Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft
File: xT4qugUV7JDRCREGD88pI2123d8.mft (raw, json)
Hash identifier: c1Au906RtG4AMs+EM0P3KA4v9EOc1gB3F3KTWqp8AVc=
Subject key identifier: 0A:8C:79:1A:75:B5:26:67:2E:C7:D7:CF:26:00:4E:D9:A2:68:FC:96
Authority key identifier: C5:3E:2A:BA:05:15:EC:90:D1:09:11:06:0F:CF:29:23:6D:76:DD:DF
Certificate issuer: /CN=c53e2aba0515ec90d10911060fcf29236d76dddf
Certificate serial: 019D28BB5DF9276BBF0F7EC1D4ED1F59775B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT4qugUV7JDRCREGD88pI2123d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft
Manifest number: 103D
Signing time: Thu 26 Mar 2026 06:01:01 +0000
Manifest this update: Thu 26 Mar 2026 06:01:01 +0000
Manifest next update: Fri 27 Mar 2026 06:01:01 +0000
Files and hashes: 1: ub7YR9axa9vWtz1X_qFq5fbsHkk.roa (hash: JE4qOMRm4xEBU/PFIJ8QsUIFvLyYeHz3Zc+xrGXyYyQ=)
2: xT4qugUV7JDRCREGD88pI2123d8.crl (hash: 1KOCaQwhq8/1+J+LqiH8c2FEoL1ZfVyAY1FmHge5ICk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xT4qugUV7JDRCREGD88pI2123d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:5d:f9:27:6b:bf:0f:7e:c1:d4:ed:1f:59:77:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53e2aba0515ec90d10911060fcf29236d76dddf
Validity
Not Before: Mar 26 06:01:01 2026 GMT
Not After : Mar 27 06:01:01 2026 GMT
Subject: CN=0a8c791a75b526672ec7d7cf26004ed9a268fc96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:97:1c:35:a0:ff:9c:5c:92:e8:22:c2:bc:4e:
b1:31:35:93:38:84:87:4b:01:01:7f:ae:84:8f:a2:
91:ac:18:99:d0:99:03:f1:06:7d:79:55:85:10:a2:
d8:d7:3a:0d:47:7e:57:38:e5:be:67:6d:69:d6:0e:
b8:3c:e0:0c:99:49:89:92:f2:96:d2:ba:c8:f2:96:
ad:dd:22:16:84:f9:be:e2:9a:9c:09:79:f1:b3:b9:
3f:9e:da:b4:c7:06:e9:71:27:38:20:5e:45:82:dc:
69:78:15:fd:71:e1:b0:fe:96:f9:ec:d2:fa:95:78:
9f:69:17:c2:20:38:7f:f8:71:95:2c:ce:32:64:3f:
7a:df:63:0b:8a:3d:4c:08:9f:70:30:1d:f3:5d:6b:
d0:ac:f2:04:9d:f3:e9:c1:69:85:13:95:07:25:1a:
8b:08:b7:85:b5:48:34:a6:cc:d7:99:6d:b9:61:08:
94:b7:18:94:85:b1:1d:6d:78:92:b2:14:e9:dd:61:
ac:a7:10:bf:90:8b:60:de:85:b9:62:78:cf:06:54:
5b:e0:ae:0e:fc:de:bc:67:a2:ab:57:94:38:bc:c7:
3f:4c:e5:75:cd:75:dc:ce:0f:97:7b:3f:06:db:36:
73:35:7a:e9:c8:38:48:08:7c:33:52:26:57:e4:57:
ff:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8C:79:1A:75:B5:26:67:2E:C7:D7:CF:26:00:4E:D9:A2:68:FC:96
X509v3 Authority Key Identifier:
keyid:C5:3E:2A:BA:05:15:EC:90:D1:09:11:06:0F:CF:29:23:6D:76:DD:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT4qugUV7JDRCREGD88pI2123d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ed:65:94:8f:b5:e4:ba:bb:5b:45:0e:c5:03:0d:48:3f:6b:
98:3b:e8:80:f5:c4:51:b0:35:8d:d6:10:76:62:9b:d5:25:a5:
a1:a0:64:95:4b:ca:bc:30:60:b4:7e:e1:e5:96:4e:03:f6:89:
ab:78:5b:db:90:c8:78:86:25:f1:99:1c:c8:dd:46:f6:8b:6e:
eb:14:a4:30:95:82:03:27:26:b8:6c:90:34:73:15:16:7b:92:
de:d5:47:5c:6e:e2:78:06:75:83:33:1b:aa:4f:1d:e3:1d:09:
9c:b2:73:42:8b:fe:6e:a8:bd:7b:ca:ca:ea:1d:ac:fc:31:f6:
7a:dc:9b:01:63:62:d7:f9:ac:40:12:0a:55:f8:51:86:11:9c:
0e:88:cb:29:de:89:c0:2b:c7:08:bb:a9:2e:6f:c0:36:e9:e3:
52:39:2a:7a:03:62:3e:da:bd:ab:67:2c:e3:d2:08:7f:78:b0:
c4:1a:42:5b:2e:fd:05:47:58:9f:9b:b5:45:3c:73:a9:53:01:
72:36:9c:f4:46:36:0a:20:61:12:63:51:f7:71:72:dc:8e:ef:
d0:82:0d:aa:9b:8e:34:99:bc:33:39:1f:fd:c3:44:df:5e:ed:
7e:8e:53:72:1a:42:b4:1a:db:99:87:44:f4:4c:2c:ed:70:ad:
00:a9:ed:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:51:54 2026 by rpki-client