Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
File: xYigeeTOtrskwjxSceRYPhzy-ak.mft (raw, json)
Hash identifier: 86kazMxnbJwxzkhGTzEPtdmxM9MzBAB0FsbaTXAXrMo=
Subject key identifier: B8:92:8C:3F:52:2A:D1:04:1E:EC:E4:B6:B6:04:95:9C:6D:8D:89:66
Authority key identifier: C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
Certificate issuer: /CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Certificate serial: 019D273B40375F650F573A4E6D43E0D72F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
Manifest number: 188E
Signing time: Wed 25 Mar 2026 23:01:27 +0000
Manifest this update: Wed 25 Mar 2026 23:01:27 +0000
Manifest next update: Thu 26 Mar 2026 23:01:27 +0000
Files and hashes: 1: Pt1Psw1-lXzUqfn0X0LMWdzipP0.roa (hash: 15BXKGLsn5CILBGoCHvyltyRe1OA4GGdr684IX7Rfck=)
2: xYigeeTOtrskwjxSceRYPhzy-ak.crl (hash: 8SXw9UGQGbZQP3xHYj6/YGFI49kJyLLkSzbmuWQPsAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:40:37:5f:65:0f:57:3a:4e:6d:43:e0:d7:2f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Validity
Not Before: Mar 25 23:01:27 2026 GMT
Not After : Mar 26 23:01:27 2026 GMT
Subject: CN=b8928c3f522ad1041eece4b6b604959c6d8d8966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ac:07:fb:e8:2e:88:cb:df:f4:40:ad:15:c6:
d8:2f:1b:bd:25:1a:5e:a5:59:be:52:87:0d:5c:3f:
95:4d:d6:79:3d:e2:6f:8b:ba:2c:bd:73:a0:81:c4:
42:b0:96:45:9e:9a:d8:10:7b:6a:b3:c0:b0:e9:91:
fb:de:3b:96:87:aa:e6:09:a8:75:e8:4e:91:97:1e:
63:19:f6:48:32:ff:02:9f:58:53:9a:44:cb:64:53:
53:f2:15:52:d1:c1:d3:24:93:b1:13:14:05:16:6f:
09:6b:47:e3:a8:d6:db:98:b8:6b:ab:05:69:28:39:
b9:27:44:08:6a:f6:42:5d:13:69:3c:e7:03:ef:52:
54:e5:d8:b7:63:09:09:1a:0c:1e:c8:a6:b5:d7:e9:
c6:24:f4:16:83:1c:2a:f2:e5:49:da:48:18:7f:be:
b1:5e:fb:61:ba:1d:e1:62:44:8f:8a:c3:21:1b:0a:
3b:5f:a5:5e:1c:e7:02:14:43:99:15:6c:6a:24:6c:
56:e4:01:c4:3f:57:44:9e:41:ea:9b:ad:5b:b1:11:
67:e5:af:cc:fe:f3:23:da:90:d7:45:19:ac:ce:84:
17:6b:cc:ae:4f:df:7d:8c:2c:89:a6:ff:d9:50:7e:
f6:a1:3a:14:c9:39:8a:14:07:e3:e5:2e:7a:10:76:
12:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:92:8C:3F:52:2A:D1:04:1E:EC:E4:B6:B6:04:95:9C:6D:8D:89:66
X509v3 Authority Key Identifier:
keyid:C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:91:5c:5c:3f:b4:31:3c:5e:18:43:86:ec:6c:f1:94:52:93:
2a:c5:c6:95:9b:62:68:57:7d:36:c5:5d:49:03:87:14:02:3e:
ce:99:9f:1c:ee:ad:6b:94:de:dc:3d:e0:71:c6:b6:2b:ec:73:
15:ed:07:e2:bc:4a:b1:6e:9f:7d:9c:07:bb:29:81:2c:6a:0e:
9e:7b:35:16:b4:aa:25:42:75:74:a1:32:1c:f1:d3:9b:aa:33:
e4:87:0e:32:ec:5e:35:b2:a9:73:7b:1a:aa:33:e0:c4:36:a8:
a6:ed:8a:f3:fa:ab:58:00:b4:aa:0f:f1:5d:61:56:61:2e:7e:
af:99:15:92:5b:5b:a6:6b:15:8c:5d:a1:c2:95:4b:78:d1:98:
59:bc:e8:d7:ff:16:15:8f:24:1b:54:5f:e6:be:d0:7c:7c:c2:
b6:ab:5e:82:29:bc:43:b3:c4:34:da:49:81:be:3f:06:c8:1d:
ba:02:43:ce:55:ed:bc:5c:13:fe:29:fc:8b:22:8a:92:ac:85:
05:b4:d1:f2:fa:f9:3f:f2:f7:c5:6e:22:6c:6f:28:9c:24:63:
fa:a2:39:21:74:4f:e1:18:f4:cb:b8:dd:f5:ec:ac:51:7e:6a:
0c:42:1a:34:41:9f:05:c0:8a:ff:ea:a7:66:98:82:2d:a9:5a:
3e:13:b1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:19 2026 by rpki-client