Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
File: _xukAAfM3NCTDxor3EsC4plFdno.mft (raw, json)
Hash identifier: gGDXPzfF4EOvc2Su4Snaxzc8Re4VBvhPkE0aSZbY86U=
Subject key identifier: 05:68:ED:A4:4D:E2:F2:36:03:A9:93:6D:5A:E8:B9:97:BC:E2:1C:5B
Authority key identifier: FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A
Certificate issuer: /CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a
Certificate serial: 019D27DF58B2EFFD89C436D1B8EE82282CF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 02:00:41 +0000
Manifest this update: Thu 26 Mar 2026 02:00:41 +0000
Manifest next update: Fri 27 Mar 2026 02:00:41 +0000
Files and hashes: 1: MsXjoDhcJ3cwovjao6DlRt0DHd0.roa (hash: Tw0sup4+WLjwE3lyNhBuN8zmG2+OMt8afwKPB5VGZGg=)
2: _xukAAfM3NCTDxor3EsC4plFdno.crl (hash: u3V81PMAoxUhHnVkiQCZbM12v34kNSI1vGhXN/8BEmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:58:b2:ef:fd:89:c4:36:d1:b8:ee:82:28:2c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a
Validity
Not Before: Mar 26 02:00:41 2026 GMT
Not After : Mar 27 02:00:41 2026 GMT
Subject: CN=0568eda44de2f23603a9936d5ae8b997bce21c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:85:90:18:09:f6:63:87:7a:79:cd:eb:d9:07:
c6:f4:bd:2b:22:99:47:c8:aa:77:31:87:70:7d:ce:
8b:8e:52:29:ac:ea:fa:8c:9a:05:64:b0:58:5d:45:
6a:6f:a8:8b:03:cb:e3:42:d1:1c:b9:f9:b7:36:6c:
59:22:c2:c3:c1:1b:a6:ad:1f:96:99:76:22:50:ba:
d3:53:05:f7:fe:79:ce:f3:fb:d8:2e:0d:84:0c:78:
3f:30:af:23:fe:db:4f:b5:0c:2c:69:00:28:24:e4:
a4:f6:f0:32:30:42:d5:a8:c2:a4:5e:8c:32:2e:66:
28:ef:3b:a4:a7:0e:cf:16:ff:27:80:0f:1c:48:46:
0d:cd:09:ad:91:23:d8:1d:68:a5:e9:a2:43:04:8f:
83:4f:ba:25:15:d4:4b:76:34:ff:33:f4:2c:71:f4:
56:19:c3:81:bc:c6:65:f8:4b:6a:ec:1f:cd:4f:d8:
43:72:b3:2f:c2:d0:32:37:eb:af:f8:89:68:88:4e:
0f:13:4b:6b:8b:2e:9f:9b:56:f0:69:23:20:90:23:
95:49:5a:e0:37:ca:5c:c6:24:d5:f8:e5:35:55:58:
67:ce:0d:c6:fe:0b:0a:d6:13:1e:c1:68:4f:2c:ed:
35:ca:d7:43:08:87:17:66:ae:05:13:2f:e8:75:85:
3a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:68:ED:A4:4D:E2:F2:36:03:A9:93:6D:5A:E8:B9:97:BC:E2:1C:5B
X509v3 Authority Key Identifier:
keyid:FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:15:e9:86:f3:d1:22:7c:99:83:00:71:8b:7b:d8:3f:c9:38:
cd:b0:2e:66:04:b8:a7:fe:70:a7:bf:af:9c:86:72:ab:2d:76:
de:2e:5c:c5:41:13:a5:91:a2:b3:35:64:01:5a:5c:cb:a7:a7:
5c:48:23:32:82:c5:01:ed:5f:0c:60:6e:1f:14:ea:6f:ab:01:
aa:8f:dd:16:eb:19:ac:56:e2:b6:ef:a3:53:fd:41:58:37:fb:
c6:15:e0:4e:01:54:d0:72:86:1e:d0:6c:3b:d9:61:ec:0f:11:
a0:57:d1:5c:f3:d3:2e:b9:4a:bf:79:d4:32:4a:d0:3f:e9:b8:
b4:0d:cd:35:3c:5e:d3:ce:38:1f:82:6d:5a:8d:4d:5e:ef:a9:
bb:87:8e:b6:1c:0f:3f:ec:5d:75:2c:2f:14:27:38:da:16:68:
51:ba:db:82:09:98:eb:ed:10:a8:06:59:14:75:22:f0:ce:1c:
24:32:35:5c:f7:9e:70:45:06:1b:5f:b3:b8:00:88:d7:db:5f:
71:d4:ed:37:e1:bc:25:34:e0:28:0e:f1:92:0b:05:76:b0:44:
74:b7:2b:30:e0:91:50:01:f0:d1:13:5b:da:78:11:b3:0d:5b:
38:06:eb:8a:59:1d:01:82:a7:70:dd:95:f4:98:02:a8:07:de:
7c:e1:16:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:38:35 2026 by rpki-client