Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
File: xZvR6MWPZBvZRDBfEcVO_l86DOI.mft (raw, json)
Hash identifier: wygaUTrzcs9RM792lbNCBXFCFPxKulio8ZA5YfTAHoE=
Subject key identifier: C0:FD:1C:64:1C:B3:3E:D3:7F:B1:0B:0F:03:DD:AE:6C:7B:E8:7D:0A
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Certificate issuer: /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial: 019D2772A1AA05934DCCA6B0192FFFDD678E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
Manifest number: 18A7
Signing time: Thu 26 Mar 2026 00:01:56 +0000
Manifest this update: Thu 26 Mar 2026 00:01:56 +0000
Manifest next update: Fri 27 Mar 2026 00:01:56 +0000
Files and hashes: 1: EvezJV6Vs9jqKeUbJVzpq1KiVDU.roa (hash: 2svyQKGgqn/3aPQxfvJ2sTwJRY+qNPgcGyhkMpZSELI=)
2: NCLucTkvi3guFUx3Unodz7qu3f8.roa (hash: XS6lokDQlSUVgmf31X4rX8+KGasUvIdfEySA8Treukc=)
3: _wgviRVG1K_5o-U9fJ7o7ZJk_RE.roa (hash: 8X8kwr6+94gamc2uAWENoz4y3O77vpqIsVr/rcSuqCo=)
4: ezXML66PH_53DvtrZpee7wJgcq8.roa (hash: 8PYXc5RxO1awIA2fhoLa9kTXnH71YLw1uLcJ1CNtRqs=)
5: h5hIPsJLhskffy-sowI0XWx6XlE.roa (hash: SZZgcDO6xitZpi8SqVoNBovZysldQ3yiUtrtfkP4Ct8=)
6: tqRuH8AtUL10GIVamWVHWz8fxNg.roa (hash: RZkT6lVI+WQmmrPn0pAsOsM6VyHGnWPmG3xanKfDovc=)
7: xZvR6MWPZBvZRDBfEcVO_l86DOI.crl (hash: eIX4hmCVDmdSYJyZHCQYqDiYfJnQBeqOUBaFTwkAtNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:a1:aa:05:93:4d:cc:a6:b0:19:2f:ff:dd:67:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Validity
Not Before: Mar 26 00:01:56 2026 GMT
Not After : Mar 27 00:01:56 2026 GMT
Subject: CN=c0fd1c641cb33ed37fb10b0f03ddae6c7be87d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0f:97:10:18:6b:5a:c0:1c:0d:90:25:1a:42:
44:19:cb:46:f8:6b:04:82:d6:eb:4f:60:0d:ee:b3:
12:8e:59:19:f5:7c:20:c8:99:0b:01:8f:2b:f0:f9:
43:0a:19:df:78:33:e5:ad:c2:fe:b4:8d:7d:11:5e:
60:25:4b:c2:1a:f4:39:42:59:99:9b:1b:34:fc:5f:
f9:7f:2d:7c:2a:b6:bd:6f:f6:3e:32:77:61:01:41:
4b:93:2b:f8:b4:d2:cc:51:77:7b:d2:a6:4b:6f:e6:
bb:d0:03:63:4e:2d:e3:75:5f:bb:1c:f9:1d:46:27:
00:29:32:fb:f7:8c:97:7c:40:12:ea:df:39:76:2e:
44:98:3f:7b:e4:f6:8a:88:46:41:b3:90:1a:73:7a:
1a:c7:54:15:1c:d9:04:c5:c7:ce:84:6f:8f:58:a8:
07:36:34:0c:78:51:9a:b0:cb:59:97:df:fb:33:48:
49:a3:9b:5e:da:7f:25:93:ba:7d:0c:2f:a5:5f:18:
8c:70:cc:54:5e:4f:09:9e:cd:a8:60:da:11:81:85:
e7:18:ae:d5:30:08:44:e0:8c:3e:f6:60:8b:20:d5:
3b:6b:7d:17:a2:a0:36:b9:8d:2a:c3:21:67:ca:12:
41:31:41:d5:49:a2:c4:27:ea:b3:f2:bd:75:ad:32:
46:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FD:1C:64:1C:B3:3E:D3:7F:B1:0B:0F:03:DD:AE:6C:7B:E8:7D:0A
X509v3 Authority Key Identifier:
keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:cf:81:60:7b:47:df:6a:27:a1:b7:ff:d4:4f:bd:df:54:02:
7e:a3:1e:6b:29:95:2e:13:2c:df:8a:e1:8a:a2:a3:38:2c:be:
88:1c:d2:17:d5:63:e8:00:c3:e3:c6:b7:ea:8c:3e:64:e2:1d:
1b:6c:33:ac:a3:a2:41:f8:1a:8b:90:2f:b2:47:45:28:ce:2f:
4b:8b:4e:1f:14:27:94:62:ce:26:4f:cf:46:e8:6f:f4:a5:3b:
b1:81:74:9e:08:6c:5f:62:e4:d4:45:88:3b:68:0f:55:89:7f:
ce:ff:8e:57:7e:2e:5b:19:45:13:9f:f6:3f:e5:73:28:78:04:
d4:eb:e5:05:33:ab:bf:38:e7:21:97:ce:18:8a:48:b1:c8:ca:
5c:f4:fe:af:08:ac:f6:04:63:8f:0b:8b:2b:42:71:94:09:56:
bd:ad:47:b9:2d:9d:63:57:17:62:3f:97:35:8a:40:50:8a:02:
a2:df:87:55:3b:c6:ba:e0:68:18:cc:85:c5:31:80:4a:91:5f:
1b:13:6e:cf:e4:8d:30:79:98:fc:4d:7a:74:47:15:ef:67:f4:
5e:7e:c6:03:1a:1d:5f:78:aa:5e:16:19:15:55:ca:ec:d6:64:
74:3b:14:94:c9:29:25:3d:92:6e:7b:6a:6b:36:37:40:4b:9c:
70:af:53:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:48 2026 by rpki-client