Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/75ad91-fcfc-4cf4-ab22-d0f9804a9f1e/1/xa0QdigFcZJWQLKu2jnMCXTAbOI.mft
File: xa0QdigFcZJWQLKu2jnMCXTAbOI.mft (raw, json)
Hash identifier: 7kHtS91fo1qMpXRJshmCWqrbk3oniG+cx3GfzloXWJM=
Subject key identifier: A1:47:5F:AB:6D:76:69:15:81:40:BA:AC:41:D2:37:C6:74:54:48:38
Authority key identifier: C5:AD:10:76:28:05:71:92:56:40:B2:AE:DA:39:CC:09:74:C0:6C:E2
Certificate issuer: /CN=c5ad1076280571925640b2aeda39cc0974c06ce2
Certificate serial: 019D2704BB04DB760583E322944D95B324D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xa0QdigFcZJWQLKu2jnMCXTAbOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/75ad91-fcfc-4cf4-ab22-d0f9804a9f1e/1/xa0QdigFcZJWQLKu2jnMCXTAbOI.mft
Manifest number: 0220
Signing time: Wed 25 Mar 2026 22:01:54 +0000
Manifest this update: Wed 25 Mar 2026 22:01:54 +0000
Manifest next update: Thu 26 Mar 2026 22:01:54 +0000
Files and hashes: 1: P5Ui-kpK1vPEVB2STEDpzBGxxlw.roa (hash: Vs4q2Ik9ZC5mr3F9AYR74hlHqbCCUasP+9HpkK/Vnao=)
2: xa0QdigFcZJWQLKu2jnMCXTAbOI.crl (hash: EK4vdCXUK/cqIH7aEbToJ4oi+ZxB96vbrd/Cf78SlfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/75ad91-fcfc-4cf4-ab22-d0f9804a9f1e/1/xa0QdigFcZJWQLKu2jnMCXTAbOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/75ad91-fcfc-4cf4-ab22-d0f9804a9f1e/1/xa0QdigFcZJWQLKu2jnMCXTAbOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xa0QdigFcZJWQLKu2jnMCXTAbOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:bb:04:db:76:05:83:e3:22:94:4d:95:b3:24:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ad1076280571925640b2aeda39cc0974c06ce2
Validity
Not Before: Mar 25 22:01:54 2026 GMT
Not After : Mar 26 22:01:54 2026 GMT
Subject: CN=a1475fab6d7669158140baac41d237c674544838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:64:95:8c:03:92:dc:1f:e0:8d:09:46:0c:6c:
40:1a:31:66:60:fa:7f:6a:b2:3f:73:4d:89:aa:bd:
68:9a:16:e8:7e:08:7d:d0:31:e0:88:4e:41:27:5e:
bd:22:16:2a:5c:15:ab:cf:42:bf:db:9d:ea:18:36:
d4:84:09:5f:7c:68:04:b3:8b:37:73:2b:df:08:e8:
0f:a1:13:91:3a:72:db:59:82:f7:1a:16:ac:c5:c2:
b9:b0:a4:18:1e:55:a3:30:1c:43:00:e0:e8:a6:55:
50:46:66:b2:8c:8e:5f:77:23:0a:ce:d6:97:ca:c9:
36:3b:cd:16:d0:ad:c5:fd:38:be:a4:5c:53:57:b4:
13:2e:1b:56:8a:d1:7a:de:04:8b:ec:a8:5a:99:2a:
80:07:d2:1d:6e:c1:1c:ac:d6:e5:7a:b6:5f:b2:80:
62:83:77:44:bb:08:27:cc:1e:8a:54:9c:79:91:fc:
ef:c3:29:04:b3:b4:49:21:c0:fe:bc:83:3c:7b:3b:
6e:45:3a:6a:cd:d0:16:ea:32:e4:3b:36:6f:e9:43:
c4:03:40:59:29:b5:1e:97:1c:3a:52:6e:a6:01:71:
45:3f:dc:e7:da:ae:b0:1f:c5:84:18:3b:bd:a0:b0:
78:82:66:4e:db:15:03:47:ff:99:cc:8c:54:a7:05:
4d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:47:5F:AB:6D:76:69:15:81:40:BA:AC:41:D2:37:C6:74:54:48:38
X509v3 Authority Key Identifier:
keyid:C5:AD:10:76:28:05:71:92:56:40:B2:AE:DA:39:CC:09:74:C0:6C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xa0QdigFcZJWQLKu2jnMCXTAbOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/75ad91-fcfc-4cf4-ab22-d0f9804a9f1e/1/xa0QdigFcZJWQLKu2jnMCXTAbOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/75ad91-fcfc-4cf4-ab22-d0f9804a9f1e/1/xa0QdigFcZJWQLKu2jnMCXTAbOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:30:44:c3:3b:f0:25:91:37:a1:78:d0:6a:2f:ad:bb:2b:aa:
69:fd:ae:66:0f:6d:c0:44:76:f1:85:93:f7:3c:37:0b:98:b9:
04:f7:7a:50:6b:08:67:7f:7c:d7:01:37:ee:45:da:1b:ce:44:
6b:94:d5:3a:01:f6:07:44:60:37:38:52:92:b6:2c:e5:40:6f:
57:ef:8e:24:f1:69:e3:cd:ba:bd:77:de:39:17:d5:b0:e8:9e:
b6:2d:38:c1:ee:b9:79:19:8d:3c:29:b6:49:db:07:97:63:e3:
8b:a2:d9:fb:60:dd:a1:32:6d:60:1a:8d:de:8a:45:25:f1:a7:
5d:d4:e8:c0:6d:68:91:83:e0:fd:9f:f6:55:de:31:5e:2a:65:
7a:5c:14:d5:68:e3:5e:4f:8e:00:e6:42:f2:82:4f:42:9b:16:
28:6f:c9:e3:f1:a4:88:da:3c:c2:57:5b:21:83:cc:f6:0b:f5:
58:c0:d6:46:5d:21:c9:53:97:cf:02:fe:ef:b1:0a:90:3a:a2:
fd:90:dd:91:68:31:09:a6:36:1f:3c:9f:c2:88:5e:4d:12:ff:
92:04:92:19:49:33:05:19:7d:0b:f1:e7:d6:e7:83:9b:81:56:
ac:c1:1b:a1:1a:db:d6:68:59:96:43:a8:62:33:18:db:87:6b:
eb:d9:12:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:11 2026 by rpki-client