Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
File: xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft (raw, json)
Hash identifier: XzjQhyrRhR6qXn21JL6TZaP5OQI8E1emiojjmQVvuKs=
Subject key identifier: AD:F0:0A:85:0B:33:E4:79:E1:81:29:74:45:90:23:DF:44:BB:D8:C6
Authority key identifier: C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
Certificate issuer: /CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Certificate serial: 019D2AE0D90C0A18A5E5E45E714A84C1BEB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
Manifest number: 16D5
Signing time: Thu 26 Mar 2026 16:01:11 +0000
Manifest this update: Thu 26 Mar 2026 16:01:11 +0000
Manifest next update: Fri 27 Mar 2026 16:01:11 +0000
Files and hashes: 1: vAqm-n6lOJmboBYQxwCWXscToCI.roa (hash: eddQmjFbutaY0t3+KjyZXIhwzLmKmB/bUbWp/1/h8vE=)
2: xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl (hash: EM0t+bPWZXrRW1/D+l0x5Ci/p7/xPeR9cKwZ78ayiHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:d9:0c:0a:18:a5:e5:e4:5e:71:4a:84:c1:be:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Validity
Not Before: Mar 26 16:01:11 2026 GMT
Not After : Mar 27 16:01:11 2026 GMT
Subject: CN=adf00a850b33e479e1812974459023df44bbd8c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:59:6e:b6:b2:03:42:bd:a8:78:bd:42:df:51:
e5:ec:ca:32:2b:48:21:c8:b9:80:a0:72:9e:64:81:
d6:17:e5:23:83:c8:a4:02:7d:87:8a:2c:eb:cc:f2:
44:de:a1:9c:95:c3:bf:03:c8:e8:76:d0:de:39:38:
26:01:c3:bb:46:4f:09:12:04:d7:ca:e8:1c:a6:5b:
ce:44:2f:6d:bf:65:79:db:b3:6e:ec:e4:58:d6:8b:
b0:91:cf:9b:ca:73:81:bf:96:e6:1d:46:74:71:16:
7f:34:7e:8c:86:d3:ec:32:9d:25:56:3b:c1:dd:0a:
75:fd:07:49:2f:2d:0b:85:76:b3:33:cf:99:e3:91:
11:50:20:eb:08:ad:a0:cc:90:ce:a1:9d:f5:37:38:
d5:ee:42:5e:bd:11:00:0f:0f:77:95:52:04:9a:33:
a8:f3:1d:32:16:20:59:e1:6e:76:4e:c9:45:86:b6:
43:a6:9d:22:84:9a:a0:3b:98:77:23:d4:88:d2:4d:
fe:e4:c2:7d:27:11:95:bd:40:28:7d:21:f9:7b:84:
97:fc:7f:c2:d9:ff:8a:ae:35:a2:3e:75:51:cc:37:
65:ed:9b:9f:fc:ca:da:55:b1:88:19:c2:2e:5c:2d:
29:1a:93:fe:5d:27:b1:a9:b6:23:74:11:cb:4d:a5:
af:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F0:0A:85:0B:33:E4:79:E1:81:29:74:45:90:23:DF:44:BB:D8:C6
X509v3 Authority Key Identifier:
keyid:C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:15:87:05:70:90:66:0b:5e:be:f1:c6:f4:bd:99:d4:75:ed:
e9:70:bd:2d:98:23:95:81:0f:ca:4a:0a:11:76:f1:44:c0:79:
2b:80:ec:f7:f2:80:8b:f2:51:ca:df:44:bb:5e:dc:4e:d2:71:
42:29:4a:7d:d3:55:00:27:65:d3:a4:7b:9c:d9:b7:86:cd:f9:
c0:2e:8b:fd:7b:33:5b:73:c7:21:3c:e8:18:4b:31:1b:87:a5:
00:55:62:bf:ac:99:8b:64:54:37:e6:7d:94:ca:a1:ad:74:ec:
16:a7:35:d0:5d:2c:6b:cc:12:2d:63:22:94:f9:ae:75:64:3a:
58:88:a0:85:e7:20:6a:29:03:7b:45:de:66:0d:e6:17:bf:ac:
b5:bf:bc:79:27:82:e9:5e:95:15:e1:46:b5:1e:94:f3:9b:1a:
88:c7:ae:c9:b3:cb:5b:ff:d3:b0:6f:f8:52:32:98:13:04:42:
f9:ac:9a:78:5f:2a:81:26:3a:53:dc:26:a2:e1:20:2d:aa:ca:
6a:71:4d:c6:f8:c7:a1:67:43:d6:2c:af:78:4b:23:1c:a2:37:
1a:81:51:11:a1:fe:59:68:69:78:49:8e:aa:a7:97:92:85:e4:
d9:ca:e5:12:93:e8:fe:28:17:e0:11:57:24:fd:d6:14:46:3e:
fb:a6:5d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:24:39 2026 by rpki-client