Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.mft
File: xC4WYonhwfw6mLVFQLzHMUbXSII.mft (raw, json)
Hash identifier: h5ZmOMudcArKKlMMh8La+G4FxBhSJMhHCDW5Hg4jsOo=
Subject key identifier: EB:85:BD:91:97:1F:6F:85:57:CB:23:56:38:D1:0D:28:93:02:71:05
Authority key identifier: C4:2E:16:62:89:E1:C1:FC:3A:98:B5:45:40:BC:C7:31:46:D7:48:82
Certificate issuer: /CN=c42e166289e1c1fc3a98b54540bcc73146d74882
Certificate serial: 019D27E0548BAB95A7F7CEC28EFFC4FA1540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xC4WYonhwfw6mLVFQLzHMUbXSII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.mft
Manifest number: 86
Signing time: Thu 26 Mar 2026 02:01:46 +0000
Manifest this update: Thu 26 Mar 2026 02:01:46 +0000
Manifest next update: Fri 27 Mar 2026 02:01:46 +0000
Files and hashes: 1: a5S2srHSsVmy5QkfkP_kc6cHShI.roa (hash: ci+zS+UEhLvr/I+Sc8XYpFmTIebXAv14ygCxwUbUvI8=)
2: xC4WYonhwfw6mLVFQLzHMUbXSII.crl (hash: /qexEYNnp1Cg7CqylbRsqqZLD9LTGBSL1nG3iJpR/8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.mft
rsync://rpki.ripe.net/repository/DEFAULT/xC4WYonhwfw6mLVFQLzHMUbXSII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:54:8b:ab:95:a7:f7:ce:c2:8e:ff:c4:fa:15:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42e166289e1c1fc3a98b54540bcc73146d74882
Validity
Not Before: Mar 26 02:01:46 2026 GMT
Not After : Mar 27 02:01:46 2026 GMT
Subject: CN=eb85bd91971f6f8557cb235638d10d2893027105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d1:fc:0c:76:54:d8:67:56:f4:d4:e4:3e:e6:
eb:cd:2b:d6:fb:27:c2:0a:3c:a1:12:0b:23:37:72:
f9:1f:98:2d:2f:6e:bb:26:e1:dd:bf:69:2e:23:1f:
28:3e:e5:d5:15:86:9a:9d:97:6b:fb:24:09:0a:e7:
6c:b9:2d:fc:67:a6:43:d2:e3:e6:9d:88:e8:f4:5e:
f7:ff:c8:b0:53:ef:dd:d9:b7:43:af:e1:ea:41:b6:
8b:86:dd:4e:c5:0a:f3:8e:04:22:02:2c:88:0b:5f:
bd:88:85:2a:db:d1:76:10:ec:6c:c2:39:1e:a0:0b:
ee:d8:01:e0:c7:12:32:28:02:48:3e:63:a1:97:3a:
f6:20:62:8a:1b:11:11:30:6f:cf:61:be:32:54:f7:
ec:0c:5a:fd:33:8f:8e:ce:20:ff:7e:65:38:00:7c:
ba:75:04:f9:6d:b1:63:b9:07:e9:ef:b2:be:cd:cb:
84:c5:2c:06:96:7b:28:79:b9:2d:f5:ed:5f:00:20:
06:2b:90:35:7b:9e:a1:28:c3:36:fc:20:75:b7:4a:
39:01:2f:5d:25:f9:75:7f:de:4d:da:a2:13:12:47:
be:0b:38:58:f8:9d:26:a0:e4:94:c1:75:d3:7f:3f:
b7:73:51:43:45:af:8e:05:fc:35:a1:54:ee:5c:50:
4f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:85:BD:91:97:1F:6F:85:57:CB:23:56:38:D1:0D:28:93:02:71:05
X509v3 Authority Key Identifier:
keyid:C4:2E:16:62:89:E1:C1:FC:3A:98:B5:45:40:BC:C7:31:46:D7:48:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xC4WYonhwfw6mLVFQLzHMUbXSII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:32:44:ee:4c:97:c4:88:4c:24:48:b2:11:22:89:f2:77:14:
27:e6:ff:e8:93:4e:25:ee:5a:ac:0e:53:03:43:a8:7f:39:05:
08:ec:27:9e:79:de:84:ad:8e:ec:ab:71:91:b4:d7:25:4b:97:
0a:5c:3b:6a:be:ed:e9:84:d2:18:62:ea:ef:a5:98:a1:c9:6d:
36:a3:82:6d:f1:8d:19:57:55:77:4c:09:cc:93:ba:6a:46:18:
96:27:4e:01:38:9f:69:aa:df:1c:a6:fe:1e:75:39:a9:8a:a4:
5e:0c:6c:f1:72:0f:77:48:ae:85:7e:bb:6d:9b:ae:e5:58:5d:
02:b1:f2:63:83:a0:32:10:f2:bc:ab:7e:d6:fc:43:2b:80:83:
39:a8:1a:a3:ab:a8:01:4a:c4:db:c4:b5:8b:61:a0:b8:91:19:
c1:c6:b5:bc:ec:d4:36:c8:dc:d2:e4:c7:f6:0c:69:70:ab:7b:
2f:bf:5d:16:bf:41:e2:39:47:b1:81:78:1a:38:46:92:3d:1e:
b3:bc:09:6b:e6:08:e6:c2:d7:af:b3:da:ca:e3:dd:73:48:f7:
20:3d:a1:18:31:5f:91:56:4b:21:38:d2:af:67:3f:a5:13:cf:
37:37:be:c1:54:88:df:f9:e7:69:74:2c:94:03:fa:2c:4a:ae:
5a:e8:6b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:46:24 2026 by rpki-client