Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
File: xX4MBpirwZpWiv7OaxkM7QM6coU.mft (raw, json)
Hash identifier: P2+aaXxrWKWK7aHF+VXCcsyQV7QhcPoRjDUl+xLRFto=
Subject key identifier: 55:6B:DC:E2:F7:FC:B2:89:06:A1:B2:D9:0B:D3:21:47:CB:EC:84:11
Authority key identifier: C5:7E:0C:06:98:AB:C1:9A:56:8A:FE:CE:6B:19:0C:ED:03:3A:72:85
Certificate issuer: /CN=c57e0c0698abc19a568afece6b190ced033a7285
Certificate serial: 019D24DE7D2EC0F014CE8474A402E7FEAEE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
Manifest number: 1784
Signing time: Wed 25 Mar 2026 12:00:53 +0000
Manifest this update: Wed 25 Mar 2026 12:00:53 +0000
Manifest next update: Thu 26 Mar 2026 12:00:53 +0000
Files and hashes: 1: hvm-1sw6yKhG-M4wHJ1S06-4bQ8.roa (hash: tKs3IGxy6JfH17/EICz+WfGgz3jmWl7OeQzPl058cdo=)
2: rHb_iz-JiMdt3RDI2-qf4obfFyQ.asa (hash: PB1OmdbHMMh/Gs2lwxTkfdhg+R2oRe0ZvKNcBWEoM4Q=)
3: xX4MBpirwZpWiv7OaxkM7QM6coU.crl (hash: sPOVkjn4Va5hUEYMCRCnqeiie2Ir9oIcEvwDd1xOvGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:de:7d:2e:c0:f0:14:ce:84:74:a4:02:e7:fe:ae:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c57e0c0698abc19a568afece6b190ced033a7285
Validity
Not Before: Mar 25 12:00:53 2026 GMT
Not After : Mar 26 12:00:53 2026 GMT
Subject: CN=556bdce2f7fcb28906a1b2d90bd32147cbec8411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:39:b6:0d:ab:16:21:e8:a2:91:5e:c3:e7:59:
f9:fa:ec:96:0b:be:b5:d4:a9:79:a4:6d:14:ba:19:
75:db:fd:34:66:09:3b:47:53:25:c1:3f:a2:b8:ff:
66:ce:e5:00:4e:b3:f4:17:60:26:3b:ac:05:e9:85:
9d:88:0e:c5:c2:7c:6f:84:f5:01:f6:0f:97:57:34:
a1:0b:78:40:72:f5:c7:f9:9a:74:34:a9:d2:ab:12:
bc:9c:3f:88:e2:dd:ff:a2:63:ec:e5:71:d9:04:23:
95:47:d8:7a:1d:b8:8e:29:6f:80:35:8a:42:c7:18:
24:ef:3d:7a:5b:ba:45:40:72:fb:32:57:2c:3f:9e:
15:f3:fa:56:12:c4:ac:a7:f2:00:70:bb:3d:1a:32:
88:71:4a:33:4d:12:d1:fe:91:0b:5e:4e:45:4e:68:
10:b3:8c:f7:f9:b4:47:48:c8:82:cc:02:1b:7f:1e:
fc:54:84:1e:3a:cc:97:45:aa:b0:34:30:7e:e7:26:
1b:b0:22:b2:2d:1c:61:a5:6e:a2:98:93:98:fc:69:
87:38:7a:ae:c2:c6:81:54:98:f0:00:34:52:57:a6:
68:27:7b:5a:54:f5:cc:a8:7b:18:6a:f8:d0:db:d3:
fd:fb:a0:27:4d:30:69:7e:46:da:d0:23:24:c4:f9:
97:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:6B:DC:E2:F7:FC:B2:89:06:A1:B2:D9:0B:D3:21:47:CB:EC:84:11
X509v3 Authority Key Identifier:
keyid:C5:7E:0C:06:98:AB:C1:9A:56:8A:FE:CE:6B:19:0C:ED:03:3A:72:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:9e:88:42:a1:fc:9b:53:ce:e1:93:de:7b:ec:8a:1b:40:54:
7f:e7:36:ed:14:b8:14:18:9c:29:86:67:b6:25:8c:96:6b:c5:
ef:3a:fc:27:27:de:d6:6b:d8:71:11:0c:f8:30:ed:9d:b8:1d:
9d:8e:0d:b1:48:0b:94:76:a3:ef:f6:aa:d6:26:e2:04:30:f0:
c1:d5:d7:b9:f4:07:5d:21:90:46:b0:01:78:65:1d:11:d1:dc:
2e:db:b2:a8:f5:4e:c0:f5:9a:07:a1:4c:da:62:64:34:c6:23:
e8:73:01:68:b9:7d:6d:e5:2b:5d:aa:62:a7:79:7b:37:9c:6f:
b1:ff:7b:a3:23:51:b3:a8:fe:e0:68:2d:4c:cb:e7:3a:e4:9a:
84:8a:8d:f5:a6:dd:5d:a5:70:db:bf:de:a5:c4:a3:18:fa:98:
32:69:fb:62:d0:27:50:46:c3:b8:e0:b5:c2:4d:2a:5a:b1:a5:
ed:f0:1b:a8:86:89:b5:1a:8a:06:0a:6a:18:76:4b:54:6c:31:
d5:d6:a0:8c:22:20:da:75:b0:72:46:9b:36:52:9b:fc:8a:35:
90:d9:50:a0:e7:87:f6:09:a5:31:a8:3a:34:f0:90:ff:61:73:
94:9c:35:88:4a:46:9a:07:2c:c0:7d:d4:cb:55:27:48:79:8c:
e3:b3:0a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:37:18 2026 by rpki-client