Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
File: x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft (raw, json)
Hash identifier: unxYpEWhc1R17zCOeg2bDR88jhlcbQfbLK7eaKHkFS8=
Subject key identifier: 37:CD:10:91:69:92:87:7A:5E:5B:1E:0D:B8:16:61:27:09:DD:1F:31
Authority key identifier: C7:82:73:5A:A9:8D:46:45:D0:41:09:3A:76:62:A1:23:79:50:3A:31
Certificate issuer: /CN=c782735aa98d4645d041093a7662a12379503a31
Certificate serial: 019D2960EC065202816AD81FE60960FB7974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
Manifest number: 1053
Signing time: Thu 26 Mar 2026 09:01:50 +0000
Manifest this update: Thu 26 Mar 2026 09:01:50 +0000
Manifest next update: Fri 27 Mar 2026 09:01:50 +0000
Files and hashes: 1: 8Oob-MaKU0NvwXJUiKMB7ekq4Cg.roa (hash: 63MHEzPjU99WPqV+lKCTZbVzEP7CPni86OEOEBrlKcE=)
2: x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl (hash: N6Zi1DRomXO5N4ET/hPXmYEQkMUx4r6tI2l3gu9JsXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:ec:06:52:02:81:6a:d8:1f:e6:09:60:fb:79:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c782735aa98d4645d041093a7662a12379503a31
Validity
Not Before: Mar 26 09:01:50 2026 GMT
Not After : Mar 27 09:01:50 2026 GMT
Subject: CN=37cd10916992877a5e5b1e0db816612709dd1f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2b:38:b9:3a:d5:8f:62:10:4e:07:e0:ca:49:
6d:e7:60:78:87:49:37:21:1c:c3:cb:db:9a:61:4c:
61:46:2d:60:2b:5c:f3:87:27:ca:91:23:b0:a7:e6:
03:01:2e:9d:f1:21:20:33:1e:9f:34:ae:a7:0c:99:
b8:9a:c8:e1:70:f6:5a:e0:fb:3c:b3:f5:0e:b0:a4:
4f:b7:ba:75:10:73:0f:b4:6b:be:82:24:62:29:f0:
b0:6b:e1:df:ae:56:d5:6c:9f:fb:60:42:48:f1:02:
8e:93:31:cb:11:7d:65:49:5c:b6:21:28:9e:52:fb:
91:f0:19:a3:64:1b:a5:fa:3c:5b:e2:28:89:e4:38:
31:0f:a8:68:cf:90:c6:8d:d3:9c:14:93:02:aa:2a:
0a:6f:00:17:fe:1c:d6:87:9c:c4:8b:74:83:86:fc:
58:99:4d:bb:2f:74:92:4a:a5:97:1d:90:83:12:a3:
d4:eb:10:30:2e:20:72:0f:76:55:d7:91:f9:7c:9b:
bd:61:f0:0f:bb:13:21:d9:c3:51:9e:e1:ac:01:08:
9d:f2:9b:4d:0c:54:08:76:62:10:9e:33:63:94:92:
ca:eb:aa:d2:e1:d3:bb:d5:a4:e8:c3:f3:28:b7:8c:
d7:b1:17:5e:74:3c:0a:e4:50:26:f9:47:28:fa:b5:
c8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CD:10:91:69:92:87:7A:5E:5B:1E:0D:B8:16:61:27:09:DD:1F:31
X509v3 Authority Key Identifier:
keyid:C7:82:73:5A:A9:8D:46:45:D0:41:09:3A:76:62:A1:23:79:50:3A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d7:82:c0:ac:85:42:ec:d0:08:21:ab:ed:78:66:f9:fe:eb:
4e:a3:10:f1:04:30:06:c0:d6:50:57:0f:73:0b:c1:28:07:ab:
15:08:9b:77:05:6e:40:11:d3:20:86:62:a4:13:6a:13:01:79:
7c:6b:fe:df:6b:b8:63:bd:ea:41:89:6d:76:98:8f:b8:b7:16:
97:e1:9a:c9:53:d4:48:a2:0d:e6:fe:2f:de:5d:4b:6f:c7:9e:
d3:3b:7b:e2:4e:17:9e:8f:d9:c2:63:9b:26:55:cf:06:23:f6:
cd:19:28:aa:8f:3e:54:cd:77:3b:01:05:f6:0d:c9:ed:93:1e:
04:00:6f:00:5f:29:db:ba:ed:9c:a2:0d:4f:a4:a2:39:ab:73:
a9:27:8c:02:d2:91:fc:4a:19:27:68:cb:9e:8e:76:d7:4e:d0:
28:89:ce:57:9f:b8:c3:8a:51:69:47:97:bc:99:08:55:8d:3f:
f5:cc:21:5b:0e:50:d6:b0:82:db:19:83:c3:ed:0b:02:3c:51:
b2:2b:8d:21:f7:45:24:f1:78:a6:de:ba:2e:f4:34:05:38:ea:
c1:1b:09:32:fb:95:e7:d5:6f:c7:e1:cf:fa:e6:1a:d6:30:b6:
5b:57:b4:93:e9:18:c7:91:c9:d5:b3:7a:20:f8:07:57:cd:d2:
c0:62:c8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:56:53 2026 by rpki-client