Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
File: xpZo80fFWt13rFF-kzHd5_w1VqY.mft (raw, json)
Hash identifier: MSSMfhMcaTfjOrVxNFRoHRizzjdSwjELes4Vb1R2Cy0=
Subject key identifier: 10:00:72:ED:8D:62:B5:C3:1D:46:11:B2:32:64:DB:F3:17:3C:31:5D
Authority key identifier: C6:96:68:F3:47:C5:5A:DD:77:AC:51:7E:93:31:DD:E7:FC:35:56:A6
Certificate issuer: /CN=c69668f347c55add77ac517e9331dde7fc3556a6
Certificate serial: 019D2996C192E88661B92C6141140EA13ECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 10:00:38 +0000
Manifest this update: Thu 26 Mar 2026 10:00:38 +0000
Manifest next update: Fri 27 Mar 2026 10:00:38 +0000
Files and hashes: 1: SQgk14LJvQD58GJwhzmdHvEGMpA.roa (hash: 9nEhhW/HaWe0QsWNlFcb5L1Nm0I/W7PdcIHoewo3ZNU=)
2: xpZo80fFWt13rFF-kzHd5_w1VqY.crl (hash: cxcSq06qx9yclKqXmfyxT1nK99w7F9FoGVHiuhPQw7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:c1:92:e8:86:61:b9:2c:61:41:14:0e:a1:3e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69668f347c55add77ac517e9331dde7fc3556a6
Validity
Not Before: Mar 26 10:00:38 2026 GMT
Not After : Mar 27 10:00:38 2026 GMT
Subject: CN=100072ed8d62b5c31d4611b23264dbf3173c315d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a3:31:9f:1c:bc:46:4c:e3:05:02:fa:ff:0a:
59:b2:62:e8:a0:69:91:54:27:b4:d8:88:41:51:33:
52:70:ac:67:e1:cc:52:e8:5a:0a:24:b5:4d:0a:51:
bd:db:fb:7a:95:89:ec:76:85:d3:ba:08:c0:03:6b:
61:be:7f:5b:39:e5:22:c5:5c:77:09:be:2a:0d:8e:
ed:61:c6:34:ca:b4:bf:91:66:b0:38:1f:60:19:19:
5b:07:87:d9:a2:78:4e:d6:9c:a3:ea:d8:dc:1d:44:
98:27:ab:df:12:65:45:a3:b7:38:2f:ad:91:fd:42:
80:d7:67:fe:67:3f:7b:c6:67:03:c3:f4:03:78:e5:
89:f2:d2:bd:e8:c6:e9:a6:7b:79:97:f8:dd:63:e7:
99:5a:7f:2d:37:9f:f9:73:ef:fd:2a:78:92:3f:b3:
dd:a9:35:3d:2f:68:51:db:df:80:44:46:3d:5e:e0:
67:9e:3b:5b:3e:7c:80:0d:14:ae:06:66:b5:ef:87:
3a:b9:bb:c8:1c:f4:d5:b3:db:6a:61:c6:8a:5e:41:
2d:f2:a8:07:9d:74:ce:74:eb:a0:2c:5d:46:67:24:
20:1f:1c:c3:b5:aa:a0:02:4c:4b:e4:ec:f6:07:22:
71:c8:df:fa:43:a5:28:65:a1:d4:a7:90:db:2b:9b:
34:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:00:72:ED:8D:62:B5:C3:1D:46:11:B2:32:64:DB:F3:17:3C:31:5D
X509v3 Authority Key Identifier:
keyid:C6:96:68:F3:47:C5:5A:DD:77:AC:51:7E:93:31:DD:E7:FC:35:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c9:a6:aa:cb:08:7f:50:cf:62:19:5b:1c:b2:dd:bc:97:88:
a9:53:ef:c8:70:4f:0b:b9:2f:81:6f:2d:e5:ed:c8:b2:82:fb:
