Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
File: x2oNsIMDONLSlh5Mj_sKtaA__l8.mft (raw, json)
Hash identifier: 5ngwoqUQYMWvVfB0vuEc1W//u+4VftEFKAo6aQAt3Qk=
Subject key identifier: BD:EB:7B:95:5F:4E:61:56:FB:D0:E1:8E:50:26:15:83:3C:DB:1E:E8
Authority key identifier: C7:6A:0D:B0:83:03:38:D2:D2:96:1E:4C:8F:FB:0A:B5:A0:3F:FE:5F
Certificate issuer: /CN=c76a0db0830338d2d2961e4c8ffb0ab5a03ffe5f
Certificate serial: 019D25F12A0C58DA1400E7C8A2FB099B38AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
Manifest number: 1311
Signing time: Wed 25 Mar 2026 17:00:55 +0000
Manifest this update: Wed 25 Mar 2026 17:00:55 +0000
Manifest next update: Thu 26 Mar 2026 17:00:55 +0000
Files and hashes: 1: c50lvA8Sv1SylXjp89qLN1R1K0Q.roa (hash: H5BoXSVjiAe/7XcTXvyS3Sc4Z7PHgmQ7yK1Eha9K6xk=)
2: x2oNsIMDONLSlh5Mj_sKtaA__l8.crl (hash: gfo4NhWL/YKuLE/DGfqRuXBi6oZkAlRJhpgkYMnXW0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:2a:0c:58:da:14:00:e7:c8:a2:fb:09:9b:38:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76a0db0830338d2d2961e4c8ffb0ab5a03ffe5f
Validity
Not Before: Mar 25 17:00:55 2026 GMT
Not After : Mar 26 17:00:55 2026 GMT
Subject: CN=bdeb7b955f4e6156fbd0e18e502615833cdb1ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c4:f1:87:88:37:82:eb:68:c4:46:aa:f2:08:
65:dd:9f:6d:3d:cb:b0:ef:5f:0d:73:78:f8:73:05:
13:98:35:ff:0e:5f:3f:b3:47:68:4f:6f:0c:7e:73:
b7:bc:48:cd:b3:61:35:f5:dd:f7:9b:15:92:33:35:
8e:7f:f0:1b:bb:46:7b:59:3c:d2:d8:d3:14:17:a2:
8e:2d:b7:da:5f:f1:47:f1:21:97:b6:95:9d:9c:9d:
be:6a:c9:5d:55:99:c9:12:59:78:5b:75:22:71:4e:
b0:58:ce:99:a0:b5:41:d4:52:0b:8b:9d:45:0d:fa:
91:d5:80:fc:0d:37:16:a4:da:bf:bc:b9:cf:26:98:
a9:a6:aa:41:60:f2:a5:26:33:8e:41:85:af:06:91:
69:04:bc:97:b6:44:22:90:d9:62:65:ec:6c:4a:82:
23:4d:73:43:16:14:aa:8a:67:93:cc:7d:a0:6f:99:
ae:82:cd:23:b4:30:ab:fb:1e:ec:0f:37:a0:fc:ff:
ff:b7:c0:b6:7d:f5:20:94:bf:a2:85:7e:b7:33:89:
b9:05:b2:50:62:fd:3c:dd:aa:0c:d5:39:77:9d:21:
e3:62:7e:ff:66:ad:63:63:10:bb:58:5f:51:71:ee:
9b:4b:18:69:64:40:ca:7b:82:46:0b:42:1e:34:e5:
7a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:EB:7B:95:5F:4E:61:56:FB:D0:E1:8E:50:26:15:83:3C:DB:1E:E8
X509v3 Authority Key Identifier:
keyid:C7:6A:0D:B0:83:03:38:D2:D2:96:1E:4C:8F:FB:0A:B5:A0:3F:FE:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:53:ed:af:d7:23:9a:d9:ca:03:fd:d0:26:ab:d3:a5:76:3b:
e2:88:c0:f6:61:27:28:6d:54:9e:fa:86:28:96:09:dc:f4:fc:
80:91:fb:c8:2f:96:24:ae:c2:a8:5c:22:61:72:16:ba:74:16:
2e:14:d4:b8:e4:a0:8e:a9:70:14:3f:ff:6e:aa:40:2e:d1:ea:
3c:9e:99:2f:1e:d6:4f:bc:ee:71:a8:0f:0e:0d:2e:c8:1d:67:
74:02:f3:da:e2:3a:36:43:9c:ca:02:1a:9a:a4:d9:43:31:3e:
77:0f:71:15:51:78:fa:0f:db:db:e9:4a:b5:58:02:96:65:25:
b0:34:fb:9d:4c:44:b6:ab:5f:b5:c8:60:5f:d5:e5:af:73:fb:
13:80:40:14:46:d4:a8:2d:f3:9a:79:96:cc:d8:a2:69:00:ef:
9f:ce:3d:32:b3:a9:41:92:84:67:4d:1c:af:a2:fa:4e:eb:84:
ce:5c:95:74:37:df:fa:52:44:24:d6:77:b7:1e:5c:76:b5:e2:
e7:c3:c5:4e:00:cd:bd:13:9a:6b:ed:bb:06:4d:8c:c7:30:b2:
03:48:2e:db:1f:d9:fc:a8:5a:66:78:3f:0c:fb:56:2a:21:85:
e3:1e:f3:d7:35:e3:df:b9:da:1d:b3:13:b2:8f:5e:5e:46:2a:
6a:92:2d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:35 2026 by rpki-client