Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
File: xtGGU_v7b9VzLclAwdZdd6sLv6M.mft (raw, json)
Hash identifier: zfeNOvz9q9CsBgrHG3WqEg3Oq/32rTTsN90t7U6syi4=
Subject key identifier: 93:3A:47:75:57:C4:A5:70:4B:89:A8:0D:E4:4E:29:BE:B3:72:E5:E6
Authority key identifier: C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
Certificate issuer: /CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Certificate serial: 019D273B2AEEDBFA9FD8FAC59FF4B3A37840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
Manifest number: 188E
Signing time: Wed 25 Mar 2026 23:01:22 +0000
Manifest this update: Wed 25 Mar 2026 23:01:22 +0000
Manifest next update: Thu 26 Mar 2026 23:01:22 +0000
Files and hashes: 1: 2S0egMPr-zdQkgAq_bpCVGy4WpA.roa (hash: re4isGbhSWMB6fqoWf7gvs6FB5l6F8k5c1sHfF3v4hQ=)
2: bdjR-oD_Oii7Pli7R8XyAmbHV-o.roa (hash: ggKFIgIElCHZMireZeFZrOPcIaJP8Yn+MeT51gputK0=)
3: xtGGU_v7b9VzLclAwdZdd6sLv6M.crl (hash: 5zc07G427Dmk7kvrfsq3aImjzu9d3xtn+eFrz59h85U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:2a:ee:db:fa:9f:d8:fa:c5:9f:f4:b3:a3:78:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Validity
Not Before: Mar 25 23:01:22 2026 GMT
Not After : Mar 26 23:01:22 2026 GMT
Subject: CN=933a477557c4a5704b89a80de44e29beb372e5e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0f:24:4d:6b:f3:bb:48:46:77:45:52:97:f3:
ae:fa:75:ed:6a:01:51:dc:22:6a:31:70:7d:7f:75:
d4:31:c1:94:28:84:ac:ea:a8:c2:72:64:72:1e:13:
5e:32:1e:ae:ad:04:e2:51:40:1f:88:0d:24:4e:dd:
78:1a:6f:17:0a:4c:cd:b0:4c:f4:a9:6b:fd:bd:2e:
ba:b0:60:04:b6:fa:03:9d:37:1b:81:73:b2:ea:0e:
dd:e8:9a:3c:17:ef:86:11:f9:34:35:27:2e:25:6c:
3b:6e:84:80:0c:1a:b5:ce:b1:ab:4e:1a:fe:b2:db:
e5:1b:af:d7:ad:5d:0f:4d:9b:9c:42:6b:14:8d:36:
78:ea:61:60:27:3e:43:51:57:8c:63:aa:6a:b4:e0:
31:41:f5:4b:fb:85:39:ae:c3:f6:ec:f3:a4:90:d6:
3a:f7:ad:9b:5e:7e:13:5d:c8:17:e6:91:6d:3e:11:
ec:80:ad:b3:83:7d:de:aa:ae:c1:a1:e0:6d:b5:d3:
81:1a:e1:4b:f1:e4:7c:db:27:b9:d0:95:78:d7:64:
62:a9:be:8b:92:40:20:0e:cc:8c:a8:0b:ad:ac:33:
a9:d7:65:62:e7:1b:f2:ee:44:fa:36:54:d6:34:25:
7a:8b:4e:51:5b:b8:cf:2b:66:88:b3:6b:42:e3:e8:
2b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:3A:47:75:57:C4:A5:70:4B:89:A8:0D:E4:4E:29:BE:B3:72:E5:E6
X509v3 Authority Key Identifier:
keyid:C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:67:5c:a8:e0:46:5e:cc:4f:5d:b1:8f:4b:2b:08:c8:50:ed:
12:f5:db:93:d0:43:db:fd:8a:a6:65:1a:75:49:9c:34:54:04:
db:6f:ff:80:d0:24:ff:0c:07:f8:cb:82:48:00:4a:cc:bf:80:
c4:16:ae:2f:45:13:3f:88:0a:1e:e8:6c:f3:8f:2e:fc:5f:5e:
35:38:6d:de:7a:cb:3b:77:5a:ee:a3:d4:de:a3:6e:f1:1f:2f:
46:e3:f7:1e:d3:f9:6d:55:08:3d:70:6e:4b:96:2a:ef:ff:9c:
f9:44:94:ed:89:8a:0d:48:f2:cd:1d:a3:d1:b0:fb:59:b0:58:
51:62:d2:6b:b8:46:75:3d:90:eb:43:49:4d:00:71:25:a8:27:
b5:22:53:81:dc:11:7d:04:65:bc:28:97:e6:95:9a:64:cb:89:
fa:e0:8e:21:03:57:ce:b8:dc:37:69:ac:58:e1:78:69:09:8c:
42:60:a4:ba:5a:fd:88:5d:e1:0d:10:d6:fa:29:41:c3:55:d3:
a3:83:c7:19:e8:78:9e:de:bc:55:bf:58:ef:47:60:5a:72:4a:
04:3e:79:a8:4f:10:d0:39:17:35:c2:a0:d0:b5:bf:e2:34:c5:
eb:91:21:03:39:52:a5:70:74:1e:8e:23:50:ef:44:cd:b5:1e:
da:d0:29:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:42 2026 by rpki-client