Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
File: xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft (raw, json)
Hash identifier: OAioWyu016MOpgdULywzATS0eWxW1z95AEkfF5ts+S0=
Subject key identifier: 6D:72:B6:90:8D:5C:1B:E8:16:83:1B:F0:F7:89:BA:11:14:62:19:39
Authority key identifier: C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09
Certificate issuer: /CN=c65613d5999f3632985ed89a02efaabd1890ba09
Certificate serial: 019D25843C924FD9DFF5CE2A02DB27263898
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
Manifest number: 04A3
Signing time: Wed 25 Mar 2026 15:01:56 +0000
Manifest this update: Wed 25 Mar 2026 15:01:56 +0000
Manifest next update: Thu 26 Mar 2026 15:01:56 +0000
Files and hashes: 1: MWnPy89PH_1TfAr-2f04R8v5sE4.roa (hash: lLx6SLjmp2bg19wDs+FyMt7/MMn+v1mjyT18ZnGU1Mk=)
2: _InFEIoYoBff0XPi6Qu-BDtEOeA.roa (hash: 1FQgWq9bmnmW/hqAWc6TQBl0/lSLnU+yUMWdU6LEwbc=)
3: m2sCh5HkLxEE1VASi8B7f5_IGDo.asa (hash: 4Epl+7kUup5rqY+UK4i3mas67nTsku/KVZ8PPtRd/NQ=)
4: xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl (hash: XP0WajAedhVNAkzcrNdWgzFtM2WBQPRUemMh4eYsQ6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:3c:92:4f:d9:df:f5:ce:2a:02:db:27:26:38:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65613d5999f3632985ed89a02efaabd1890ba09
Validity
Not Before: Mar 25 15:01:56 2026 GMT
Not After : Mar 26 15:01:56 2026 GMT
Subject: CN=6d72b6908d5c1be816831bf0f789ba1114621939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b6:55:14:1b:d7:a0:58:88:c2:3c:d5:dc:0a:
a5:96:0f:ca:d1:2c:72:af:f3:2f:09:d7:cd:ab:e7:
08:82:68:fd:44:9e:2c:b5:3f:f9:e0:f3:a3:20:dd:
0c:b3:85:2e:c3:88:74:38:71:cc:02:ab:1e:22:6b:
4f:24:e6:bc:9f:ab:af:44:57:33:e0:b1:d5:6b:1b:
d3:e7:06:ca:aa:26:8a:bc:3d:56:3b:07:62:88:3e:
57:07:21:54:f7:2a:7b:a6:70:37:f4:f5:19:17:5f:
fe:2e:d5:06:63:b8:b7:ee:7f:00:ca:5d:56:62:69:
1f:cf:1e:7f:1d:52:df:c9:1c:10:6c:ed:e0:5e:98:
77:d1:06:be:13:e5:73:5c:56:64:c6:86:17:7d:9d:
c7:e0:f3:d5:b3:b0:a7:6d:39:1f:37:88:ca:b0:1f:
92:c3:fe:78:e5:c7:b3:b9:de:c1:ae:e7:f5:71:b7:
7e:41:0f:08:64:b3:a8:b0:ff:47:c3:a9:f4:a0:b8:
f4:af:42:2c:ec:ad:dd:f9:74:f3:4e:37:e6:c7:97:
be:56:21:9f:64:80:92:b6:ca:05:96:ad:23:96:4d:
f4:75:36:c0:d7:a6:59:7e:37:59:b6:b0:4c:0f:7e:
c1:23:68:83:25:98:b2:33:91:ed:6c:a1:3a:34:92:
dc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:72:B6:90:8D:5C:1B:E8:16:83:1B:F0:F7:89:BA:11:14:62:19:39
X509v3 Authority Key Identifier:
keyid:C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:52:9b:52:36:87:b7:ff:e4:ac:2d:4d:c7:6e:5d:10:6e:09:
c6:71:fe:17:27:de:1c:72:c7:fc:2c:45:3e:4a:23:5e:85:95:
b0:97:e8:cc:66:47:dc:30:66:5a:d7:d9:d6:35:52:89:f1:24:
8b:b9:58:60:cf:ea:c0:27:bc:13:c2:d4:16:bb:cb:64:05:e8:
1e:37:2f:eb:72:6c:16:12:aa:ed:45:bf:1f:c6:b9:8a:fb:62:
df:9e:b1:d9:12:6f:2f:89:35:7a:51:7e:d0:34:1c:60:f4:d8:
b1:b8:b7:61:71:53:9d:75:26:1c:5f:3d:8b:38:49:a8:ae:aa:
9d:c9:4a:47:4a:9f:0c:cc:61:d1:52:72:84:6d:bf:34:91:61:
d2:a0:a2:b2:ad:d4:96:30:a3:92:8b:62:a6:98:d9:65:f3:c5:
ac:8c:b7:9d:39:ff:b8:38:bc:10:22:89:d8:ae:44:eb:b2:85:
c6:18:1d:15:b2:5a:e3:12:f6:01:10:ba:aa:ff:26:cb:6e:d7:
cb:15:59:cb:0f:b4:4a:25:c9:0c:b9:17:22:3f:06:d1:25:7f:
bc:77:50:2f:3e:d7:a6:7a:9b:db:3f:13:fe:24:fc:c7:1d:d3:
7d:de:30:5f:e1:10:e5:81:6b:ab:64:a2:be:26:5c:1b:d7:95:
da:d0:18:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:26:05 2026 by rpki-client