Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
File: xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft (raw, json)
Hash identifier: bYoyR+wfnoD7iEm2vJkAxYYX9q8lCyCq4Q6RLiztrVc=
Subject key identifier: 72:0E:D1:46:58:17:68:C8:B3:2D:08:68:20:11:C1:69:C1:9E:E8:51
Authority key identifier: C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
Certificate issuer: /CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Certificate serial: 019D2B4E33A73927D6108DD7BF015CE40474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 18:00:38 +0000
Manifest this update: Thu 26 Mar 2026 18:00:38 +0000
Manifest next update: Fri 27 Mar 2026 18:00:38 +0000
Files and hashes: 1: YJVBg6yi8rhbBJuxWKJ7v5Xiat0.roa (hash: Hyd6ST+4DY0Ptd4aJ86bVxwbS75QcKsP6VrnesIx1WI=)
2: __9VedluN1sWd7ruf5_gxA1gv9U.roa (hash: 9+zLsshZreT9h4dF/gegkgeeA5ROS1Ql2Nv3i9Zy+8U=)
3: xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl (hash: Etrj14GHPNZJpvvYz7pYJqwu585lM5pjQO7yC/TTJZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:33:a7:39:27:d6:10:8d:d7:bf:01:5c:e4:04:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Validity
Not Before: Mar 26 18:00:38 2026 GMT
Not After : Mar 27 18:00:38 2026 GMT
Subject: CN=720ed146581768c8b32d08682011c169c19ee851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7f:3f:94:75:d2:f6:97:30:26:55:ac:53:c1:
b3:9b:d0:2b:d8:59:46:d8:e1:5c:fd:07:e8:d3:1d:
4f:88:cb:95:d8:42:c7:2c:e9:70:ef:83:6a:97:7a:
41:9b:a9:28:7b:07:d9:9b:dc:e1:d0:d6:15:89:56:
0f:03:7d:db:2a:a2:0f:05:5a:eb:59:42:7f:5b:41:
cc:9d:9c:6d:bd:c3:e2:c1:c7:0f:b7:e2:1c:ce:02:
6d:19:98:c4:e8:15:23:64:9e:ac:d6:3e:83:62:14:
1a:54:26:cd:40:5c:28:2c:2a:50:41:d6:46:3d:76:
2e:4b:b4:aa:c4:52:e3:37:6c:19:81:fb:f9:6f:36:
a0:28:94:e7:b9:a0:12:7a:a3:4d:ed:2b:5f:7e:5a:
44:12:34:96:70:27:5b:c9:d0:bf:db:d0:0d:23:36:
f7:74:dd:02:aa:93:94:eb:ef:e6:54:89:3c:00:9a:
1b:56:ca:03:28:42:0c:94:f3:c3:e9:6e:bb:52:5d:
ce:18:56:76:9b:ee:41:09:28:f3:64:90:35:c2:2c:
50:f0:ac:a1:03:a5:5c:86:33:60:04:e0:d1:81:0e:
55:de:8d:f1:23:3d:0f:ac:71:d8:b4:91:2f:e8:a4:
e0:a6:ea:8f:86:42:c6:e2:a9:3c:69:86:d3:8f:a5:
71:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0E:D1:46:58:17:68:C8:B3:2D:08:68:20:11:C1:69:C1:9E:E8:51
X509v3 Authority Key Identifier:
keyid:C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:95:56:a9:62:74:16:7a:15:66:4d:8e:79:e2:2f:25:fd:ff:
07:9b:52:75:13:6a:f8:78:ae:de:11:fd:0e:b6:61:1f:0d:ae:
62:49:d3:ce:bf:5c:f3:65:da:10:e5:ff:ef:28:84:be:8b:12:
7c:9a:7e:60:f1:df:68:42:33:fd:29:65:d0:85:de:b9:f3:3a:
7d:78:0a:b5:e0:e2:0a:c9:e1:ee:6b:a6:63:b4:71:cf:50:52:
51:cc:06:4c:3c:c0:4e:d7:94:01:87:9d:90:d2:f6:19:5a:2d:
0e:60:67:40:a2:27:7c:02:92:2a:de:f1:68:fa:ff:3c:2a:d0:
fa:00:65:6c:8f:32:98:36:f7:e1:0a:87:3e:50:32:a2:7b:3d:
10:58:cf:0b:6c:83:0a:ee:47:62:b5:8e:cd:9b:75:cd:79:f6:
38:34:1f:56:91:7a:41:b6:ff:cc:39:56:45:c0:27:ce:a9:11:
2e:29:b0:b9:88:31:d9:40:2a:8e:60:58:4a:47:8e:22:29:14:
62:38:1d:d4:56:ad:ef:bc:7b:d5:95:92:cd:9c:5d:80:99:2c:
31:89:5b:83:c3:3c:51:4b:1d:ce:26:00:cf:da:af:f9:f5:0f:
8c:1d:ec:69:8b:2a:58:ff:17:e9:36:58:84:ef:74:05:b0:c3:
76:9f:26:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:01:41 2026 by rpki-client