Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/4c18da-4f54-4203-ba75-53a5d322bcc3/1/C8XuRXN7LZSa5t8lkGox-VkD-Fk.mft
File: C8XuRXN7LZSa5t8lkGox-VkD-Fk.mft (raw, json)
Hash identifier: gL0fqKgM0umWOCUJWYuincBlly9lcERBK56rJnlTEo4=
Subject key identifier: 37:1B:35:97:7D:60:B5:C4:CA:A3:15:0C:CC:92:00:F7:E0:FE:6A:B1
Authority key identifier: 0B:C5:EE:45:73:7B:2D:94:9A:E6:DF:25:90:6A:31:F9:59:03:F8:59
Certificate issuer: /CN=0bc5ee45737b2d949ae6df25906a31f95903f859
Certificate serial: 019D269608D2A474C0620DE50FB778ECDF81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8XuRXN7LZSa5t8lkGox-VkD-Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/4c18da-4f54-4203-ba75-53a5d322bcc3/1/C8XuRXN7LZSa5t8lkGox-VkD-Fk.mft
Manifest number: 18
Signing time: Wed 25 Mar 2026 20:00:59 +0000
Manifest this update: Wed 25 Mar 2026 20:00:59 +0000
Manifest next update: Thu 26 Mar 2026 20:00:59 +0000
Files and hashes: 1: 2ki4F5C_f4OJd8bWDxEOfjMY2BA.roa (hash: SNZLfY0Dnu+nD0hrhPKZ/k/SnrH65xlGDQNmAoLOL0k=)
2: C8XuRXN7LZSa5t8lkGox-VkD-Fk.crl (hash: Go7ni79g0F1wJto9vFbgiVuSO4qyaw55Sm7X3zhWCtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/4c18da-4f54-4203-ba75-53a5d322bcc3/1/C8XuRXN7LZSa5t8lkGox-VkD-Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/4c18da-4f54-4203-ba75-53a5d322bcc3/1/C8XuRXN7LZSa5t8lkGox-VkD-Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8XuRXN7LZSa5t8lkGox-VkD-Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:08:d2:a4:74:c0:62:0d:e5:0f:b7:78:ec:df:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc5ee45737b2d949ae6df25906a31f95903f859
Validity
Not Before: Mar 25 20:00:59 2026 GMT
Not After : Mar 26 20:00:59 2026 GMT
Subject: CN=371b35977d60b5c4caa3150ccc9200f7e0fe6ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:96:0b:24:1d:51:31:ac:89:b0:ed:88:40:f2:
30:4c:30:de:56:b9:28:c3:8e:3c:9a:4c:2a:2f:75:
6d:84:b2:aa:1e:22:89:25:6b:c5:98:2b:bf:6b:2d:
ab:77:7d:4b:5f:a6:82:97:93:94:10:43:43:d7:fc:
e4:19:1c:51:b6:66:e7:cb:f0:df:ed:85:70:65:50:
5b:33:79:2f:6d:b3:dc:22:50:ff:af:d6:92:92:1d:
85:23:b4:93:52:92:a7:88:58:ab:f4:18:0d:3c:79:
65:39:11:b2:ee:a6:67:3a:be:f9:39:44:8d:9c:50:
b9:64:c3:ad:ab:9c:6d:a8:ba:9a:89:a5:42:cc:49:
cc:1c:00:ce:c6:9d:d8:f3:91:a9:05:c6:e8:0e:a9:
a9:36:cf:bc:51:14:ff:20:b2:e9:e9:46:1a:dc:8a:
0b:07:e6:1b:51:4c:c5:29:b1:33:60:70:b1:3f:64:
72:b0:e5:5e:e0:19:5e:4b:1a:b6:50:d6:9d:15:4a:
bc:a8:22:e7:7c:07:27:14:63:4b:f8:e4:e6:81:3c:
2b:cf:f9:70:55:f0:df:bb:d5:cd:ce:eb:04:ba:55:
dc:ff:4a:57:d3:ff:cf:bf:56:6d:aa:10:03:cc:dc:
c3:d3:1b:3f:a8:0f:f2:19:8e:83:d9:88:02:df:a0:
0b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1B:35:97:7D:60:B5:C4:CA:A3:15:0C:CC:92:00:F7:E0:FE:6A:B1
X509v3 Authority Key Identifier:
keyid:0B:C5:EE:45:73:7B:2D:94:9A:E6:DF:25:90:6A:31:F9:59:03:F8:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8XuRXN7LZSa5t8lkGox-VkD-Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4c18da-4f54-4203-ba75-53a5d322bcc3/1/C8XuRXN7LZSa5t8lkGox-VkD-Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4c18da-4f54-4203-ba75-53a5d322bcc3/1/C8XuRXN7LZSa5t8lkGox-VkD-Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:75:4e:c8:ba:45:39:d2:06:f3:29:21:8d:f2:32:13:e1:8c:
dd:cc:df:f3:37:f7:cf:43:62:e5:55:cd:62:76:5e:5b:0c:c5:
0b:80:1f:ca:bd:df:64:c8:d8:ec:3b:df:c4:44:7a:a3:42:89:
70:ac:bb:4f:44:2f:cc:06:72:d5:b9:cc:55:3c:49:7e:30:aa:
51:8b:d8:40:7f:4b:d9:77:b1:0d:ad:f4:79:34:a6:b4:6b:d6:
c7:1a:87:4f:4b:0a:e3:e8:92:ae:64:f2:fc:4c:a0:30:50:20:
2c:3a:6a:21:41:9d:57:c1:45:61:3f:42:4b:71:f2:4e:3b:57:
88:12:a1:9a:39:b8:28:e4:50:9d:f7:de:97:a1:fd:91:c7:99:
5a:a8:a1:c4:ac:88:d5:72:81:e7:b4:89:7b:f2:c6:1e:34:48:
cd:f3:55:a9:4e:2b:bd:bc:95:df:2d:ef:2d:f7:0e:1c:a5:8f:
89:cf:6b:c0:1e:c6:0a:ca:b5:1b:5c:51:c6:43:37:76:7b:38:
e6:d6:ca:6d:3e:9d:83:f4:c8:1f:3d:40:7f:92:3d:1b:21:e5:
21:5b:c9:dd:7c:e3:d2:a8:0a:dc:b6:88:77:b1:cc:de:7a:c6:
83:98:5d:e5:48:8c:50:72:d2:0e:14:1a:c4:2b:16:93:f5:f9:
20:60:3f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:57:48 2026 by rpki-client