y7do8.roa (hash: x5I0ROnfJh237cohKlOyZemzpgBQnX/4IqZy8ejhw3c=)
2: 5VBhehblaiOfuUShpivHuAhNqvU.roa (hash: SLWl0V7yJEtG44gZ1JVp2uNJOky4M2j+U4CHDGRdNIM=)
3: xPiLXG5RFuUM8rW99D6HIPHYxg8.crl (hash: Bz5IPpgDIZWgjHPo4eylVNT0KGHUOOyW4GUM86mLL4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:85:b6:87:d0:d9:b0:20:30:ba:00:b6:59:50:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Validity
Not Before: Mar 26 06:01:11 2026 GMT
Not After : Mar 27 06:01:11 2026 GMT
Subject: CN=9810601621971c2e0d6c361d3f4d425071512f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b4:3b:3d:dd:f8:94:98:0b:c0:46:6b:15:2c:
49:10:3b:5d:f9:75:a3:dd:f8:c1:cc:c9:ad:54:ba:
9e:cd:5e:89:05:0e:0e:59:02:7d:9a:22:9b:50:d1:
fd:ce:25:b6:5e:25:93:b8:fc:58:af:56:b2:02:cd:
59:12:9f:e8:7b:62:7d:34:6c:79:ad:ac:b2:87:1d:
ef:df:24:41:04:7f:ed:cf:ce:bd:22:a8:19:a9:30:
4f:78:cb:41:3f:77:f5:a0:3b:86:16:85:43:bb:78:
d8:7a:15:46:08:00:16:c3:9d:4f:12:48:a3:3b:ad:
44:fc:13:08:78:60:6b:fb:85:da:8e:6a:46:9e:b0:
a4:10:92:c9:68:03:b2:f7:ed:6a:84:06:9e:99:3d:
56:c0:fa:a5:cb:f1:08:6a:cc:13:46:02:7e:bb:ba:
00:36:57:29:71:09:b6:77:eb:ce:c5:e0:f0:92:f8:
97:89:79:33:d7:73:4b:0d:a2:c1:fa:23:47:39:40:
f3:d5:8f:61:f8:ac:f5:0c:8b:16:0b:c6:e3:da:fa:
6b:57:d7:2f:ca:97:f7:10:6c:5e:59:66:8b:ce:5e:
59:05:0b:dc:d4:99:76:ab:2c:0b:a7:a3:6d:e6:f6:
ae:5d:95:37:50:24:c0:28:ee:36:a6:cf:93:2d:81:
29:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:10:60:16:21:97:1C:2E:0D:6C:36:1D:3F:4D:42:50:71:51:2F:40
X509v3 Authority Key Identifier:
keyid:C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:86:ee:51:04:b6:76:f9:8f:a4:3f:5e:29:8f:9f:5b:93:a9:
d7:ca:44:28:af:c4:55:57:2d:4a:c8:45:0d:e9:75:18:13:b8:
8b:bf:6f:c4:3e:df:b5:8e:7a:12:d1:d8:0a:f1:b1:69:df:d5:
f3:46:de:4c:9f:90:7f:7d:55:8a:ce:45:f6:f0:fb:1d:48:5e:
3c:75:50:d3:9f:bb:94:d4:3e:79:88:6b:d6:f7:b9:ee:e7:40:
af:6c:8a:71:ad:c5:28:5f:e6:ad:b0:27:cc:de:a3:33:f8:fd:
92:69:e0:62:b9:32:ce:2c:8e:7a:2f:b5:75:af:d3:2f:c6:d4:
7b:e5:da:9c:36:77:24:e8:94:c3:17:32:28:42:62:12:79:01:
17:5f:0b:53:d0:03:24:a1:bc:78:6c:66:34:f0:f7:fb:bb:17:
b9:14:97:a1:fd:21:98:ec:c4:79:52:88:59:4f:60:a3:ff:c6:
bd:c7:c1:af:96:68:24:c1:66:39:79:e6:39:30:f9:df:3f:4f:
de:27:87:e7:b2:35:74:f0:ae:fe:76:fc:6f:23:f4:1d:93:49:
43:99:f4:28:57:31:33:e6:4b:10:80:f1:7c:63:e4:20:e0:4e:
83:cd:6b:79:5c:9a:b9:83:b7:cc:94:5a:2c:93:3f:1c:37:bf:
7f:9c:2e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:28 2026 by rpki-client