Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
File: xOuh_fbE3hksHT7fioAMpZf5fWg.mft (raw, json)
Hash identifier: vKWY90QgekkEdtXDlwCK9fpaFmXMaQ2WGb+YAI8DVfI=
Subject key identifier: FF:A5:49:63:89:87:28:25:BF:E0:D6:D9:44:A1:53:D6:EE:AC:3A:CB
Authority key identifier: C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68
Certificate issuer: /CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68
Certificate serial: 019D265EFFCA99E2398A0C9F13671F4B716C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
Manifest number: 188C
Signing time: Wed 25 Mar 2026 19:00:53 +0000
Manifest this update: Wed 25 Mar 2026 19:00:53 +0000
Manifest next update: Thu 26 Mar 2026 19:00:53 +0000
Files and hashes: 1: 2eq1zQiZruK_fgcYKv9VqgWsnLg.roa (hash: dGmPb+aKqyf+4gPgmSdPDA+kT9hY/m7lfSRDQRbeow8=)
2: asN3gxb8XZb5KqWRogBq6WRHiqA.roa (hash: Prp8LNadOYmrHAOgpcP5VxtRwnxwbuoePqoVUvrBJuc=)
3: xOuh_fbE3hksHT7fioAMpZf5fWg.crl (hash: /1RCgKEuiNMbqyt9Os/peNo3yzu5CIBtxnsGaTEqM+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:ff:ca:99:e2:39:8a:0c:9f:13:67:1f:4b:71:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68
Validity
Not Before: Mar 25 19:00:53 2026 GMT
Not After : Mar 26 19:00:53 2026 GMT
Subject: CN=ffa5496389872825bfe0d6d944a153d6eeac3acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:db:c2:7b:76:b4:87:3b:61:7c:cf:06:8d:a4:
a6:6e:48:8e:f6:60:b3:0a:a4:c0:80:6b:7c:fa:dc:
8b:e3:a8:01:a1:f9:ad:b1:b5:9b:59:10:5e:8e:10:
49:a1:7e:b0:52:ba:fd:83:ce:de:6f:58:24:e3:ea:
5e:a0:54:b4:23:67:53:27:02:5d:32:03:80:24:95:
e3:5a:b6:b8:f6:7d:ca:01:1c:a6:bc:3c:a7:0a:50:
b8:f8:2d:7a:74:c2:b2:3d:8a:4d:7f:c1:72:ce:ab:
3c:1e:f7:8c:ad:8a:cc:33:1e:8a:c0:6d:41:90:d6:
6e:b8:dd:b3:85:0f:d8:f9:c4:5c:b4:b7:4b:c9:21:
6e:24:34:58:98:c4:b6:fa:d4:96:f2:46:df:4b:6b:
a3:df:f2:fa:95:17:0a:53:ff:d8:04:05:79:fb:18:
f5:65:33:1e:63:4a:9b:c3:bf:b7:c2:7a:7c:f1:31:
b7:27:45:77:6d:51:6d:d7:60:99:cb:42:a0:0f:13:
e9:e8:e6:9f:17:f5:7d:4f:ee:85:b4:54:b0:f8:26:
d3:e2:15:06:59:59:78:c9:ad:4a:de:65:c9:43:d7:
bf:f9:2d:0a:c7:05:db:02:1e:f5:8b:46:fc:b5:ab:
ad:3c:c0:0c:d6:99:0c:69:88:5c:5d:4d:cc:25:f4:
0e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A5:49:63:89:87:28:25:BF:E0:D6:D9:44:A1:53:D6:EE:AC:3A:CB
X509v3 Authority Key Identifier:
keyid:C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:23:3e:09:08:22:fc:29:39:93:e3:9b:73:da:9e:ec:50:81:
40:1e:e1:a6:5b:0e:f9:f8:43:32:9e:70:08:f5:8e:a2:4f:14:
29:7e:0d:2c:3b:4a:8a:ac:c1:b6:ed:a0:81:85:ea:d1:d8:d2:
40:f8:5a:0a:73:a1:93:68:12:a0:5c:58:1d:18:21:cd:4e:44:
84:2d:92:09:d3:0c:89:71:27:9a:07:1d:12:8a:ce:ce:7c:60:
59:70:e1:23:6f:02:5c:30:48:48:2a:c9:ac:1b:36:c7:6d:b5:
0f:8d:a7:98:94:70:b4:c4:62:45:9c:ce:ff:aa:00:20:80:61:
5f:3b:e3:de:13:18:53:0a:3c:58:30:56:a6:bc:52:a5:ee:60:
3c:13:ab:49:6e:e5:0b:ae:be:03:d7:e6:1f:51:bf:e0:28:59:
73:d5:88:b3:c5:ce:e8:b9:62:7f:90:3a:a3:bf:ef:7a:cd:79:
c0:76:98:02:07:5f:0f:50:9f:83:90:9d:64:ef:7d:ed:3b:5b:
38:3f:5b:38:e1:45:82:54:7a:d0:ff:73:a2:f8:fc:1a:e7:54:
f8:46:be:e5:d1:db:ac:cc:b4:19:e3:bc:91:a0:93:a4:e9:71:
76:ba:e3:54:47:fa:c9:97:b9:33:e3:74:0d:cd:a0:c0:96:11:
9a:fc:1f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:56:21 2026 by rpki-client