Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.mft
File: xafD9LFGk1EiAllaik-VsNa3oQE.mft (raw, json)
Hash identifier: nG3xEjmnGXMSMmsSKiANYmbdVj57Bbg7Xjz+cmtQCtA=
Subject key identifier: 4C:9E:5A:AF:1F:7D:13:EB:B4:2C:57:59:C8:A5:AB:C0:33:CA:8E:2D
Authority key identifier: C5:A7:C3:F4:B1:46:93:51:22:02:59:5A:8A:4F:95:B0:D6:B7:A1:01
Certificate issuer: /CN=c5a7c3f4b14693512202595a8a4f95b0d6b7a101
Certificate serial: 019D27045FB8EBA587CB3D7ADCB2D649C880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xafD9LFGk1EiAllaik-VsNa3oQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.mft
Manifest number: 181A
Signing time: Wed 25 Mar 2026 22:01:31 +0000
Manifest this update: Wed 25 Mar 2026 22:01:31 +0000
Manifest next update: Thu 26 Mar 2026 22:01:31 +0000
Files and hashes: 1: 2hbC2fRcwVVGLuxr3y8s9IdUqJ0.roa (hash: WENyhbzOdCYh/WeleDC3Eb7ZL7vwxD85NmDsUD+Ca/o=)
2: rJ0B3_PG0rjHq-_hS6K9nBrn-PY.roa (hash: m7Zi/TNYib5gTH6m2mPeaQUI4WRQNMe1ierjcvG2bOc=)
3: xOCpqHIGWYpMZiK0D_GduGL-xNY.roa (hash: EH/6F7DAxWGzLP0f7IyWGiPlk48ND1XykF58xtVXDcQ=)
4: xafD9LFGk1EiAllaik-VsNa3oQE.crl (hash: Rn76GQkS1Btjzf0Ln+0dFYEdqF94jzzf+0b+9H2/Jb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xafD9LFGk1EiAllaik-VsNa3oQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:5f:b8:eb:a5:87:cb:3d:7a:dc:b2:d6:49:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a7c3f4b14693512202595a8a4f95b0d6b7a101
Validity
Not Before: Mar 25 22:01:31 2026 GMT
Not After : Mar 26 22:01:31 2026 GMT
Subject: CN=4c9e5aaf1f7d13ebb42c5759c8a5abc033ca8e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:69:70:42:7d:79:06:e6:81:4a:bb:3c:c0:00:
01:6a:44:31:1e:bf:09:4a:b3:b7:d4:57:42:5b:e7:
70:a2:f9:59:1c:88:84:e3:75:d2:d9:56:67:6a:32:
94:e4:39:68:cd:bf:42:cf:dc:19:f8:5d:54:c3:d2:
cf:b9:2e:92:99:de:4e:40:4a:0f:1b:72:ca:69:f8:
8f:1c:10:81:16:38:e0:cf:87:95:6c:f8:f6:af:f1:
d5:73:13:99:e4:ad:ff:22:e3:53:48:2f:47:b2:e1:
a6:8e:8b:14:57:49:a7:5a:66:a2:0a:13:57:e9:76:
d6:09:83:d3:ff:f0:96:c6:96:f7:96:ec:7c:f2:22:
65:ca:e0:8a:c0:ec:aa:d9:be:fe:f9:fb:de:ae:39:
bd:ec:3b:10:a4:a8:0b:85:a5:79:4e:d0:57:8d:11:
9a:a2:f9:d9:cc:c6:73:ef:0a:47:73:5b:53:25:34:
96:b6:00:93:57:f0:70:71:2f:67:ea:df:91:44:7a:
26:f4:1d:67:ee:08:12:b7:1d:f6:8e:23:32:46:c2:
a1:e1:b5:6e:50:67:7c:6d:23:02:7d:bd:67:54:a9:
b5:13:14:96:6a:1a:3b:e3:9f:80:03:30:dd:3a:76:
58:33:79:f2:38:e1:6a:f0:f0:e5:69:7f:8b:b6:53:
ec:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9E:5A:AF:1F:7D:13:EB:B4:2C:57:59:C8:A5:AB:C0:33:CA:8E:2D
X509v3 Authority Key Identifier:
keyid:C5:A7:C3:F4:B1:46:93:51:22:02:59:5A:8A:4F:95:B0:D6:B7:A1:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xafD9LFGk1EiAllaik-VsNa3oQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:04:23:d2:21:0e:cf:26:f7:9d:a8:51:28:83:c0:a9:03:dc:
68:96:40:8e:08:4b:c4:19:9f:4f:f1:49:e5:d5:54:b8:54:ea:
7c:2c:9b:9f:13:5d:0f:46:85:c1:5d:44:77:85:52:23:78:f3:
3c:fb:79:24:0a:d6:8d:0f:68:73:a1:9d:a7:8c:93:2e:68:ff:
8a:3a:f4:12:4f:4a:16:b6:c5:91:f1:1e:f9:d7:90:62:10:c6:
0d:84:b7:9e:f1:24:ad:a8:9a:5d:93:81:5b:c1:57:42:f1:5a:
ef:2d:09:a4:e9:34:ca:b5:a8:ca:72:05:7c:5c:75:8d:cf:62:
7b:bf:40:d6:f0:30:1c:77:76:d5:fb:c7:94:7d:f0:14:d4:18:
b5:4a:b9:e5:c9:fa:12:00:37:90:8c:03:7a:47:a1:30:fa:eb:
94:90:47:36:90:1b:64:f9:c4:6b:e4:bb:74:a3:fe:4b:03:eb:
0c:bb:3f:2a:a8:4f:9c:91:d4:8a:27:f5:75:ce:a6:41:9d:80:
ac:3e:a0:40:80:3b:3c:bc:72:1e:a7:c4:74:91:55:02:97:2a:
75:bb:d4:a1:c7:b3:80:fa:66:c4:fc:dd:74:61:11:47:9c:03:
38:4c:c6:64:5a:67:a5:c6:f8:ff:3a:de:92:57:c8:a4:a3:af:
32:c7:5a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:31 2026 by rpki-client