Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
File: _XTetBhEJvpiIlthIMNnBvc3uOI.mft (raw, json)
Hash identifier: Mk2yOQpJh0eyfKt2PuxcJBnUqG6/mlkJeo/i/meIwtU=
Subject key identifier: 02:A0:C7:22:10:3F:84:F4:19:35:60:F2:33:70:13:73:12:F1:8B:35
Authority key identifier: FD:74:DE:B4:18:44:26:FA:62:22:5B:61:20:C3:67:06:F7:37:B8:E2
Certificate issuer: /CN=fd74deb4184426fa62225b6120c36706f737b8e2
Certificate serial: 019D273B280A4F400780AC59F2CF2116321E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 23:01:21 +0000
Manifest this update: Wed 25 Mar 2026 23:01:21 +0000
Manifest next update: Thu 26 Mar 2026 23:01:21 +0000
Files and hashes: 1: 4H3kqbZKgvCRJ41TW2E8J1NDC88.roa (hash: ah0Wo037A9MM/sUCKBiJ/BqofxWUcKYL1Cq5STwAUy8=)
2: _XTetBhEJvpiIlthIMNnBvc3uOI.crl (hash: /dfyelA689Ntk8WDUBeEuBqBnuOOE/oNn/WYqKRBDXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:28:0a:4f:40:07:80:ac:59:f2:cf:21:16:32:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd74deb4184426fa62225b6120c36706f737b8e2
Validity
Not Before: Mar 25 23:01:21 2026 GMT
Not After : Mar 26 23:01:21 2026 GMT
Subject: CN=02a0c722103f84f4193560f23370137312f18b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:57:72:9a:9a:dd:ea:e7:1c:d2:3a:d3:a7:ce:
e3:4f:3d:5b:8e:e3:53:69:a9:7f:5e:16:6a:ff:03:
bd:21:d8:d8:e5:ed:92:5a:fa:0c:fa:fe:83:a9:ee:
00:a5:e3:d9:b8:2d:6c:8c:ec:d2:50:65:0f:d1:7e:
b8:a8:d8:d0:45:60:eb:2c:30:5f:ff:36:41:9b:26:
d6:44:a2:f4:87:27:01:60:36:4c:b0:48:f6:13:13:
3b:cd:25:c6:ad:99:54:af:df:e6:48:ab:39:2e:ed:
b3:68:9b:04:75:7f:46:a6:38:86:be:75:92:76:ec:
44:89:79:d8:17:59:47:50:29:a2:5a:26:00:1b:e4:
4a:af:26:d6:cb:0b:a4:96:17:37:d7:4d:fe:d9:a8:
b9:67:28:78:ed:d8:e5:9e:3d:d1:1f:1b:f8:22:fe:
83:80:92:09:d7:51:d6:0d:11:56:91:0c:b8:20:34:
d3:93:b4:cd:e7:5d:8f:7e:c6:da:7c:37:75:4f:7e:
12:c3:2a:73:0f:f4:8d:9a:6d:63:8b:f7:7e:72:f1:
b2:ff:09:fb:05:3b:42:b3:a2:ab:20:5e:b3:b8:e9:
f7:0b:e6:e8:7a:26:32:b7:ca:cd:37:c7:c1:07:af:
a7:63:39:7c:70:0c:c2:14:0f:4b:01:e9:f8:d3:ca:
19:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A0:C7:22:10:3F:84:F4:19:35:60:F2:33:70:13:73:12:F1:8B:35
X509v3 Authority Key Identifier:
keyid:FD:74:DE:B4:18:44:26:FA:62:22:5B:61:20:C3:67:06:F7:37:B8:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:56:10:7a:6c:3a:f6:fa:14:fc:7a:f3:17:3e:79:d0:5d:dc:
18:00:42:5b:ff:85:c5:eb:3d:a0:e5:23:2b:85:40:7e:ef:2b:
f8:29:41:0c:6a:53:73:aa:3c:a0:c5:59:46:c6:78:92:19:ca:
33:87:df:ef:5c:6c:4a:af:a7:85:42:09:55:b6:42:0d:f4:9e:
be:e0:57:f0:f5:45:d1:6e:0a:5a:df:25:df:bd:49:8a:03:d6:
75:fc:aa:3d:e9:2c:f5:d0:58:cb:f1:0c:6f:ae:29:0a:9d:4b:
70:30:1b:06:da:45:3a:09:4d:c1:69:58:50:06:d0:59:7d:2d:
d6:45:94:f6:f0:e0:00:9f:43:28:64:cd:26:8a:cd:63:5e:b3:
5f:c1:54:e4:18:e9:d1:92:29:e9:54:af:f1:f4:f3:3f:1d:e9:
ef:37:d9:09:ce:f3:47:d7:11:d5:57:96:e2:46:e9:73:b7:a9:
2f:62:9c:e0:55:0e:7d:d6:97:f5:12:54:25:01:9f:ea:b1:f5:
fa:b2:c7:e9:ba:38:68:f1:fd:69:78:72:86:1c:df:58:23:ba:
10:d9:8b:75:6f:86:c1:1c:48:0d:4b:32:21:e8:8c:96:35:ed:
7d:82:f8:f4:1f:65:52:37:cf:52:86:6b:e3:64:6e:d0:c1:df:
cb:b7:e8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:33 2026 by rpki-client