Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
File: xN_w4VI3gFUHr10Dq-3riDK0uMs.mft (raw, json)
Hash identifier: vxLmo4tsK6naI71dlES9MmyMOqR0qdBCgf0eVlABmZg=
Subject key identifier: 09:30:4A:D3:80:E9:0F:5E:00:F6:68:B2:26:22:85:B9:6A:03:54:80
Authority key identifier: C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB
Certificate issuer: /CN=c4dff0e15237805507af5d03abedeb8832b4b8cb
Certificate serial: 019D2A3C179D567295577C5515B015E7A639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 13:01:14 +0000
Manifest this update: Thu 26 Mar 2026 13:01:14 +0000
Manifest next update: Fri 27 Mar 2026 13:01:14 +0000
Files and hashes: 1: 1ZYXmJOrMeMc_d7Mkc1TagHI2yQ.roa (hash: qeka0m7QmqNt2z/3WOdknE3KXx1vrYZ3br+BR0VNMV8=)
2: xN_w4VI3gFUHr10Dq-3riDK0uMs.crl (hash: FACtDCF6k4dhQ9RzFZ0HEhiGxF35Kh4pnA0RxzPOeEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:17:9d:56:72:95:57:7c:55:15:b0:15:e7:a6:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4dff0e15237805507af5d03abedeb8832b4b8cb
Validity
Not Before: Mar 26 13:01:14 2026 GMT
Not After : Mar 27 13:01:14 2026 GMT
Subject: CN=09304ad380e90f5e00f668b2262285b96a035480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c2:1e:f1:2d:fd:35:99:b5:57:0f:d4:81:0a:
ff:35:58:32:af:3d:8c:7c:46:ba:7c:0d:d8:cf:7c:
52:4b:9d:d3:93:54:1c:8a:cf:7f:2f:7a:00:9c:2e:
e5:9a:a1:51:82:50:a5:ef:5b:7e:4d:32:92:ee:3e:
74:71:96:31:94:9a:14:32:f6:d4:9b:5e:8b:e8:99:
90:db:cf:1b:2b:26:8d:03:61:11:e8:fc:0d:24:2c:
13:ea:7a:ae:4f:8b:f3:b5:ab:b8:3c:f3:bd:7c:c7:
ae:6b:47:1c:6e:ae:81:10:8d:ca:ac:50:ec:85:19:
6c:ee:c7:b7:dd:ba:8a:d0:fd:06:98:d8:38:d8:30:
10:c3:7f:9c:6c:24:69:be:85:b6:63:54:5b:69:8c:
df:59:9e:3b:6a:3b:57:1d:94:c8:8b:0d:08:3c:f8:
b3:ff:78:32:33:ca:f2:92:4c:77:7c:b2:56:fc:07:
eb:de:a1:78:0a:ea:5b:c9:d2:26:66:82:ac:4e:98:
54:f4:63:0f:ac:07:29:dc:49:b2:3a:24:2f:7f:b5:
a5:15:2e:ad:89:12:db:e9:e1:a7:38:07:1a:32:b1:
71:d1:1f:25:17:11:c8:6e:30:13:dd:5f:46:f1:df:
93:c6:71:29:67:fa:5b:f0:dd:b9:89:33:8e:ac:5a:
00:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:30:4A:D3:80:E9:0F:5E:00:F6:68:B2:26:22:85:B9:6A:03:54:80
X509v3 Authority Key Identifier:
keyid:C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:64:98:d1:a8:d3:d5:3d:ed:bb:8f:fc:08:6d:b0:f7:a2:b3:
9c:1e:c8:f8:49:07:d5:79:a6:b1:4b:ce:80:3b:d6:dd:bf:bd:
a6:79:6c:fa:79:d1:ec:f7:1b:ca:4c:b1:2f:e7:7e:a2:da:ef:
75:5c:94:af:17:49:f2:b2:f5:d9:f7:74:4e:40:0c:1b:ef:75:
9f:1f:fc:cc:e9:4b:c4:89:ab:94:13:3d:6c:db:ee:8b:fd:d9:
df:f2:d2:f0:6b:55:b5:3b:7f:e7:02:7b:6c:3d:5f:84:29:78:
2f:74:ea:b6:81:b4:ae:0a:da:b3:2d:55:12:7b:de:cc:9d:f2:
8f:59:4b:59:04:f7:0f:fa:f6:f8:ea:e1:5f:8c:d5:ab:c7:48:
e5:61:3c:1c:a1:e4:24:ac:a6:ca:d1:80:9f:48:a8:b2:80:a0:
a4:fd:c1:4f:1f:b1:0e:8e:23:c4:61:f9:66:23:9f:f2:6f:9b:
35:87:7c:08:56:1e:5d:4e:6d:b4:ec:29:6f:5d:c8:c9:4d:08:
3d:17:4a:3c:2d:ee:23:1c:ec:32:0d:ff:2d:d2:78:8b:da:ba:
bc:21:b7:a3:09:b9:e9:f6:d9:0c:b6:df:3e:d4:c6:22:fa:13:
34:c7:64:2a:84:0b:20:45:36:d8:d1:3b:c6:de:69:8b:a4:04:
38:2f:96:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:12:22 2026 by rpki-client