Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
File: x0yghVF4oM3XGRS88iOqMa9jaaQ.mft (raw, json)
Hash identifier: Jx+NR6BQ5Ar+MAM8rnrQD3QubUv8BQqVFMCjgGJEUSg=
Subject key identifier: 8B:D8:84:FF:57:A1:02:AA:62:9D:C7:AC:CA:3D:72:2B:4B:50:A0:3A
Authority key identifier: C7:4C:A0:85:51:78:A0:CD:D7:19:14:BC:F2:23:AA:31:AF:63:69:A4
Certificate issuer: /CN=c74ca0855178a0cdd71914bcf223aa31af6369a4
Certificate serial: 019D27A8822EF7120FCB1DD34FC9FFA1D062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
Manifest number: 10F2
Signing time: Thu 26 Mar 2026 01:00:47 +0000
Manifest this update: Thu 26 Mar 2026 01:00:47 +0000
Manifest next update: Fri 27 Mar 2026 01:00:47 +0000
Files and hashes: 1: 9sdNFthZZukD_uXtTd0XAPClQdY.roa (hash: tGqQPkljGMhWTFdHBoZoHHu7YzMwjEuFnjQUjnre+7E=)
2: x0yghVF4oM3XGRS88iOqMa9jaaQ.crl (hash: SDIVBWiWk34rSc5Mwz5VXonJwPWPnAFFrzJYzooSyQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:82:2e:f7:12:0f:cb:1d:d3:4f:c9:ff:a1:d0:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74ca0855178a0cdd71914bcf223aa31af6369a4
Validity
Not Before: Mar 26 01:00:47 2026 GMT
Not After : Mar 27 01:00:47 2026 GMT
Subject: CN=8bd884ff57a102aa629dc7acca3d722b4b50a03a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:33:99:2c:c5:1a:c0:5f:fa:e0:19:8d:6f:7c:
d4:0a:c6:c3:3a:4f:25:ca:8c:4f:d8:68:8c:02:ac:
5d:11:62:c9:fb:8b:fc:b0:65:da:63:47:ad:c6:13:
c4:7d:7f:40:f5:eb:3c:0a:ff:c3:28:c3:a8:73:44:
73:2c:5a:de:13:b3:1a:54:a1:1c:d2:ee:0b:10:b3:
a4:c9:20:83:04:45:4f:46:ef:b0:b5:d4:54:07:a3:
53:48:09:38:be:b3:23:85:4d:ba:78:a0:8c:7a:b9:
9e:b6:6d:bc:2e:0f:d8:fd:4c:0f:a0:f0:d4:1a:28:
89:05:77:0c:63:cb:26:95:c4:94:fd:8f:8e:55:09:
ee:fc:e8:8f:b4:11:5f:53:72:75:b1:6b:c4:05:86:
10:13:39:c1:58:0b:51:d1:38:ea:a5:0e:7c:42:8a:
72:1d:8e:dc:eb:81:a2:0f:69:dc:84:c0:af:5d:00:
b3:cc:70:28:56:22:fe:46:26:e1:71:45:50:91:55:
e9:28:22:83:e0:3a:b4:41:9b:f5:ee:64:b5:e3:e4:
33:56:01:2a:75:e0:01:5b:24:ac:f6:73:41:b6:7d:
7b:2e:b7:f2:ad:21:e3:c3:dd:8d:01:28:b3:7b:ab:
96:c0:f0:a4:b1:d8:bd:5c:30:3a:8e:b9:a1:9b:7d:
34:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D8:84:FF:57:A1:02:AA:62:9D:C7:AC:CA:3D:72:2B:4B:50:A0:3A
X509v3 Authority Key Identifier:
keyid:C7:4C:A0:85:51:78:A0:CD:D7:19:14:BC:F2:23:AA:31:AF:63:69:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:26:4b:70:12:63:e8:71:0c:c8:62:8f:dd:20:a4:d2:c1:ca:
41:fe:3e:c4:86:40:ff:c6:07:82:d8:41:3b:4d:3d:84:be:b8:
1e:42:5a:02:1e:75:2a:54:02:30:1d:b0:2a:18:48:b3:95:b5:
80:60:d5:82:e0:7a:55:d1:a8:2d:1c:70:47:27:4c:63:b2:5a:
a8:29:ad:84:78:f9:02:21:b4:2b:a8:60:72:2a:7e:0f:20:49:
db:2a:ec:98:6b:8f:d6:40:70:e4:5f:94:c3:24:bd:a1:2f:b8:
2d:f6:e8:98:9d:51:0b:ec:9f:5b:b7:8f:86:9f:0c:ad:b9:43:
a4:5a:5c:bb:8b:4a:01:44:ac:df:77:00:9f:e9:48:81:12:04:
b2:c3:44:96:9e:70:5f:28:d6:71:30:5b:08:b6:50:04:0c:ad:
37:94:c4:af:b2:4a:2c:19:29:8c:49:b1:f9:99:f3:a8:44:eb:
4a:e3:45:66:95:32:b3:6d:4a:1f:f2:2b:f2:bf:87:b8:13:1e:
e7:26:db:e8:f6:71:65:0c:63:83:ed:e8:61:d3:bc:e6:8e:b7:
cf:47:a8:15:e4:0c:f7:7c:9c:83:a9:61:b7:34:7c:89:ac:ee:
4f:07:2b:7e:12:07:7d:16:37:ab:bf:bd:3f:69:2b:66:e8:27:
26:34:41:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:15:01 2026 by rpki-client