Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
File: xKPrF197V5BsgPUI4V9j4D8Lfvg.mft (raw, json)
Hash identifier: DzIgxkrOrf2XwW4mfihFneNukX1XvEyIOaztr0/7Jns=
Subject key identifier: 99:3C:EC:84:5C:02:5D:96:DB:D7:FF:4D:A7:5F:BB:1B:09:41:15:99
Authority key identifier: C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
Certificate issuer: /CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Certificate serial: 019D26CD390A40143C53B5AF32A311DE2FF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
Manifest number: 1823
Signing time: Wed 25 Mar 2026 21:01:16 +0000
Manifest this update: Wed 25 Mar 2026 21:01:16 +0000
Manifest next update: Thu 26 Mar 2026 21:01:16 +0000
Files and hashes: 1: mTuVuiw3HM2pBIheqITWSq5I3n0.roa (hash: Ipl/v3cZkycb4zTv5tbg7JdjHKPt6S5to0wny64/QVQ=)
2: xKPrF197V5BsgPUI4V9j4D8Lfvg.crl (hash: j8dFgNGriIjQ0WJ8U9CP508KHqj3zDfBdqFXrACwY1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:39:0a:40:14:3c:53:b5:af:32:a3:11:de:2f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Validity
Not Before: Mar 25 21:01:16 2026 GMT
Not After : Mar 26 21:01:16 2026 GMT
Subject: CN=993cec845c025d96dbd7ff4da75fbb1b09411599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:84:57:7b:7f:1d:2a:2a:70:69:c4:d3:87:28:
ea:18:0d:77:99:e2:bc:91:79:d9:b0:e7:1c:86:97:
7d:0b:a8:81:06:e5:77:e6:3c:60:c6:dc:a0:be:82:
e3:67:c0:73:3a:67:c5:6d:03:cc:6d:32:5e:ba:55:
cc:8f:c2:22:76:89:af:dd:f4:dd:89:5f:7d:f2:4e:
7f:91:81:3d:ed:d4:49:7d:0f:54:3d:97:24:20:d5:
d2:6e:b4:ab:ca:1e:63:ef:43:db:33:ad:28:ab:11:
e2:bf:ba:4a:3b:72:e8:16:bd:49:71:7b:a9:0a:2a:
4c:11:8a:9a:3c:d0:1e:a5:ad:d0:0c:6b:b0:78:b4:
60:8b:a8:dc:12:ca:e8:f0:e9:dd:f5:8d:9e:25:7a:
66:1b:fc:af:56:7e:da:38:9d:ac:1d:3e:35:ff:ab:
94:05:8e:07:e5:84:c7:58:71:96:37:b6:20:68:aa:
f9:a7:fd:d6:93:b7:42:61:78:48:36:8f:c1:08:48:
2f:bf:b4:3d:26:e0:16:c0:98:da:38:76:2e:11:a8:
5c:7f:28:46:e6:80:d2:fb:4c:02:0b:04:bb:e0:d9:
a8:d0:13:d3:4d:79:f7:ef:a2:af:28:11:04:e7:ee:
73:12:e4:59:2c:36:d0:27:43:f9:ab:3c:02:a7:9a:
de:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3C:EC:84:5C:02:5D:96:DB:D7:FF:4D:A7:5F:BB:1B:09:41:15:99
X509v3 Authority Key Identifier:
keyid:C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e6:54:b8:37:c4:4d:a0:c3:5a:53:8d:06:b1:c0:b6:5a:1e:
04:ea:a8:20:16:0a:3e:80:f0:b4:47:0e:84:ac:63:d0:53:61:
68:1f:8c:e4:f9:33:b8:1e:84:5d:a8:86:c1:ce:3a:d2:77:10:
fa:ee:55:87:65:97:ab:77:2e:5b:13:4a:00:bd:ec:22:51:86:
79:d7:c3:96:83:62:47:f8:0a:69:bb:21:29:14:6a:a8:89:5f:
76:f2:ba:29:52:4b:f9:cf:e8:51:e5:e9:62:51:8f:60:d3:53:
59:67:01:6d:3a:4f:eb:53:c8:3c:e5:d7:ef:d8:d0:cf:7b:d7:
f9:ee:62:0c:f9:c1:bf:28:7f:05:5c:e8:0f:e2:2c:82:69:4f:
0d:3b:7a:b5:3b:b2:94:6f:8c:96:5a:93:5b:a1:54:b3:fd:32:
01:94:74:19:bf:16:f6:7a:3f:0a:fc:15:4a:f9:59:41:37:6b:
fb:90:46:74:8d:f3:e1:5c:31:da:d9:a8:c4:69:73:d2:f0:54:
51:6b:2c:e0:f9:00:bf:a9:1d:1a:0a:b2:fb:72:82:e9:61:03:
ce:03:db:92:f5:a5:8f:d2:f9:3e:d1:21:ad:3b:96:56:5d:3e:
26:77:54:c2:98:77:e8:75:0d:d3:a3:41:8b:fd:61:ce:3f:d8:
78:25:a4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:50:56 2026 by rpki-client