Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
File: xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft (raw, json)
Hash identifier: nOBIKOjBhxgjcV+hni7uFrq8lvw9y3Oq7tIkfSCDoaA=
Subject key identifier: B6:00:EF:3A:85:7C:D0:C3:DE:34:45:21:1D:2B:F8:19:C7:BE:0C:85
Authority key identifier: C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
Certificate issuer: /CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Certificate serial: 019D29CDD6F947BD5831E9048B3357D57843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
Manifest number: 1899
Signing time: Thu 26 Mar 2026 11:00:48 +0000
Manifest this update: Thu 26 Mar 2026 11:00:48 +0000
Manifest next update: Fri 27 Mar 2026 11:00:48 +0000
Files and hashes: 1: 5nzdgTkkHsT4RLbgZ2GRcxsXvB4.roa (hash: qdwMngtFVt4ZyT/UodrlBdn1CZ1QUvtY6m9NXbdSStU=)
2: FCbP3k2rGutoC5ZIVI42Yy4D044.roa (hash: YEtesgH5hZKksi2t3ICvpYYP+6hkAxgaGRoHD54GMj4=)
3: wQTE-RQ3gReLtYxe4QY_Q7yg75Y.roa (hash: xzHJiZgBxtEtCYr9MbTY6G8tT0OCniElkcH6xF7+Cv8=)
4: xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl (hash: IbAWlNM5c7mdIbLjERlvHaI7OdS4PRvdMStmVU7tXcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:d6:f9:47:bd:58:31:e9:04:8b:33:57:d5:78:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Validity
Not Before: Mar 26 11:00:48 2026 GMT
Not After : Mar 27 11:00:48 2026 GMT
Subject: CN=b600ef3a857cd0c3de3445211d2bf819c7be0c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:de:71:0f:dc:64:c4:59:bb:77:fb:21:50:e8:
5f:9c:b9:51:77:3e:ba:d4:6e:82:7c:b6:35:9e:bd:
9b:9e:cf:80:c1:de:c5:c0:74:2c:a8:73:a3:36:a2:
db:7c:a8:ec:8c:bd:29:57:43:f7:ab:cc:e9:08:f6:
6c:4d:70:45:ec:37:92:20:ec:f0:98:a6:7a:46:12:
1c:43:0e:a0:c1:12:2c:62:60:47:87:1d:cf:4a:28:
d3:c0:6c:3c:73:ce:e3:ed:9d:65:c9:3f:85:e7:1c:
8b:c8:ca:20:55:9d:59:7a:9c:0d:ce:22:5c:1d:ae:
9f:ad:51:59:67:22:b5:b7:db:3a:eb:cb:61:31:40:
f5:44:29:f8:3e:43:c7:8f:19:2c:5e:86:a2:e6:f4:
2c:13:67:4d:13:b3:74:74:73:49:01:e1:60:a3:97:
d6:c0:64:32:60:6a:be:94:5a:6d:d7:36:e6:0a:f2:
1d:31:86:d8:fb:13:cc:3b:09:2f:f8:68:b9:6a:78:
66:ef:51:4e:e3:b0:ff:4f:82:92:55:bd:e1:b8:87:
35:6b:67:6c:9d:0d:a9:46:ce:e8:25:e4:f6:c4:ff:
41:f8:64:cf:0a:67:90:af:5f:e9:38:64:e3:44:d0:
fb:15:78:03:fc:29:40:66:c5:21:ed:42:fc:fe:44:
df:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:00:EF:3A:85:7C:D0:C3:DE:34:45:21:1D:2B:F8:19:C7:BE:0C:85
X509v3 Authority Key Identifier:
keyid:C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:53:7a:29:17:b2:5a:27:a3:08:cd:d5:55:40:92:6e:f6:43:
88:7c:a6:f6:43:56:df:d0:51:ec:80:51:a2:45:28:06:80:46:
97:da:8a:a7:41:67:08:f8:9f:3c:42:2e:cb:37:6e:60:a1:d5:
60:40:9c:fb:e4:83:72:78:b1:26:c3:4b:8c:0e:ac:b7:4d:40:
2a:cd:db:f1:04:87:e1:a9:fa:18:83:c2:7a:df:8f:f2:ea:f1:
e2:94:30:14:0a:3c:22:18:09:f7:5e:9b:18:31:70:a4:ec:84:
b6:d5:84:d7:2d:5a:07:1a:f8:fc:8e:5a:2e:70:b6:c6:d7:06:
89:86:a9:a5:11:9c:0c:25:97:ce:ea:0a:4d:fa:a8:60:5e:6a:
a6:36:68:30:99:fb:4e:26:90:9c:ff:e5:a8:16:b0:18:df:30:
c5:67:f7:3c:fa:04:8b:61:db:dc:d3:4e:d8:6b:45:52:63:b4:
80:4d:dc:d0:cb:10:ea:30:86:97:2b:ba:83:28:bd:68:73:9d:
27:e7:e3:59:72:f6:a0:bf:06:0a:33:de:40:05:50:fc:d1:c7:
b1:cd:d4:11:d8:7c:cc:1b:3a:2e:a6:39:c8:1d:1e:a9:ab:a6:
76:67:ea:41:25:88:64:17:76:be:8b:35:2a:48:ac:3b:78:41:
f9:68:b1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:04 2026 by rpki-client