Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
File: fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft (raw, json)
Hash identifier: 01oWkJ6MoYpF3/G3jpyWWupClFDHP069YnmX0XwfxyU=
Subject key identifier: 4B:6E:36:BF:63:F5:A7:76:32:32:52:53:AF:43:DA:EE:37:17:B5:83
Authority key identifier: 7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
Certificate issuer: /CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Certificate serial: 019D2771B9A4FE7B931C24EB852EBA265C0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
Manifest number: 1645
Signing time: Thu 26 Mar 2026 00:00:57 +0000
Manifest this update: Thu 26 Mar 2026 00:00:57 +0000
Manifest next update: Fri 27 Mar 2026 00:00:57 +0000
Files and hashes: 1: 6HTx2YeWwDr3S2VVILbwB2Jafj8.roa (hash: hsBw1ez3yUj6UmH6NZMF2hQl/djg3G8hjk0Okprj7r0=)
2: VqGEMx7_g1oCR5PMih3sF1ICV0I.roa (hash: 2XQimBCsGUGReAdNUI71pDg4FSroIYJhgCkB4L3gVZQ=)
3: fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl (hash: o37rXl92koaMmDw/6INzuSr2LQsaqI45ZSkvv/WyfzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:b9:a4:fe:7b:93:1c:24:eb:85:2e:ba:26:5c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Validity
Not Before: Mar 26 00:00:57 2026 GMT
Not After : Mar 27 00:00:57 2026 GMT
Subject: CN=4b6e36bf63f5a77632325253af43daee3717b583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:31:68:5c:f0:4f:23:e9:48:67:4d:21:e5:47:
05:9c:29:b3:c0:42:53:17:29:84:6e:bb:e9:3a:cb:
13:15:20:f0:9e:26:8d:67:d3:4a:e1:8e:c8:59:52:
e1:cf:2b:59:b5:f7:a2:94:e1:7c:05:b1:09:9d:79:
da:92:75:6e:9a:cb:10:9c:80:5c:a9:2c:2e:c6:6f:
b4:6b:76:48:07:38:e1:97:05:fa:4b:14:32:ac:c2:
f5:9a:75:1f:cb:b2:ae:fe:35:12:2d:e1:77:87:66:
df:03:41:a2:e7:2e:40:6d:55:b3:9e:8c:27:12:3b:
45:92:2c:96:36:70:81:c2:04:50:b5:0f:29:03:c3:
c6:a7:b0:3d:5b:2f:85:e3:f0:52:94:c8:f4:71:6f:
56:35:5f:e3:ad:75:c2:c2:83:89:80:73:ce:74:86:
16:01:f3:b2:ff:d4:9e:41:63:38:bd:ba:54:f2:cc:
80:ff:ed:94:bb:13:b7:89:da:72:cf:cf:bf:f7:21:
9b:cb:81:7d:35:81:7e:0f:a2:9a:aa:a8:6e:7f:64:
8a:d3:bf:a7:93:24:c0:5f:b4:e0:a4:4e:93:49:a8:
fb:06:8e:25:18:d0:7a:b2:7a:01:5d:a1:b7:31:06:
ca:b6:f0:ca:a5:51:2f:1d:47:60:26:aa:5f:ea:9a:
1f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6E:36:BF:63:F5:A7:76:32:32:52:53:AF:43:DA:EE:37:17:B5:83
X509v3 Authority Key Identifier:
keyid:7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:9e:11:08:6d:3b:89:79:47:0d:21:89:ec:51:6c:25:c2:c3:
c5:3b:5b:24:92:30:2b:9f:ad:97:dd:0f:b1:b1:bf:06:6a:10:
73:39:c6:9f:61:b9:1a:ec:eb:19:c0:da:79:0e:20:ee:86:54:
4f:f9:f2:39:78:c2:d7:53:a3:a6:48:5f:37:52:72:de:2f:40:
93:9a:be:05:99:70:6c:d4:1c:f3:04:4d:e9:c2:20:97:e7:e1:
8f:08:5f:d5:bc:05:9a:f0:6d:12:2e:60:00:df:58:66:d8:05:
29:61:fb:9b:f0:25:30:0b:06:87:ef:43:e1:61:0a:f2:21:11:
e3:de:6e:5b:ef:f5:fe:be:06:62:7e:bb:97:8d:23:8d:01:42:
c9:8c:df:51:2b:9a:19:e3:8f:95:cb:68:ce:41:fd:df:ef:14:
23:4a:9e:2f:97:59:e1:08:20:02:46:8f:5c:73:f3:00:42:6f:
a1:7a:79:a0:95:34:96:44:b0:87:60:51:6e:ba:df:a6:00:5e:
19:04:c7:12:5f:92:1f:a2:63:40:64:c2:1a:fd:fe:fc:89:93:
1c:c8:4f:b6:4d:57:7c:3a:3d:dc:de:b4:df:af:6c:95:3e:9f:
cc:3a:62:27:86:8f:37:6a:a4:08:88:e0:e0:77:fd:5f:7e:df:
d4:be:03:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:54 2026 by rpki-client