Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft
File: xk0ihrXMe-Qviuuutqrlfnzn2is.mft (raw, json)
Hash identifier: wLjqd1N5evaYaxWoDVd8unV0sM6Vi5Ool1HoDaVdIFs=
Subject key identifier: 2B:A4:C3:F1:16:99:10:43:A6:AD:A2:51:5C:5C:49:E2:68:39:67:F8
Authority key identifier: C6:4D:22:86:B5:CC:7B:E4:2F:8A:EB:AE:B6:AA:E5:7E:7C:E7:DA:2B
Certificate issuer: /CN=c64d2286b5cc7be42f8aebaeb6aae57e7ce7da2b
Certificate serial: 019D277277308368DF4CD4EB1C1454F328C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk0ihrXMe-Qviuuutqrlfnzn2is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft
Manifest number: 1587
Signing time: Thu 26 Mar 2026 00:01:46 +0000
Manifest this update: Thu 26 Mar 2026 00:01:46 +0000
Manifest next update: Fri 27 Mar 2026 00:01:46 +0000
Files and hashes: 1: IWc0e1xHvEeNaFpUiEHsoSj8LCQ.roa (hash: FkF+LBfyPEQLntzgMJAsrXU06VpPmyg3zztpMpixRM4=)
2: xk0ihrXMe-Qviuuutqrlfnzn2is.crl (hash: bL8njCCgLmuUD2D50ZFkbeQ8USHEFn8eJ9iIaj5g9ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft
rsync://rpki.ripe.net/repository/DEFAULT/xk0ihrXMe-Qviuuutqrlfnzn2is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:77:30:83:68:df:4c:d4:eb:1c:14:54:f3:28:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c64d2286b5cc7be42f8aebaeb6aae57e7ce7da2b
Validity
Not Before: Mar 26 00:01:46 2026 GMT
Not After : Mar 27 00:01:46 2026 GMT
Subject: CN=2ba4c3f116991043a6ada2515c5c49e2683967f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:71:47:5e:fc:3c:71:d8:a0:83:69:35:a6:67:
1a:23:58:02:c5:52:41:68:2b:a9:36:b2:58:4d:c7:
e5:31:53:70:44:69:ed:02:94:52:f8:3a:ef:b2:9e:
04:21:8d:db:c7:62:44:08:23:01:d6:72:f9:99:62:
b4:ff:9d:ee:b0:36:6d:20:fe:31:26:cc:5a:0a:d8:
f1:55:cf:20:d5:87:db:f7:0e:6c:a3:05:ee:50:98:
d3:e8:ec:fa:ee:1c:38:eb:72:54:2e:cb:1f:8b:39:
b1:65:ef:45:ca:96:aa:38:20:e3:fd:4d:8e:36:88:
6e:21:8a:9c:6e:7e:97:3c:d8:fa:b6:d8:75:9e:70:
e6:cf:76:f1:fe:e1:3c:b1:5c:7f:42:f9:c2:8f:34:
50:08:f2:ba:55:94:b7:e0:8a:b9:9a:cb:54:96:b7:
7b:73:3b:92:6a:8c:9c:c7:fa:6b:20:b3:12:ff:f5:
36:c1:8a:1d:84:65:ab:be:7f:3f:89:d5:46:59:f5:
cf:f3:cc:cc:d8:91:76:e3:84:cf:40:56:e4:b3:b3:
f7:8b:89:3e:a5:4f:43:91:bc:b0:eb:8d:e0:56:89:
08:a2:c5:75:f9:2d:31:9d:89:77:84:f8:f1:4f:c5:
7e:7e:d6:d0:22:8b:86:55:37:48:05:b4:a1:d8:19:
13:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A4:C3:F1:16:99:10:43:A6:AD:A2:51:5C:5C:49:E2:68:39:67:F8
X509v3 Authority Key Identifier:
keyid:C6:4D:22:86:B5:CC:7B:E4:2F:8A:EB:AE:B6:AA:E5:7E:7C:E7:DA:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk0ihrXMe-Qviuuutqrlfnzn2is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:fb:9a:41:3a:22:cc:54:8f:51:23:54:ba:ed:ce:09:36:53:
09:2e:56:64:20:7c:e0:53:4a:34:b5:bc:fd:fe:2b:c4:15:13:
bb:f6:3e:4e:b3:54:c7:43:dd:b0:f8:3e:08:30:0a:c6:5f:fb:
6e:ea:27:92:dd:d5:8f:b9:41:fd:75:95:c3:99:c6:43:1b:b2:
2e:62:14:7c:3d:46:f3:bf:dc:19:c1:75:a5:2f:8b:26:07:7f:
77:62:81:57:1c:34:0b:29:42:ee:8a:41:5b:8e:55:ce:0d:fb:
87:d0:e9:84:07:a8:42:82:4b:6e:aa:96:34:b2:84:63:f1:c4:
5f:c0:2f:e0:c6:d7:0e:0b:4a:3f:5d:79:7b:03:79:c1:0c:fd:
ad:c2:c5:55:66:d8:1d:ba:b4:49:fe:56:29:3c:97:c5:36:46:
06:87:5f:72:25:9c:42:ec:74:a7:19:21:bc:30:1a:72:12:b8:
20:77:d5:50:f7:ff:39:75:6c:cc:45:06:ee:74:8a:64:b2:d0:
23:17:61:74:36:45:57:3f:e4:e5:d8:5e:a3:c3:34:df:3b:34:
c2:60:1a:f4:4e:2f:33:f9:f6:96:6b:70:f6:d5:d8:eb:b6:12:
4c:73:1e:b0:29:15:db:2b:99:28:12:bd:ed:2d:ef:62:a3:13:
fc:22:81:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:31 2026 by rpki-client