Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
File: xK3VunZitzHdCLz4c48TXZOu1FE.mft (raw, json)
Hash identifier: QG5VcMhCgvc2XJcNOe0ICyEncqNeZAGOmh82i1tEyMA=
Subject key identifier: 33:8D:FA:20:8E:6F:8B:13:4C:D6:00:94:77:4E:88:53:41:FC:F8:B7
Authority key identifier: C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
Certificate issuer: /CN=c4add5ba7662b731dd08bcf8738f135d93aed451
Certificate serial: 019D2703D4BCB851BA4EA78FA4E24298F637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 22:00:55 +0000
Manifest this update: Wed 25 Mar 2026 22:00:55 +0000
Manifest next update: Thu 26 Mar 2026 22:00:55 +0000
Files and hashes: 1: 1-8oUTWUAuLAV-0eAuYQDr-5uUjg.roa (hash: j/xhG+Ho5blnFZVSciVE3ALUT+d6u+iQqAAWN+Se5oY=)
2: MHchnxV8uLs8pcvJTcOPLL-Bbbc.roa (hash: vPV8+4NZsXrCq8XvABi4c8I9ILlUiPMubO8YOy17XOc=)
3: xK3VunZitzHdCLz4c48TXZOu1FE.crl (hash: oAbIZw6Lvm/9wKvDa8sB6fyTL+NTy8GFEafwYIUx2gY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:d4:bc:b8:51:ba:4e:a7:8f:a4:e2:42:98:f6:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4add5ba7662b731dd08bcf8738f135d93aed451
Validity
Not Before: Mar 25 22:00:55 2026 GMT
Not After : Mar 26 22:00:55 2026 GMT
Subject: CN=338dfa208e6f8b134cd60094774e885341fcf8b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0b:bc:31:0b:0a:e1:71:fd:d4:83:83:a0:9c:
65:16:10:c4:9b:7e:7e:f7:ad:88:e6:f7:95:42:f1:
43:f6:1d:16:e3:ad:5a:ef:63:7d:27:62:f7:34:32:
da:14:7c:aa:a5:1f:c1:01:35:2e:89:1e:88:c0:93:
bc:58:47:df:a4:4f:e2:eb:5d:05:b2:ba:78:21:93:
06:7b:01:9d:7e:9c:3b:fe:02:2b:19:70:5d:2c:45:
7f:00:0d:4f:9f:7c:fc:70:d2:97:5e:60:92:5a:a3:
77:3d:14:d5:ae:c0:e3:3f:1f:1a:2b:34:f5:38:8d:
d7:c7:97:cf:4b:45:24:43:49:1a:d5:5a:fc:44:15:
da:61:01:3b:51:2a:32:61:d4:8d:93:3d:be:2e:e1:
a3:b8:30:9b:ec:02:3e:11:4b:12:14:83:03:de:d2:
33:02:59:af:ac:f6:28:90:2c:9e:30:f7:44:c9:ca:
e3:c5:dc:a3:38:bd:b7:ae:43:40:3a:2a:14:77:36:
b9:ae:0f:61:47:8a:06:3c:d7:74:21:f9:72:0b:d6:
68:0d:07:6a:29:57:d8:fa:e1:90:db:0e:36:7b:b9:
b4:aa:a7:61:2b:8d:96:d0:4b:07:9d:bd:f6:47:ed:
62:5c:e1:bf:90:15:bf:33:46:05:26:61:b8:95:d8:
1d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8D:FA:20:8E:6F:8B:13:4C:D6:00:94:77:4E:88:53:41:FC:F8:B7
X509v3 Authority Key Identifier:
keyid:C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:fb:d0:47:23:4a:d6:6f:23:d9:71:9b:28:af:00:d9:25:02:
92:ad:6b:62:2e:c1:ae:33:b8:09:e1:9d:f8:49:b0:5d:d9:9d:
71:bd:34:31:e0:31:87:28:d2:29:45:f3:4c:72:4e:0f:6a:58:
5f:76:9d:fe:2e:70:90:ae:a1:60:18:bd:03:54:44:8e:7f:6d:
4b:e3:63:52:d1:52:37:f4:56:1e:51:d1:3b:ed:10:ec:28:52:
59:37:ee:d5:71:f4:8c:38:44:09:e5:db:75:91:05:b2:38:76:
82:fa:3e:ca:5e:53:60:86:95:9e:cc:ab:ad:23:c0:31:0b:5e:
2f:62:6c:1d:67:15:3e:47:3f:34:2e:a1:c1:ef:6e:4c:2f:6e:
f8:1a:10:0d:e0:d2:b9:46:e6:95:74:e5:d0:64:ca:b6:4d:2f:
ad:6d:7f:75:39:99:c8:7d:25:25:de:0b:04:ce:4e:71:d3:a4:
c3:eb:68:51:a3:5a:e1:29:0c:c3:e3:14:56:e3:82:18:d5:94:
8a:8d:bb:d4:4b:f3:2e:ee:e4:97:92:37:0f:6f:7e:2d:24:80:
24:4d:f5:5a:b8:9b:9d:03:e7:35:65:cd:5a:5d:db:f5:ed:f5:
33:9d:99:35:21:b6:b5:7b:da:d8:7c:f9:af:bb:ac:7e:4e:94:
b7:3f:a4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:33:44 2026 by rpki-client