Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft
File: xypST5sbOAHb18iaFgrsB2tX5yk.mft (raw, json)
Hash identifier: bAYchlZOpetVPO9WPuwWLD7G4sbEq5NC+iIrP8Z03HM=
Subject key identifier: 4E:11:4D:1B:AA:73:BB:A9:AF:8E:39:39:3A:A4:5D:2C:C1:44:FE:71
Authority key identifier: C7:2A:52:4F:9B:1B:38:01:DB:D7:C8:9A:16:0A:EC:07:6B:57:E7:29
Certificate issuer: /CN=c72a524f9b1b3801dbd7c89a160aec076b57e729
Certificate serial: 019D26967B11908906246019BD5177A6D206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft
Manifest number: 10ED
Signing time: Wed 25 Mar 2026 20:01:29 +0000
Manifest this update: Wed 25 Mar 2026 20:01:29 +0000
Manifest next update: Thu 26 Mar 2026 20:01:29 +0000
Files and hashes: 1: 6MOGH8oGvh6IYApLtSaZowTuqtk.roa (hash: HJrHUPLTq5etSutfssfFpw4hmCz6YgNXH+NQPFP+7uM=)
2: U2uOljUf-48wSNUQgF-2wsauE-g.roa (hash: 2YVcDn6Ax9cXhQHx8fyaxNd0XJvsq3/OJmSqm70WvIg=)
3: dtXdklEBCkjgbKoquL4DVM7xMqU.roa (hash: Drj4tg7W2VV/6vKkt0y7Sp3+nXq82WjkyEwAPPM25uA=)
4: xypST5sbOAHb18iaFgrsB2tX5yk.crl (hash: J8E/osMhI+AcNoukPbCwm96Es78R84IQvdU1mwCCyVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:7b:11:90:89:06:24:60:19:bd:51:77:a6:d2:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c72a524f9b1b3801dbd7c89a160aec076b57e729
Validity
Not Before: Mar 25 20:01:29 2026 GMT
Not After : Mar 26 20:01:29 2026 GMT
Subject: CN=4e114d1baa73bba9af8e39393aa45d2cc144fe71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:86:cd:19:47:b1:15:1e:8f:7d:f9:a1:41:4b:
4b:57:17:67:8d:a9:4d:02:f0:3d:fd:1d:de:e6:c0:
4a:1d:b7:dc:95:d3:cc:a9:db:4c:ba:29:2d:be:e9:
49:33:39:05:4c:ef:23:57:6f:8d:6a:d1:29:09:d3:
5f:0a:33:99:e0:27:92:1c:e7:79:c3:57:f4:79:fd:
4b:8a:11:4e:83:2f:6f:c8:e7:4f:0c:0a:54:a9:ac:
85:8a:1b:95:b8:df:97:9e:aa:c2:52:2e:ac:93:33:
24:61:f1:03:ad:3b:9d:ef:d3:c7:f8:f1:ff:fb:e3:
b7:a5:72:39:44:b1:ac:7f:19:2d:ba:9a:6f:98:cb:
b2:e3:41:00:33:26:7f:e1:92:58:d1:c2:db:ee:3f:
25:dd:82:ef:fa:4f:45:19:ba:e0:e9:83:7c:48:e5:
2e:7e:1e:c0:34:77:8e:bb:66:30:d1:d2:4c:f3:9d:
2b:6d:b5:71:f6:ff:c0:42:2d:57:f2:12:4b:ec:61:
b6:5f:d5:8b:9e:59:26:66:d7:6b:6f:71:2e:81:34:
96:3c:a6:69:0e:8e:78:61:02:e1:20:6a:5f:47:99:
8c:ac:66:df:d2:c6:8d:b6:89:b1:ef:2c:b6:a6:78:
96:5a:dd:cb:10:ed:6b:e1:b3:06:22:55:ba:53:65:
71:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:11:4D:1B:AA:73:BB:A9:AF:8E:39:39:3A:A4:5D:2C:C1:44:FE:71
X509v3 Authority Key Identifier:
keyid:C7:2A:52:4F:9B:1B:38:01:DB:D7:C8:9A:16:0A:EC:07:6B:57:E7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:7f:66:18:bb:e3:9e:dd:fb:5f:58:61:31:ce:92:a6:e2:42:
69:6a:d7:c5:21:0b:31:6c:ea:66:20:b8:e8:db:0f:03:eb:43:
2c:e5:8e:90:01:9e:04:c0:dd:36:6b:7d:06:49:80:ce:5c:93:
fe:59:52:74:b8:06:dd:c6:e0:a0:0e:de:5d:a4:24:5a:6b:0d:
2c:5d:5d:fe:ec:ac:33:e7:a0:fd:ac:f5:25:29:04:ca:33:a7:
98:f0:90:14:36:8f:8e:7d:46:a0:4d:0e:3f:1e:51:3f:4b:3f:
f6:13:26:b0:9f:54:46:be:5e:60:68:c6:fb:2a:02:25:a1:9e:
d7:a2:da:4e:02:b3:4e:d4:82:25:6d:1b:fb:a4:a5:38:a2:c8:
7c:44:fc:db:de:e6:e6:78:df:ad:d2:f2:a6:0e:aa:5c:28:96:
be:3b:12:0e:0a:4f:ae:92:83:dd:03:5b:6f:9b:62:55:15:12:
3c:4a:4b:3d:3f:05:13:f2:b0:ec:0c:52:0f:fc:db:0d:26:2f:
37:81:8f:0e:01:78:bf:01:ae:2a:57:7d:9b:4a:e8:c4:30:75:
4a:aa:75:c8:26:47:b7:20:2a:98:0f:d5:f4:70:91:b9:ca:7d:
50:51:03:3e:c4:e5:74:9d:41:2b:32:52:db:5a:fc:eb:fc:db:
d6:34:39:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:41:43 2026 by rpki-client