Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
File: xqvTc8xZUGDxozB2tT4RYlEsPNc.mft (raw, json)
Hash identifier: aVrIn+x8hm5KJU4T/qnCXwhxX6LhknddwLwtEmDzeSs=
Subject key identifier: CC:97:59:71:9D:ED:4C:90:57:5C:30:6A:29:06:B3:CD:71:E4:5F:01
Authority key identifier: C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7
Certificate issuer: /CN=c6abd373cc595060f1a33076b53e1162512c3cd7
Certificate serial: 019D3B9D41C954B71887BD37B628D7AF4B12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 22:00:54 +0000
Manifest this update: Sun 29 Mar 2026 22:00:54 +0000
Manifest next update: Mon 30 Mar 2026 22:00:54 +0000
Files and hashes: 1: 5AsWyF1f4ujjHWSDojwUCJzIsQo.roa (hash: i1HUG5lw4XQU4xSl9+H4tPoxXwRgahcdEdU4boFga8o=)
2: aTIoEqt3GwezbAZZTmKXYT0O0SQ.roa (hash: K+hfO/BW2nP6cpPF3ceYJcKox+Ctdij1CCqhzl808Eo=)
3: xqvTc8xZUGDxozB2tT4RYlEsPNc.crl (hash: WC5HYlAAkbHmkjm9QptXK/INMMYUT1Sgnj10rUH+hjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3b:9d:41:c9:54:b7:18:87:bd:37:b6:28:d7:af:4b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6abd373cc595060f1a33076b53e1162512c3cd7
Validity
Not Before: Mar 29 22:00:54 2026 GMT
Not After : Mar 30 22:00:54 2026 GMT
Subject: CN=cc9759719ded4c90575c306a2906b3cd71e45f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fd:ff:66:3e:f4:46:63:0e:36:3e:47:e7:c6:
19:c5:3d:ac:17:2f:23:99:ad:4a:c3:b2:d9:39:c9:
ac:fa:8d:e8:3e:c9:ba:25:95:aa:81:93:ea:78:40:
7c:80:06:c5:21:41:9a:06:ba:1a:21:5e:9d:cc:55:
84:ae:92:8f:01:23:d3:c8:a5:73:85:20:5c:a6:79:
fa:40:30:62:5e:92:ff:b3:66:0d:5b:a2:fb:b9:f1:
0c:00:65:d9:b7:df:5d:24:4e:8d:88:05:99:24:73:
4a:f1:35:93:ea:5c:83:87:5d:aa:c5:e4:f0:5a:ec:
96:3c:06:5d:b7:de:ed:81:17:a0:a5:87:e5:30:cf:
42:2e:11:72:d3:c8:43:03:db:89:29:18:bf:a4:81:
2c:a7:55:27:c2:50:96:10:9b:0f:07:2f:dc:3d:3e:
14:56:74:23:8b:e8:f1:7c:4e:61:a9:34:76:ef:6c:
f1:14:4a:c9:fc:7a:6f:f7:29:f9:c3:40:b1:71:1c:
d5:34:31:70:e5:0e:29:d7:7b:79:e0:84:68:73:f9:
82:1e:a9:aa:ee:27:af:14:f3:7a:3e:ca:5b:29:41:
36:16:c0:f7:b8:34:76:a2:e5:12:3a:2f:56:b4:69:
48:fc:84:0b:36:d9:d2:f3:73:6a:fc:44:bc:36:1f:
63:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:97:59:71:9D:ED:4C:90:57:5C:30:6A:29:06:B3:CD:71:E4:5F:01
X509v3 Authority Key Identifier:
keyid:C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:6e:18:b1:ca:35:67:53:90:35:d5:13:b0:08:87:39:4c:b4:
30:f5:55:ef:2f:ab:88:16:cb:f8:0f:d5:ba:67:c0:1b:15:0e:
26:49:04:83:e6:f3:fd:82:82:e5:9c:1d:e9:99:e2:9d:a7:c2:
b0:d8:4e:37:d0:85:c6:23:1b:54:28:6d:59:0d:fa:6e:14:1b:
e9:3e:e3:8e:75:b3:d3:7a:88:a2:d6:67:8e:32:bf:ad:1a:26:
50:d4:d4:e6:f3:21:b2:b2:37:af:20:5e:08:51:ae:93:63:8f:
16:7d:34:72:f2:4e:1e:83:9b:b5:15:aa:fa:99:7c:82:22:b9:
15:bb:af:f7:6c:7e:db:31:50:c9:ae:21:d2:f1:a8:18:62:fd:
82:fd:1d:e5:be:4a:87:4a:62:23:80:b9:a1:c1:da:38:cd:f3:
a3:08:9f:c0:4f:72:82:bd:72:d0:f9:8a:00:89:48:91:29:51:
a0:20:90:29:dc:dd:af:3d:6f:ab:83:24:ba:f7:aa:66:ac:94:
6f:81:d1:52:45:98:da:14:9e:67:3f:4b:64:2c:81:cd:1a:b6:
bb:1a:18:e1:f0:59:f8:fd:1a:7d:c4:38:a6:f8:69:a4:fd:20:
23:b4:ca:2c:74:5e:b0:05:26:0a:89:85:a0:08:44:89:67:a4:
4a:c8:ce:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 08:54:37 2026 by rpki-client