Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft
File: xW0hVO1TtinYcrKjjZzQQb20sSg.mft (raw, json)
Hash identifier: 3YUAa8nvo4fBRMxeGr9ePwSi/peBmt40VDwVHGYHGKY=
Subject key identifier: CD:98:64:7E:90:2B:50:1C:A5:8F:32:39:DD:45:EA:20:AC:8F:AF:1A
Authority key identifier: C5:6D:21:54:ED:53:B6:29:D8:72:B2:A3:8D:9C:D0:41:BD:B4:B1:28
Certificate issuer: /CN=c56d2154ed53b629d872b2a38d9cd041bdb4b128
Certificate serial: 019D25BA09745F3891A4568CE93AF56A0847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft
Manifest number: 0BFA
Signing time: Wed 25 Mar 2026 16:00:42 +0000
Manifest this update: Wed 25 Mar 2026 16:00:42 +0000
Manifest next update: Thu 26 Mar 2026 16:00:42 +0000
Files and hashes: 1: X88KGnsSuMt-1S71eY9zQ3RZ6tU.asa (hash: 7i3IVTiIuvLVvc+83Pz8wtd/lc6dgYITJMUxdSIn8Do=)
2: nVIGqqg1fXe0JSkAFeMlHeHVwU8.roa (hash: xrVagJd5a+kWUDCIbPyPE6cdcRfUEt1we1ew6ErH7ek=)
3: xL3RFgVCSYkC5SVoN-v-4LOaIV0.roa (hash: qCzcRwtjUOKAd+dvykGvkNnkTv7HJHG7XD6ZjU3R0R0=)
4: xW0hVO1TtinYcrKjjZzQQb20sSg.crl (hash: d6IEkrBtrwnuH8MNGWq59QTPxMHZSuG87BnuG51UOd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:09:74:5f:38:91:a4:56:8c:e9:3a:f5:6a:08:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c56d2154ed53b629d872b2a38d9cd041bdb4b128
Validity
Not Before: Mar 25 16:00:42 2026 GMT
Not After : Mar 26 16:00:42 2026 GMT
Subject: CN=cd98647e902b501ca58f3239dd45ea20ac8faf1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ae:05:39:49:a8:54:a5:5d:cc:91:35:78:c8:
e3:34:9d:bb:19:8d:1f:27:ce:c4:2b:97:9e:8e:1c:
25:94:7a:bd:fd:c6:f3:29:7f:01:00:a8:3a:70:20:
bd:48:bd:8c:9c:6d:78:ea:71:ca:06:67:52:a8:5b:
c1:3c:b0:39:77:53:37:71:06:a4:19:57:29:65:9e:
84:7c:dd:bb:1d:01:3d:28:f8:7c:30:86:70:b4:48:
98:b3:b5:ef:39:40:b3:d5:1a:c2:03:6a:86:80:71:
61:c3:1b:e0:cf:db:a0:db:30:40:59:47:c2:1f:81:
76:bc:5d:1c:c4:26:97:70:9d:91:15:c2:63:65:43:
65:57:ad:80:57:e3:03:00:56:a0:e0:a0:c3:2b:ef:
d4:0a:cc:5c:ec:a4:d0:c6:8a:9c:1f:97:11:60:2c:
d5:64:94:a4:45:da:ec:10:47:06:f8:b6:44:95:15:
f5:72:32:2d:64:45:11:5b:77:4b:d3:6c:53:a7:f3:
0f:d9:65:67:09:6d:35:87:1f:86:72:5b:b8:1a:e7:
51:7b:da:d4:89:1f:4c:71:fc:c6:e3:71:3b:e0:62:
59:5e:55:ca:e4:06:2f:10:b0:37:ed:b5:ac:e4:ab:
a3:b7:73:7f:81:59:78:d3:ba:c8:18:5c:0f:1b:1d:
9e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:98:64:7E:90:2B:50:1C:A5:8F:32:39:DD:45:EA:20:AC:8F:AF:1A
X509v3 Authority Key Identifier:
keyid:C5:6D:21:54:ED:53:B6:29:D8:72:B2:A3:8D:9C:D0:41:BD:B4:B1:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:c7:42:b2:33:69:22:ab:28:1b:68:b2:f5:04:6c:32:82:ef:
be:4e:bc:56:da:f2:a0:75:f6:8b:6d:a2:5e:0e:42:2e:75:46:
cb:aa:ad:80:df:6f:4e:0b:fb:92:3c:72:d8:d7:72:16:38:8c:
21:33:30:b6:11:70:9e:c5:55:ff:e5:48:fb:87:e7:9b:18:4e:
17:17:fc:b6:e7:a0:fd:a2:c8:62:ae:2b:2e:e9:48:85:3d:68:
a3:3d:30:7d:c8:61:5a:24:3d:95:da:6a:1c:75:37:47:b8:4b:
68:e1:8e:8e:6b:2b:9f:13:5b:ec:48:ff:87:6e:06:a3:da:48:
84:41:bc:23:f7:3d:35:33:e5:1c:30:c1:8f:22:e1:af:c5:f4:
54:4a:b0:1d:11:ec:ab:12:5d:11:0c:ad:20:74:f2:c8:0f:52:
4f:f3:95:ef:44:1b:86:af:fe:82:3b:fc:bd:0d:18:89:90:c6:
36:b4:f7:3c:9d:f2:95:74:5e:2b:60:71:ca:3b:e2:01:5f:8a:
f0:e7:16:07:fa:0d:01:52:5f:c4:0b:bf:77:6e:27:91:92:f4:
83:4f:8f:06:f1:83:1e:66:43:e6:a6:01:f1:c9:33:a9:8d:bd:
a7:45:39:8a:ab:d2:93:6e:06:f0:28:16:72:17:0b:56:7a:47:
7f:be:86:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:39 2026 by rpki-client