Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
File: xvw4sqEAOV-puZGa15LnrLLbLgc.mft (raw, json)
Hash identifier: Wd0dMOxgwBJlaBJblb5yiJc0W3TKiAKX5rDPsKS+04o=
Subject key identifier: A7:F3:8C:33:DE:79:5E:CD:A9:14:99:3A:A7:A0:FD:DD:87:4D:F0:2D
Authority key identifier: C6:FC:38:B2:A1:00:39:5F:A9:B9:91:9A:D7:92:E7:AC:B2:DB:2E:07
Certificate issuer: /CN=c6fc38b2a100395fa9b9919ad792e7acb2db2e07
Certificate serial: 019D25BA6CED071097601CEC699944FAA115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
Manifest number: 0853
Signing time: Wed 25 Mar 2026 16:01:07 +0000
Manifest this update: Wed 25 Mar 2026 16:01:07 +0000
Manifest next update: Thu 26 Mar 2026 16:01:07 +0000
Files and hashes: 1: 4kLVVeCRQJrEoKU2Z3FAZr5ZTZg.roa (hash: N+n4RQm/UCrzmjM9BuILs0DGf1giItqSLrBBjPu0qrU=)
2: MAAniPDXI9HsVNZwiBPzQo7C0FE.asa (hash: +t1AssvVOScBcP/9D61rppScOKqy8/J9uspPTrgro+o=)
3: xvw4sqEAOV-puZGa15LnrLLbLgc.crl (hash: GQ+g9aApmsqnUa6OG9c7HeDEOW0EBogqhgW5oLdti4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:6c:ed:07:10:97:60:1c:ec:69:99:44:fa:a1:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6fc38b2a100395fa9b9919ad792e7acb2db2e07
Validity
Not Before: Mar 25 16:01:07 2026 GMT
Not After : Mar 26 16:01:07 2026 GMT
Subject: CN=a7f38c33de795ecda914993aa7a0fddd874df02d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ac:e8:44:38:09:ad:5c:4c:36:58:b6:31:b5:
61:0c:16:c6:c8:f3:e0:b3:c1:13:fb:a5:18:e5:e6:
52:3f:b8:52:dd:50:8e:07:2a:0b:f6:fe:60:d8:3c:
a7:57:35:c3:32:04:4b:06:f7:c7:32:d6:87:10:1a:
7d:c9:db:1d:07:60:d4:a1:dc:f0:4a:64:58:dd:f2:
f8:a3:83:0a:2b:73:24:ed:d3:0c:d1:4c:a9:93:89:
6e:fb:c0:fd:2d:4a:4d:04:b6:f9:d6:43:73:5f:dd:
97:75:59:31:d2:8d:2e:8c:37:d2:ad:dc:af:f7:e3:
d0:e9:66:48:35:c3:02:81:c0:8c:9f:97:89:10:9d:
c9:d6:fd:24:97:d4:e0:34:af:c9:b5:0f:25:b5:c2:
2b:5b:6a:85:c0:e4:17:8e:aa:f6:9a:50:a5:52:2a:
cf:20:0a:74:2a:64:78:7b:c3:70:36:e4:87:bb:7a:
0e:e0:81:cb:c9:38:67:1b:9c:3c:c9:52:4d:d6:65:
9c:2e:e1:e7:ae:b5:28:f8:6b:32:6a:11:09:51:f3:
eb:25:f2:b6:21:93:b4:43:4d:6e:7f:36:65:c1:e8:
56:eb:68:21:bb:36:09:f0:79:00:6e:b2:f5:89:50:
44:98:df:f5:6f:be:91:c4:07:85:a7:c2:31:64:6f:
87:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F3:8C:33:DE:79:5E:CD:A9:14:99:3A:A7:A0:FD:DD:87:4D:F0:2D
X509v3 Authority Key Identifier:
keyid:C6:FC:38:B2:A1:00:39:5F:A9:B9:91:9A:D7:92:E7:AC:B2:DB:2E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:9e:c8:e3:8f:92:96:8e:76:ed:c3:b6:c7:79:c6:8c:53:47:
2a:6a:fa:a9:03:7d:e8:a1:c8:aa:ea:54:04:d1:82:46:b6:dd:
cd:a0:02:da:19:f5:05:5e:a4:5a:ab:e9:bb:5d:10:21:7d:ee:
3d:bf:af:6a:09:e1:ac:05:8a:52:e8:e9:67:d8:e1:74:69:d9:
9a:7d:6e:9d:cb:b7:1b:75:75:16:98:65:2f:d7:21:20:bd:82:
07:31:0c:bd:dc:a9:e1:04:22:99:31:9f:c3:7e:5a:5d:ac:61:
b8:84:e2:4e:a5:fe:08:28:c8:64:7c:39:c0:8b:69:3d:ef:c0:
4f:3d:3c:3e:cc:36:66:8f:4f:14:61:fa:76:86:32:c7:2a:e5:
6a:a7:65:44:29:48:68:4c:a3:6b:57:af:71:50:f9:24:ff:e7:
cf:e4:63:1d:62:d9:81:3e:65:97:8f:64:f7:e3:19:23:0a:48:
ae:87:ca:bb:b0:48:5d:46:af:48:73:57:d2:a4:59:ba:b4:0f:
f0:1b:60:88:40:a6:5c:be:17:9c:75:54:18:72:7c:db:06:83:
f1:4f:2c:8d:02:e8:28:14:5d:6f:cb:4a:d1:15:73:74:04:70:
03:18:39:1d:3f:3b:c0:07:74:48:30:66:47:17:a1:38:b8:ce:
8c:d4:72:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:52 2026 by rpki-client