Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
File: xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft (raw, json)
Hash identifier: BNhtZwtSiN2CI2PCPbVK+4zuyfWusVRobVaaz9Tbb8E=
Subject key identifier: 5B:B2:F8:B6:40:02:AD:27:6F:9C:46:92:87:FA:2E:5D:4E:B0:47:8B
Authority key identifier: C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
Certificate issuer: /CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Certificate serial: 019D2A04C435C9530173E7E57DDAF98D698E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
Manifest number: 1895
Signing time: Thu 26 Mar 2026 12:00:48 +0000
Manifest this update: Thu 26 Mar 2026 12:00:48 +0000
Manifest next update: Fri 27 Mar 2026 12:00:48 +0000
Files and hashes: 1: 7qKY5-kl-qaVMoRIB3RG5oNUdf0.roa (hash: L6u//TWO0oG/8Tdr3Tg8lfsVqZiNaM1y0Ryf8hK01sg=)
2: PPXNJhyqSJSHAcVtgk0VztMlglY.roa (hash: ex9cUqmNLS12UIvKYIuoCv8mQvwQVbCS289sS1wTF3M=)
3: e6h2n9XnoiZKNpyZDuWS--kogbA.roa (hash: tWYIKN6aFchD9ZG77xZYhxaLu1YeirWOa5ux4eeE0kw=)
4: lNE8D9GJWfcd-D9egVK1TMPitC0.roa (hash: 2CmJCZprp/LCt6ibHBoiFVrP1YcZuqexjzFdiTh77oM=)
5: xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl (hash: tY5gwk/li7+lZ7qtFuTEjIflbRn18kw5JhJIcOkJD7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:c4:35:c9:53:01:73:e7:e5:7d:da:f9:8d:69:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Validity
Not Before: Mar 26 12:00:48 2026 GMT
Not After : Mar 27 12:00:48 2026 GMT
Subject: CN=5bb2f8b64002ad276f9c469287fa2e5d4eb0478b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9e:72:f0:4f:c1:18:58:08:1a:6c:8b:ec:ee:
e1:dc:c0:6b:c3:ee:b4:31:d5:3b:78:45:37:ef:76:
31:49:72:60:4f:2b:f6:0c:c0:72:c6:40:10:4d:d1:
d8:e8:95:28:ba:28:68:90:4b:30:a5:b4:af:44:86:
63:cb:f4:91:4c:7d:ca:6d:7b:bb:0f:c6:6a:00:d5:
2c:66:2d:97:db:37:cd:90:9b:77:77:ae:32:55:1a:
a3:31:e9:bb:65:85:82:b1:47:7e:59:5f:74:36:ca:
e2:34:1d:60:a8:ba:9e:9e:a9:cf:d8:c0:c3:c0:8a:
1f:dc:8c:47:73:8f:53:69:35:68:6e:56:02:db:a1:
dd:c2:07:0c:68:bf:52:2d:4b:6d:24:67:61:79:4a:
17:a1:83:39:7e:f2:41:df:8f:9f:b1:0b:30:f0:bf:
9b:44:46:b5:a7:6d:26:8a:2a:a4:31:ff:cd:16:b6:
3a:fd:7a:b0:6f:12:53:a9:95:5e:5c:0a:8a:c1:f9:
62:ff:61:16:9a:25:64:c3:33:da:9f:34:d4:58:2c:
33:d5:21:d1:85:e2:89:d1:b8:f4:64:71:7d:65:20:
9d:6b:e4:6d:35:4a:2f:42:06:3f:a0:90:53:85:95:
96:d7:98:14:c2:e2:b8:82:1f:7a:c9:86:7f:27:22:
1a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B2:F8:B6:40:02:AD:27:6F:9C:46:92:87:FA:2E:5D:4E:B0:47:8B
X509v3 Authority Key Identifier:
keyid:C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:30:41:3f:5f:76:9c:32:0b:03:7b:9f:e3:52:1a:f3:d2:21:
a5:e3:f7:4c:f0:8f:0d:39:19:f3:a5:bc:ae:f5:9c:53:c0:44:
ee:04:8b:cc:09:47:bf:aa:a0:2d:0d:3a:71:21:26:6e:b7:6b:
42:a9:f3:0c:f6:d9:8f:59:1c:db:3a:fb:7e:6a:7b:cf:fe:bc:
c5:f8:87:5a:9a:33:dc:5d:5d:7f:89:58:6a:0c:f4:5c:c4:03:
5f:9d:08:06:8b:28:3a:19:3a:1c:6e:66:fd:16:e9:12:a4:5d:
e3:1d:61:e9:7d:67:69:90:5c:da:e7:3d:95:c3:60:58:39:48:
6d:98:75:66:89:05:84:0c:4a:31:a8:ca:a5:11:9a:b3:1f:bc:
1e:b2:7c:f8:3f:e2:f1:e0:5e:35:4e:c3:6a:46:05:c6:05:3d:
ca:e4:02:03:19:4b:cd:80:86:7b:7e:5d:7f:7a:21:2e:f7:a6:
7c:db:50:f4:21:61:20:d3:a1:31:0b:90:9a:c2:f3:5d:bb:fe:
83:93:b5:75:e8:d2:84:ed:3c:b1:fb:3f:b6:d4:f3:ff:0e:3d:
43:b8:e7:7f:28:a9:72:95:3f:9b:3c:b4:3a:b1:10:cf:b7:c4:
c9:13:cb:8c:f1:7e:66:83:96:5a:1e:1a:ec:0b:b6:f0:5a:db:
e9:71:b8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:02:22 2026 by rpki-client