Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.mft
File: xPLYuhsZIR-p-cDbVRVFEzECzLs.mft (raw, json)
Hash identifier: EPWGg/FQGTcaQAsHQ+iRPNPnanq2kssOTnBA0HqLsRc=
Subject key identifier: B0:5A:54:36:00:C8:9C:56:7D:E6:C0:32:B3:50:7D:DB:C2:98:C8:91
Authority key identifier: C4:F2:D8:BA:1B:19:21:1F:A9:F9:C0:DB:55:15:45:13:31:02:CC:BB
Certificate issuer: /CN=c4f2d8ba1b19211fa9f9c0db551545133102ccbb
Certificate serial: 019D27A87B1984D6B144281B6980A2779AB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPLYuhsZIR-p-cDbVRVFEzECzLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.mft
Manifest number: 1711
Signing time: Thu 26 Mar 2026 01:00:46 +0000
Manifest this update: Thu 26 Mar 2026 01:00:46 +0000
Manifest next update: Fri 27 Mar 2026 01:00:46 +0000
Files and hashes: 1: GWJI_mFCqJuyDkHldrdzfZ_vzc8.roa (hash: Kba9i+mtRpiR9std+3kLIR0ldljFrDaLsM+dV2wWLHc=)
2: xPLYuhsZIR-p-cDbVRVFEzECzLs.crl (hash: AYWT80ovEHEWphllrMX+kcO7PDe+Tgo5Ibzd6tEh9gY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPLYuhsZIR-p-cDbVRVFEzECzLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:7b:19:84:d6:b1:44:28:1b:69:80:a2:77:9a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4f2d8ba1b19211fa9f9c0db551545133102ccbb
Validity
Not Before: Mar 26 01:00:46 2026 GMT
Not After : Mar 27 01:00:46 2026 GMT
Subject: CN=b05a543600c89c567de6c032b3507ddbc298c891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0b:ea:78:4e:24:f0:7f:56:c0:e5:22:80:7d:
20:67:74:f0:de:5b:48:85:90:ce:82:67:00:31:0d:
1a:d3:2e:f1:66:29:8b:69:ce:74:a3:9b:7f:35:62:
e9:55:5c:f8:ca:36:0f:e4:43:8a:3c:a8:e7:8e:06:
3e:f1:19:54:14:97:9d:8a:6a:01:bf:a2:e0:90:b0:
7b:6a:c9:36:56:05:85:5d:26:30:05:ae:2d:c1:71:
24:a4:f7:da:4e:5e:f7:9c:9e:f6:b1:06:56:6b:2f:
16:3c:a6:06:46:53:fb:c4:fc:64:dd:bb:0d:42:2a:
43:04:66:5c:04:b0:d9:5b:b4:00:62:5d:93:9b:13:
4f:ed:d5:5b:1f:92:57:ab:97:42:6b:7c:38:4a:20:
da:f0:7d:f5:d6:d2:30:22:8b:2f:bb:58:8a:a6:e8:
c6:42:93:6d:7b:5b:08:76:dd:5d:16:e3:8d:3c:7a:
97:21:99:40:28:69:27:06:29:2e:e2:2c:ff:2a:00:
2f:61:5f:91:e9:42:ca:22:de:2d:54:cc:17:30:b6:
aa:10:4d:90:4e:95:bb:a5:19:dd:52:89:5a:16:69:
90:12:2e:67:9c:77:53:ed:5b:36:af:63:7d:f7:a3:
81:bc:a7:90:82:81:f3:f3:67:56:07:f2:ef:92:6f:
e6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:5A:54:36:00:C8:9C:56:7D:E6:C0:32:B3:50:7D:DB:C2:98:C8:91
X509v3 Authority Key Identifier:
keyid:C4:F2:D8:BA:1B:19:21:1F:A9:F9:C0:DB:55:15:45:13:31:02:CC:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPLYuhsZIR-p-cDbVRVFEzECzLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:af:b9:27:79:e1:5f:eb:c1:32:78:4c:7f:9f:e3:5f:1f:37:
c5:52:bb:ff:bb:97:53:db:e1:e2:bc:6d:d3:14:dc:73:a5:47:
64:14:a9:c3:fc:f8:b3:53:b7:21:e5:ef:25:7b:ac:82:80:f6:
1b:1e:ff:27:d7:87:8b:d3:68:09:c4:ff:30:24:fc:ea:c4:96:
99:18:a3:28:73:af:7d:88:a2:a1:b0:69:f2:00:7b:b4:ef:2a:
92:b0:95:42:ec:25:c9:50:90:d6:a9:b8:09:85:a5:f5:81:7d:
45:05:02:f7:e6:5d:e7:ae:91:ae:79:19:76:9f:b7:bf:d5:78:
1e:09:ca:54:ed:f4:c8:fc:62:6f:11:8a:9b:05:13:0a:06:36:
6f:78:c7:72:5a:83:f8:21:85:9e:07:55:f0:c3:76:61:e4:a8:
ec:ca:1c:94:ca:d9:62:30:a8:db:c4:c1:10:28:b6:b9:f5:f6:
67:18:67:15:68:1a:7b:1d:3a:22:bf:0b:a2:f6:3e:53:d6:bf:
10:a0:d3:69:71:9e:aa:89:ba:f6:23:51:dd:c8:32:58:6e:8c:
77:b0:73:0e:4e:df:17:f7:0e:13:a4:c9:64:2b:aa:54:aa:6a:
2a:a8:1a:f1:fb:39:49:0b:f9:84:f8:14:3d:95:13:d5:6b:ec:
8b:78:d6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:20:06 2026 by rpki-client