Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
File: xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft (raw, json)
Hash identifier: Jf2AQS/bqGPxN9AHVuq7/QJVhaV9QSeIGAqyAPRdOgg=
Subject key identifier: 65:CB:A8:51:BC:6F:7F:16:F3:83:A8:93:12:2D:1F:CE:1A:7C:ED:35
Authority key identifier: C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
Certificate issuer: /CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Certificate serial: 019D2584407A4E651A41B9D83BA55A0A7AE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 15:01:57 +0000
Manifest this update: Wed 25 Mar 2026 15:01:57 +0000
Manifest next update: Thu 26 Mar 2026 15:01:57 +0000
Files and hashes: 1: 7yu1vZA6sQopFbJ477QSAd_T4No.roa (hash: y294/GuVma254ox9Je2JWpyy0Aod0Bh8Uh2WyhLyqks=)
2: AOST2v0fOQI-ty-pWahAGdkHAEs.roa (hash: jxMvz/MnFmWAmclh3cHyqmlZEVpCA/u6934edlXvIDs=)
3: v92-Eaw03d123_02nzbPzAiBgtc.roa (hash: EG21x+MWDXMZMqTlMifEMC9yWAbNwFpO2h6QDrwu7Io=)
4: xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl (hash: ieD61chuJhscdSdGsEzT1c2QiSfCtTmZacYbtGcEXos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:40:7a:4e:65:1a:41:b9:d8:3b:a5:5a:0a:7a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Validity
Not Before: Mar 25 15:01:57 2026 GMT
Not After : Mar 26 15:01:57 2026 GMT
Subject: CN=65cba851bc6f7f16f383a893122d1fce1a7ced35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a6:61:ae:f3:61:af:9a:d7:47:4b:b6:c9:6e:
47:1a:56:2e:91:47:dc:10:4c:cd:8b:de:f6:9a:c7:
77:2c:ca:60:6a:98:2b:5a:47:8d:70:b8:6d:5e:87:
12:ac:67:9e:55:3e:10:91:d4:7b:4a:e8:d9:1b:d9:
d9:e5:82:47:c3:6d:a0:ce:3c:97:42:35:91:95:f4:
ed:a6:53:43:8d:af:2f:e6:30:90:36:4a:74:04:33:
bc:62:5d:9b:a5:bf:a7:c2:ed:df:33:86:80:5c:f8:
cb:5c:41:c8:cb:d4:90:13:9e:25:6f:77:13:07:d2:
a5:6f:ab:09:f6:e7:65:b6:36:00:b7:cf:a6:4a:7f:
53:0e:f9:00:e2:7d:a9:07:31:48:7e:78:c3:9f:e5:
e0:f4:e9:46:9b:7d:6c:8c:15:d1:c9:e2:20:5a:7e:
d7:67:58:60:c8:20:3f:54:6c:0e:5d:98:75:24:50:
00:a6:af:d0:e8:ac:fc:53:3f:d4:c5:84:9e:8f:b4:
89:e6:0f:ab:c5:a4:d9:de:fb:4f:49:b6:f0:1a:fd:
31:0c:05:2b:a7:55:74:57:05:64:72:77:62:42:8c:
33:f8:2a:3b:21:e9:8d:9b:7a:de:69:39:22:84:59:
89:f3:6c:f8:8c:11:5c:69:9a:40:3e:e8:87:bb:be:
1a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CB:A8:51:BC:6F:7F:16:F3:83:A8:93:12:2D:1F:CE:1A:7C:ED:35
X509v3 Authority Key Identifier:
keyid:C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c4:35:f2:16:3a:36:ec:a1:61:db:90:8b:3a:2c:13:67:d4:
64:50:be:8a:59:5b:20:0e:18:aa:c3:c2:ed:b7:85:83:dd:ce:
94:df:a5:2e:48:66:87:89:bc:a3:8c:5d:67:81:07:fe:b0:33:
e2:03:e7:2f:c9:e2:8a:6c:43:45:bb:a4:a5:2d:f6:a0:0e:40:
f9:33:d4:c9:24:d6:18:98:34:69:92:70:ab:18:1c:fe:05:ef:
59:31:e9:90:ab:3c:70:9d:68:7e:7f:d5:9b:13:5e:7b:4e:ea:
09:88:5c:fd:9f:b7:ed:2b:7c:df:7d:2f:d7:7e:0e:cd:4e:e9:
69:4f:cf:88:39:93:34:36:8b:e6:2f:22:e9:25:9b:3c:a9:9d:
04:16:e0:a5:4b:25:bc:60:1a:41:d2:51:f0:dc:83:33:bc:31:
6b:6d:0d:27:23:8f:6c:1a:77:c8:58:75:dd:0f:32:3f:d7:16:
98:d7:02:2f:9c:e8:8e:e6:70:17:d7:42:53:79:86:18:ce:6d:
42:52:5b:de:b6:b4:5b:fd:dc:69:85:c0:41:c8:2c:83:f8:ae:
31:91:87:0b:83:31:c3:d4:44:a9:14:03:6a:41:f3:8a:d6:8c:
ce:23:b6:8b:c0:73:91:f6:9f:35:3a:cf:03:8b:91:89:89:77:
82:9f:17:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:35:11 2026 by rpki-client