Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
File: xyIeQCmYq8HwNUdeFYt06MdpIMA.mft (raw, json)
Hash identifier: Y8zpgvJRQdQUviQdjOZUQK6+44D/cA8FCo/YnHMM0Os=
Subject key identifier: 95:6F:01:67:9A:24:A3:5D:B7:99:FD:34:C1:70:C8:88:1F:7D:8C:C8
Authority key identifier: C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0
Certificate issuer: /CN=c7221e402998abc1f035475e158b74e8c76920c0
Certificate serial: 019D2C2ADBF76B586773534D53C364E70832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 22:01:39 +0000
Manifest this update: Thu 26 Mar 2026 22:01:39 +0000
Manifest next update: Fri 27 Mar 2026 22:01:39 +0000
Files and hashes: 1: F7bFWfa8raW6YPzNQdPQYhccFpw.roa (hash: XVhjnbPUE5xdXqpegewxKMJvfafoKnZU90EE9D+PlOg=)
2: JpOEIniBJHts2084NOqMHq98Ajc.roa (hash: bzhADrpPKOaVRuCZzxcDyjV658iQtircvowggSUU670=)
3: xyIeQCmYq8HwNUdeFYt06MdpIMA.crl (hash: btjsMf2Wc9foQTphCvUio/1wZN4+S6cN8bqKWImwuYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:2a:db:f7:6b:58:67:73:53:4d:53:c3:64:e7:08:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7221e402998abc1f035475e158b74e8c76920c0
Validity
Not Before: Mar 26 22:01:39 2026 GMT
Not After : Mar 27 22:01:39 2026 GMT
Subject: CN=956f01679a24a35db799fd34c170c8881f7d8cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:46:35:96:0d:10:e3:aa:36:f9:40:55:47:a1:
2d:7e:1b:10:31:82:ea:bb:eb:45:cb:b2:88:d6:d5:
c0:05:e5:38:bd:87:45:78:ec:b0:2c:73:63:3b:22:
ed:fb:2b:4a:3a:08:1e:af:d6:80:3a:44:d3:31:b4:
32:1b:cd:cc:f4:8b:c9:af:fa:b9:2e:8d:d5:47:64:
91:6c:9b:a5:ac:74:d4:be:34:dc:bd:cd:6d:cd:7c:
91:04:ac:05:b0:7a:e4:d2:9a:91:75:5b:b1:64:30:
6d:42:d9:90:b6:6f:d6:d8:71:5e:47:b3:e5:62:aa:
15:a5:bb:3e:91:fc:75:26:37:e7:24:d3:e0:78:cb:
2d:f3:61:55:bd:17:5b:a8:4b:16:27:a5:27:cd:94:
59:47:1f:bc:c3:f6:bd:4b:ce:0d:9e:fe:28:d5:bc:
92:11:16:1f:15:f8:45:9a:ab:38:74:fd:8a:e6:1a:
b5:18:d8:be:dd:37:fb:4e:a5:6b:6e:db:75:5d:02:
56:12:ba:15:be:74:e8:f7:5d:86:03:df:f7:2d:f0:
b9:3c:85:ad:f6:5f:45:cf:69:46:c8:fa:88:45:34:
45:eb:aa:b7:67:44:ce:b4:41:ca:f2:1c:2d:5d:43:
26:94:37:e9:1d:f3:d6:50:ce:38:0b:2e:04:3b:03:
3e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6F:01:67:9A:24:A3:5D:B7:99:FD:34:C1:70:C8:88:1F:7D:8C:C8
X509v3 Authority Key Identifier:
keyid:C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:fe:d0:50:40:ae:18:12:b6:52:dd:8f:97:11:02:a4:8c:cd:
50:83:46:49:3a:9a:fe:60:2d:44:d8:da:a3:a8:fd:df:88:56:
95:5f:b3:0d:ab:0f:77:c3:ae:33:f8:37:ee:a0:c6:4a:8a:46:
4b:90:20:12:e4:ef:55:18:35:bc:be:d5:1b:a5:a9:25:f6:8b:
62:77:da:46:50:9c:9c:b9:2d:3e:93:1c:32:36:92:0f:65:92:
e8:e0:66:59:51:60:8c:8e:d9:b1:ae:71:06:59:d8:ca:d4:2e:
99:53:0a:7f:11:8a:d6:aa:ba:f8:e3:34:03:c2:a9:47:f5:2c:
64:74:5c:de:a2:17:05:8e:5d:df:5c:ac:d4:43:a7:8d:af:d8:
84:5c:99:12:2d:77:88:09:c7:e8:0c:67:ce:31:7e:df:1e:98:
c6:3e:fa:fd:be:9a:7f:8b:dc:01:5a:7a:5c:c2:98:46:b5:d6:
1e:02:43:36:33:7a:be:0a:84:32:03:48:5b:32:9a:8f:0a:6b:
87:fe:c7:5b:a9:72:93:04:9e:ed:b6:b7:5f:88:03:68:cc:e1:
ec:af:fa:35:9a:07:d5:3e:ed:8a:cf:c4:20:a2:c0:48:3e:16:
7b:18:de:a7:fa:50:65:45:e6:85:8e:6b:b5:7a:42:95:c4:77:
5d:d7:a1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:28:12 2026 by rpki-client