Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
File: xGPDRgOpRpUv8nbgol_TYfys8lE.mft (raw, json)
Hash identifier: SPcz8fDnFYq3Drul/53sNqczqhOT5ldpcBqvKKrfRSo=
Subject key identifier: 8F:FE:5C:A4:99:8C:48:16:CB:AD:51:E3:21:59:10:BB:AA:44:B2:99
Authority key identifier: C4:63:C3:46:03:A9:46:95:2F:F2:76:E0:A2:5F:D3:61:FC:AC:F2:51
Certificate issuer: /CN=c463c34603a946952ff276e0a25fd361fcacf251
Certificate serial: 019D273AE2694C9C5655BDED66DA9C0548BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 23:01:03 +0000
Manifest this update: Wed 25 Mar 2026 23:01:03 +0000
Manifest next update: Thu 26 Mar 2026 23:01:03 +0000
Files and hashes: 1: 7cKCDlZbeTX28BBwTA5QO4eJ2xc.roa (hash: sIuMQVrFFVonk4niSkh2ILAH9kBI8WfPxCPrqjWAlqs=)
2: xGPDRgOpRpUv8nbgol_TYfys8lE.crl (hash: JyYnszpheBhVrP7X2PF/7/zSGP9rQ6h8sGN1sTtkdao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:e2:69:4c:9c:56:55:bd:ed:66:da:9c:05:48:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c463c34603a946952ff276e0a25fd361fcacf251
Validity
Not Before: Mar 25 23:01:03 2026 GMT
Not After : Mar 26 23:01:03 2026 GMT
Subject: CN=8ffe5ca4998c4816cbad51e3215910bbaa44b299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:44:7b:7a:40:62:85:02:a8:97:ce:c4:06:2c:
ef:4c:1d:f1:70:87:e4:32:95:6f:9f:43:81:15:1b:
ff:7a:a1:ca:0a:8f:c6:8d:b4:cc:66:85:64:a4:15:
2e:30:b0:a5:16:24:29:62:ea:94:19:79:2c:ba:6a:
e6:f8:a2:68:da:a6:a7:82:8c:0d:6d:d8:c5:5b:4b:
c5:3c:80:be:92:9d:10:d8:c1:17:06:42:df:3c:0e:
05:4c:ba:6a:ff:54:13:4c:c6:05:90:9e:5c:73:b5:
58:d4:7d:57:1a:03:82:79:b9:03:4b:fc:c1:32:68:
b7:d0:dc:bb:3c:d4:1d:38:4e:c5:5d:33:12:c7:b9:
3c:34:b3:2e:0a:79:72:30:11:8b:aa:0c:b4:c8:56:
d2:46:b6:1f:25:65:ed:2e:5f:e3:1e:f0:4d:3f:fb:
75:f9:31:40:eb:1c:be:00:97:77:55:36:e3:02:bd:
81:ca:30:27:f6:a8:68:8e:ce:23:06:68:84:97:cd:
90:87:65:79:6f:93:16:28:c6:06:8e:85:ad:c5:0d:
45:b3:c0:2e:29:ef:4b:71:3d:8d:e1:fc:88:2b:cf:
64:f2:e2:8e:d1:58:92:ae:a0:75:80:18:b0:fa:a3:
f8:a7:cb:b0:19:05:32:9c:7c:10:f5:1d:be:2c:16:
7c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FE:5C:A4:99:8C:48:16:CB:AD:51:E3:21:59:10:BB:AA:44:B2:99
X509v3 Authority Key Identifier:
keyid:C4:63:C3:46:03:A9:46:95:2F:F2:76:E0:A2:5F:D3:61:FC:AC:F2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:10:35:8a:30:93:ee:39:52:d6:9b:bd:3e:92:36:ec:94:80:
03:e9:fb:c5:9c:fd:b6:a5:09:6e:22:ae:c2:39:30:97:c1:fd:
1d:72:68:e5:63:09:b3:67:d6:32:d9:c8:07:bd:70:9d:84:79:
de:68:d9:eb:ac:f1:0c:7d:26:7d:73:59:f7:08:59:7d:fd:1e:
7a:28:50:75:c2:eb:fb:8f:5c:27:bc:9a:16:cb:b1:b7:1f:5a:
b2:e7:6d:86:0b:60:3f:dd:48:e5:77:70:aa:f4:21:b3:2b:bd:
10:36:8f:90:f8:97:4c:4a:21:8e:a7:48:d8:63:6e:b8:de:f8:
2c:e3:c2:fc:02:a6:8a:c6:73:4e:dd:b0:86:7a:73:3e:38:cd:
1f:10:cb:68:f8:7d:74:01:3a:6d:12:0d:11:b8:3c:f7:68:88:
da:9e:93:9f:7b:25:69:0d:f5:fa:8e:81:48:37:dc:71:8f:4c:
51:3e:fa:05:6a:36:29:84:3a:8a:1d:b8:8a:79:32:c0:79:92:
35:ee:a7:85:26:c4:a0:d9:08:98:4c:60:26:95:b7:4d:81:59:
aa:8f:17:e0:ac:34:3f:81:bb:da:fb:bd:16:16:1e:4c:0e:5d:
2b:10:ff:a8:d5:7b:c3:a2:dc:0c:f2:08:19:f1:c4:12:7e:92:
64:3f:3e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:30 2026 by rpki-client