Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
File: xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft (raw, json)
Hash identifier: HWm+MlLQyyqRe6CfrT810/+cvB++Bj2zy6f0mGk4TC8=
Subject key identifier: 4C:41:07:A8:FB:FF:2E:0D:86:A4:57:E4:85:A5:03:5B:B9:B8:E0:9B
Authority key identifier: C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71
Certificate issuer: /CN=c441738baab988b1d68693bb05e29bfbb4f0f671
Certificate serial: 019D2A72C59157D90ECE79C5D3412AD68757
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 14:00:57 +0000
Manifest this update: Thu 26 Mar 2026 14:00:57 +0000
Manifest next update: Fri 27 Mar 2026 14:00:57 +0000
Files and hashes: 1: 0sxkLDFdb4QelHCb0OZcMbO1jDM.roa (hash: 1xnWSoVsnQK8dLyDSxHxSRJdCC9QJVhSYDLS7qz0b0o=)
2: AjeR0O3ITsCO65xWw0QykqgxNA4.roa (hash: DgIKpLNUmEsPkrau/sY/HOWPCo1ggWtDwl6wxDzmrWM=)
3: JYg_CAMB4ZN8DGnRJNHFpnRes5M.roa (hash: 8yyEuQEPL63uz0pA2x8egSWHyWTxI5pMdw0GJbheT0g=)
4: XfbSuzWnSJ0R_yOnkIG4F7s1WPk.roa (hash: I7f3HuHYguoVsLgmKIELlpLwLVz1wyD/5cmJZXhghjI=)
5: cUu6zP1qDNJzdBpEfOD7tH9ZEq8.roa (hash: voL4FK/goy3Ucp4jv2hDvT1VmoRVg+99FBMAXu49zQk=)
6: sQNC3PZhtT00aBnksKdxFAVZzQQ.roa (hash: 0L2z2BzNlMPl3E12ZeAaZbBCG9ys89MDIPcvR5FtVNI=)
7: tfaKP8IvgQkAwmU3RK8qZmHmzts.roa (hash: hyWKZ+AjnMpt6LR61ItU5+Wmy9Q8i+PxJ269z65RWH0=)
8: xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl (hash: Z/3YaNDneIsMaSGG8fYh09fx12KMO8b1KiPaMoS5rqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:c5:91:57:d9:0e:ce:79:c5:d3:41:2a:d6:87:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c441738baab988b1d68693bb05e29bfbb4f0f671
Validity
Not Before: Mar 26 14:00:57 2026 GMT
Not After : Mar 27 14:00:57 2026 GMT
Subject: CN=4c4107a8fbff2e0d86a457e485a5035bb9b8e09b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:58:36:6c:e7:16:a0:aa:71:2b:83:28:04:a3:
eb:ac:ef:91:ae:d0:92:3e:47:ff:92:d0:5a:fe:b2:
3f:55:9a:6c:34:17:a7:39:4b:e9:23:25:21:90:ad:
6d:c2:e8:0c:b3:99:89:8a:63:f0:c9:6a:b0:5e:3c:
61:94:a6:35:f0:e8:16:84:ed:11:d5:e2:2d:22:f3:
58:5c:01:c7:b5:28:2e:95:ef:1b:4b:fa:f2:98:08:
da:d2:10:ed:7b:6c:dc:0a:0c:48:d7:fe:15:ec:18:
10:66:70:f4:09:d4:e6:a1:aa:fe:63:99:f5:88:28:
d2:98:59:c6:d1:e8:2a:16:93:6f:ad:39:5b:ac:24:
97:39:8d:e2:61:2e:83:99:40:a7:b7:7f:55:73:72:
86:72:78:42:0d:af:38:8a:a6:0c:fa:78:90:db:15:
99:c0:0a:98:29:c7:00:cb:48:74:a4:b1:7d:aa:ef:
d4:6d:8e:d3:6a:c8:1a:a4:df:24:b0:e5:af:33:11:
0b:30:0e:06:f7:83:3d:f0:7a:48:85:d7:33:ad:d0:
12:b8:1c:75:8a:50:de:77:38:12:c8:17:df:f2:61:
41:eb:ff:92:6d:7f:6c:a3:fb:98:80:8d:c3:a9:71:
0b:09:0a:35:f4:8c:4a:12:f2:55:55:cb:81:b8:09:
de:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:41:07:A8:FB:FF:2E:0D:86:A4:57:E4:85:A5:03:5B:B9:B8:E0:9B
X509v3 Authority Key Identifier:
keyid:C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:1e:e0:41:10:98:1a:c5:4e:f5:44:19:dd:fe:1d:93:30:52:
12:5d:61:fd:4e:fe:4a:0f:f6:38:f2:d6:2c:05:0c:c1:29:91:
1d:ea:e9:76:67:a9:d0:ad:7c:62:13:73:31:1a:75:c3:d5:b9:
ef:8f:a9:ac:22:f4:8f:06:60:ab:b2:6a:70:85:a5:6a:d1:a3:
c2:67:46:30:73:2b:1b:9f:36:90:94:be:e7:3e:7c:07:14:1c:
a1:79:eb:24:5e:22:ba:55:8f:cd:88:7b:54:0c:82:13:4f:41:
d2:86:6d:22:4c:4a:39:7a:1c:29:f1:48:88:38:36:c8:ec:e9:
25:0a:4e:00:33:0e:3e:be:ba:d6:31:9a:f3:00:12:8e:23:6f:
24:76:32:11:64:1c:11:a4:8c:4c:5f:93:12:85:31:ae:ef:10:
90:2c:23:1a:79:76:77:ca:38:b2:80:09:24:dc:33:f1:dc:65:
f3:35:11:94:32:a3:65:9e:eb:8a:02:ad:c7:0d:6f:ef:f0:af:
04:3a:d3:e4:4e:da:ea:a5:a7:e7:8e:9e:ab:24:59:d6:ef:e7:
a3:b7:26:5c:c6:af:82:55:ac:bf:b4:f2:b1:bd:ca:58:5a:41:
53:94:df:e0:53:8b:d9:87:a0:87:60:42:b6:5f:16:56:83:cc:
e1:0c:cc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:09:43 2026 by rpki-client