Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft
File: xhMz0OgQeIbQMFx72BvdNUiVJ64.mft (raw, json)
Hash identifier: hWyABx0pThB02rU15o0X53Zrt3CgMKz0GNF1tYMG8RY=
Subject key identifier: AA:BA:8E:05:AE:AB:BE:60:44:B8:9A:59:C6:29:6C:E7:6E:13:40:5C
Authority key identifier: C6:13:33:D0:E8:10:78:86:D0:30:5C:7B:D8:1B:DD:35:48:95:27:AE
Certificate issuer: /CN=c61333d0e8107886d0305c7bd81bdd35489527ae
Certificate serial: 019D284DF74A4E7DD5701EC12CAD410E54C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 04:01:31 +0000
Manifest this update: Thu 26 Mar 2026 04:01:31 +0000
Manifest next update: Fri 27 Mar 2026 04:01:31 +0000
Files and hashes: 1: 5ie9J9ix6eo_LjO_d-h0wTlK5sY.roa (hash: hY4eQy4LzjSe1EFCcdEhDwEocsy77V2cxczGFy9ZGiM=)
2: D0Omi7eTzuK_0HEfZBlA62fHv-s.roa (hash: 0MjChUFTQrOrybRBrDN8jiZf3suuubHFJss7LSX+W2A=)
3: xhMz0OgQeIbQMFx72BvdNUiVJ64.crl (hash: H4UotXWmBmjU84wMhLGnH/VOyKBSG86amJ0OxBtL9tU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:f7:4a:4e:7d:d5:70:1e:c1:2c:ad:41:0e:54:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61333d0e8107886d0305c7bd81bdd35489527ae
Validity
Not Before: Mar 26 04:01:31 2026 GMT
Not After : Mar 27 04:01:31 2026 GMT
Subject: CN=aaba8e05aeabbe6044b89a59c6296ce76e13405c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8c:59:db:bf:20:b8:ec:ba:1b:85:87:e7:5e:
af:31:9b:06:8b:de:65:9f:2c:5c:0f:42:fe:ff:c9:
01:0e:c6:2e:7b:cb:e9:cc:5d:01:6e:a6:7a:54:f8:
f0:20:e7:6a:33:9c:be:22:a6:84:13:85:6c:8f:09:
82:4f:5b:e5:13:c2:24:04:1c:fe:45:c9:6c:ae:63:
82:c2:6b:1e:79:e4:88:7f:3d:b5:f5:3f:2b:a1:01:
2f:40:14:d7:68:0b:9c:f0:7f:a8:49:13:9b:d6:2b:
ca:a8:0d:55:b4:4b:35:43:ac:85:8e:b1:05:14:88:
1c:cb:76:08:ff:2a:33:8c:6c:b5:9b:a8:d0:8b:a2:
3f:c3:7a:41:9e:07:1a:0d:43:96:f7:dd:6b:50:f7:
36:91:b0:f9:3e:98:27:d8:4a:19:c7:3c:c3:89:96:
92:30:9f:c0:eb:94:6e:bc:ac:78:97:87:ae:e6:9a:
52:1a:f4:b9:ba:42:3a:aa:67:11:06:f8:49:cf:74:
df:05:eb:a0:ec:c1:71:44:a0:67:58:8c:cc:d3:e6:
3f:b5:79:d4:29:13:2c:d8:ba:c3:e3:b1:56:db:2d:
fe:ac:40:14:0e:e7:f4:6a:c8:17:52:72:80:5e:6b:
0e:ff:6d:d2:59:fb:9d:33:49:99:57:fe:36:75:e6:
d9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BA:8E:05:AE:AB:BE:60:44:B8:9A:59:C6:29:6C:E7:6E:13:40:5C
X509v3 Authority Key Identifier:
keyid:C6:13:33:D0:E8:10:78:86:D0:30:5C:7B:D8:1B:DD:35:48:95:27:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:6c:11:3a:40:74:04:44:a0:ee:ce:09:c4:0a:f7:4c:c3:cd:
50:5e:63:da:97:86:59:25:58:10:2f:67:15:e4:45:13:64:64:
6f:28:9f:bb:01:aa:3e:73:7c:f2:39:df:f3:8d:54:b0:69:63:
d1:a1:21:2b:48:a8:31:7b:88:e1:5b:f6:33:3d:c8:7e:ad:81:
5d:8e:bf:4d:04:69:84:88:1e:c5:1b:19:82:93:0e:05:d2:e8:
92:e9:0e:b5:89:74:84:94:44:86:08:1e:25:52:91:75:c8:18:
db:54:ad:89:0f:07:d8:70:93:25:12:4f:75:4f:b0:fd:45:b4:
21:25:a8:f3:34:18:c0:b7:e8:9d:56:a2:c0:7a:fe:af:e2:ba:
98:31:0e:83:46:1c:69:9f:fe:bb:bc:fb:51:b4:33:4c:aa:a2:
c5:73:ce:8d:c6:ea:30:0c:1e:46:37:f8:77:6e:8b:54:5b:95:
49:49:e6:26:79:f4:eb:cf:f2:0e:4a:f2:8d:88:e2:3e:0e:94:
ec:30:56:84:0a:5f:21:f7:1c:cb:08:46:7f:07:73:bc:02:3c:
ea:68:2f:94:81:f2:1f:77:7a:a5:54:e4:cd:6c:82:55:6d:87:
01:42:23:16:ff:45:1b:da:b9:16:11:82:3b:22:7f:c5:54:a8:
f0:c1:1d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:49 2026 by rpki-client