65:6e:3b:80:1b:14:d1:f7:03:7e:3a:d5:bc:3f:80:8d:dd:9f:
89:41:a9:8d:98:07:0f:89:7f:8f:00:15:82:26:66:37:5d:7c:
d5:91:69:e1:e3:3d:94:91:c5:f2:ba:cf:c2:9a:16:72:02:bf:
41:7c:ff:ba:28:de:61:7a:ca:36:53:0a:0c:8d:19:8d:8e:e4:
a5:43:8d:0a:e1:28:9b:f4:d4:e6:1c:b2:25:0e:02:e4:4a:97:
b4:80:1a:b8:af:83:9a:6f:bf:69:06:af:dd:9f:77:52:67:33:
e0:60:49:7b:e0:bc:03:d4:ce:f4:65:d8:32:d2:40:46:f5:d9:
c9:d0:75:71:4b:ad:e2:5e:6f:80:09:63:47:9e:01:65:67:51:
8a:cb:44:49:4b:ee:26:30:bc:a1:86:96:0b:d8:84:2f:77:32:
8e:b8:85:bf:97:be:b2:ba:73:63:cb:29:fc:ab:72:b0:f2:ed:
58:26:b1:ac:ba:4f:9e:55:81:3e:f6:55:95:cb:d1:a4:de:28:
ee:db:36:c1:b1:13:c7:a3:4f:1e:4a:37:e1:2a:6f:7a:76:f9:
d6:cc:8f:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0plsGS6IZhuSxhQRQOoT7OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2OTY2OGYzNDdjNTVhZGQ3N2FjNTE3ZTkzMzFkZGU3ZmMz
NTU2YTYwHhcNMjYwMzI2MTAwMDM4WhcNMjYwMzI3MTAwMDM4WjAzMTEwLwYDVQQD
EygxMDAwNzJlZDhkNjJiNWMzMWQ0NjExYjIzMjY0ZGJmMzE3M2MzMTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6Mxnxy8RkzjBQL6/wpZsmLooGmR
VCe02IhBUTNScKxn4cxS6FoKJLVNClG92/t6lYnsdoXTugjAA2thvn9bOeUixVx3
Cb4qDY7tYcY0yrS/kWawOB9gGRlbB4fZonhO1pyj6tjcHUSYJ6vfEmVFo7c4L62R
/UKA12f+Zz97xmcDw/QDeOWJ8tK96Mbppnt5l/jdY+eZWn8tN5/5c+/9KniSP7Pd
qTU9L2hR29+AREY9XuBnnjtbPnyADRSuBma174c6ubvIHPTVs9tqYcaKXkEt8qgH
nXTOdOugLF1GZyQgHxzDtaqgAkxL5Oz2ByJxyN/6Q6UoZaHUp5DbK5s0iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAAcu2NYrXDHUYRsjJk2/MXPDFdMB8GA1UdIwQY
MBaAFMaWaPNHxVrdd6xRfpMx3ef8NVamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHBabzgwZkZXdDEzckZGLWt6SGQ1X3cxVnFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8wNjA5NjktNWNhZi00MThmLThjMjUt
YWNiMjcyM2E1MDc2LzEveHBabzgwZkZXdDEzckZGLWt6SGQ1X3cxVnFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8wNjA5NjktNWNhZi00MThmLThjMjUtYWNiMjcyM2E1MDc2
LzEveHBabzgwZkZXdDEzckZGLWt6SGQ1X3cxVnFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARcmmqssI
f1DPYhlbHLLdvJeIqVPvyHBPC7kvgW8t5e3IsoL7ZW47gBsU0fcDfjrVvD+Ajd2f
iUGpjZgHD4l/jwAVgiZmN1181ZFp4eM9lJHF8rrPwpoWcgK/QXz/uijeYXrKNlMK
DI0ZjY7kpUONCuEom/TU5hyyJQ4C5EqXtIAauK+Dmm+/aQav3Z93Umcz4GBJe+C8
A9TO9GXYMtJARvXZydB1cUut4l5vgAljR54BZWdRistESUvuJjC8oYaWC9iEL3cy
jriFv5e+srpzY8sp/KtysPLtWCaxrLpPnlWBPvZVlcvRpN4o7ts2wbETx6NPHko3
4Spvenb51syPdQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:30:14 2026 by rpki-client