Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft
File: x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft (raw, json)
Hash identifier: DvufGIsyyBA5Tr3f97Gt2tMJo7gZIgw95OFKcM+KAnE=
Subject key identifier: BB:19:71:49:8D:65:76:B1:95:B3:2F:6A:A8:2D:88:D5:23:A7:F2:F2
Authority key identifier: C7:8B:52:DD:FD:0B:E5:61:D4:10:CA:88:46:FC:79:7E:22:98:B3:CC
Certificate issuer: /CN=c78b52ddfd0be561d410ca8846fc797e2298b3cc
Certificate serial: 019D2703C4A20C2895CF9A6769F88545E1C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4tS3f0L5WHUEMqIRvx5fiKYs8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft
Manifest number: 1564
Signing time: Wed 25 Mar 2026 22:00:51 +0000
Manifest this update: Wed 25 Mar 2026 22:00:51 +0000
Manifest next update: Thu 26 Mar 2026 22:00:51 +0000
Files and hashes: 1: YYn49ElJf0Sq1r0mfkdIQTwmQdg.roa (hash: QxGuwFKApJYfN3mvWwP7KytzI3pNw7rmnyOPXpRIZcM=)
2: x4tS3f0L5WHUEMqIRvx5fiKYs8w.crl (hash: URYvJtXNaBjDY/wGvim1ZvyXNhaxQmAdfpHA3tyyJqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/x4tS3f0L5WHUEMqIRvx5fiKYs8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:c4:a2:0c:28:95:cf:9a:67:69:f8:85:45:e1:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c78b52ddfd0be561d410ca8846fc797e2298b3cc
Validity
Not Before: Mar 25 22:00:51 2026 GMT
Not After : Mar 26 22:00:51 2026 GMT
Subject: CN=bb1971498d6576b195b32f6aa82d88d523a7f2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:41:a0:a0:47:31:19:25:ee:a4:2a:8e:5b:61:
a9:27:0a:80:84:9f:d9:ed:d1:dc:ed:17:18:76:a9:
97:3c:a6:89:58:6f:47:6c:93:8a:cc:ee:50:af:16:
9b:b8:bd:e8:69:1c:e3:3b:91:5f:e3:d4:b9:75:88:
00:7d:bf:49:8b:ad:f3:2e:75:49:1c:96:67:fc:92:
3f:71:05:3f:58:2b:9f:e8:94:b1:b8:ef:d3:54:61:
88:7a:66:dd:d6:fa:8b:a9:fc:3b:58:ec:4d:f7:31:
fd:69:eb:3d:3c:e7:3b:89:8d:82:21:d7:8d:60:55:
fe:ea:58:76:04:5e:02:58:a1:b8:1e:34:81:84:73:
4c:25:82:22:90:2b:fc:00:81:d2:8f:42:5c:26:f5:
1a:c9:c1:9e:f1:81:75:53:32:e4:51:6c:13:eb:aa:
ea:6c:9b:61:83:a5:c7:83:c7:aa:82:3e:4b:cc:57:
fd:21:63:38:a8:d0:39:7e:2b:1a:91:75:ab:11:c7:
0f:bc:0d:8f:d9:cb:47:f4:c9:27:f3:76:ba:6a:36:
5f:04:97:82:43:3c:db:e7:49:e8:98:5f:63:54:d2:
ee:fc:4a:17:91:23:db:44:07:c4:eb:25:c9:cc:87:
c5:50:01:af:f1:b1:0e:20:a5:cf:e1:19:42:53:98:
6d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:19:71:49:8D:65:76:B1:95:B3:2F:6A:A8:2D:88:D5:23:A7:F2:F2
X509v3 Authority Key Identifier:
keyid:C7:8B:52:DD:FD:0B:E5:61:D4:10:CA:88:46:FC:79:7E:22:98:B3:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4tS3f0L5WHUEMqIRvx5fiKYs8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e3:98:90:d2:c3:b3:b2:9d:59:44:7e:2b:f8:dd:d6:d5:69:
a2:22:ad:8f:1d:10:41:91:52:b6:35:82:11:64:3d:06:4a:b0:
5e:64:99:6d:5b:ae:f6:56:e0:8a:2a:ba:6f:82:4d:f9:d7:93:
29:71:c2:c2:24:b9:87:f6:d3:65:e5:a2:d5:08:6d:6f:c5:ac:
5f:92:e8:2c:10:6a:71:59:27:ea:f9:65:ce:a5:2f:e4:18:ed:
42:f4:7b:9c:25:8a:50:f9:e3:08:c0:02:c0:93:c2:bf:b5:ab:
b7:2f:4c:f1:15:34:94:8a:4e:da:bf:e2:af:4e:19:d5:50:43:
2a:5e:a5:33:46:f8:c7:99:a8:93:9c:fc:ca:24:50:88:1a:5b:
e5:5d:2b:f7:f7:ff:1a:56:5a:3b:d3:16:55:48:a1:a5:8d:ae:
83:4f:30:e6:5f:cc:92:ae:45:b0:70:9e:67:d4:df:49:1d:0a:
9e:66:2e:aa:c6:fd:21:f7:7f:e6:10:1c:4d:9c:5d:54:d4:8c:
f4:23:7e:4f:ab:54:c1:ae:5e:ae:9c:18:e5:1d:cd:ba:96:24:
32:93:ab:ef:99:56:31:22:67:67:85:41:0e:25:80:51:b8:5f:
a5:2c:01:b8:7e:6b:32:29:c6:ef:37:90:6b:92:b8:ee:94:ca:
f2:0b:ad:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:13 2026 by rpki-client