Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
File: xmpfK0aNs161Yr034fNuzqgTzKw.mft (raw, json)
Hash identifier: /Bj2nAWRbOax5tQRHrWfiNpfGJ0fcV0f/18MuoOGyCY=
Subject key identifier: C7:0D:8E:AB:E3:D0:0D:1F:F0:B3:F1:EE:18:4B:EC:71:82:82:33:C1
Authority key identifier: C6:6A:5F:2B:46:8D:B3:5E:B5:62:BD:37:E1:F3:6E:CE:A8:13:CC:AC
Certificate issuer: /CN=c66a5f2b468db35eb562bd37e1f36ecea813ccac
Certificate serial: 019D2CCEF1353DE7DA82632F64A355CBBC02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
Manifest number: 188B
Signing time: Fri 27 Mar 2026 01:00:52 +0000
Manifest this update: Fri 27 Mar 2026 01:00:52 +0000
Manifest next update: Sat 28 Mar 2026 01:00:52 +0000
Files and hashes: 1: nd2ovDlF_Zmo_XxAGJs-agTwP6k.roa (hash: wKDGlke9HUoxSKsazb91lMdI0w1rZkvOiuN/NBOarjE=)
2: xmpfK0aNs161Yr034fNuzqgTzKw.crl (hash: kHCDdZ9Q5PoBwWfVZ8AXaj1OFVV8xkp7Bggj0aqJ8wE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:ce:f1:35:3d:e7:da:82:63:2f:64:a3:55:cb:bc:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66a5f2b468db35eb562bd37e1f36ecea813ccac
Validity
Not Before: Mar 27 01:00:52 2026 GMT
Not After : Mar 28 01:00:52 2026 GMT
Subject: CN=c70d8eabe3d00d1ff0b3f1ee184bec71828233c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:60:13:11:49:56:22:19:1b:e7:48:1c:6c:90:
d4:64:0d:3a:9f:52:f0:b3:c8:63:50:98:c3:92:57:
a6:d2:2d:2b:3b:7d:f6:c8:fb:e3:07:d9:a8:49:a9:
9a:16:99:0e:76:be:ec:94:1f:cd:c9:30:c9:44:28:
14:71:7d:d0:9c:3d:3c:65:e8:0c:41:d1:f5:15:b9:
a5:92:31:00:0a:c0:a2:bb:91:44:ae:71:eb:4a:e6:
c0:c1:84:c7:b5:60:50:85:4c:c6:d4:be:26:0d:ed:
67:f8:05:18:14:38:62:dc:a7:f8:f2:f2:89:78:44:
12:a8:9d:ed:03:c9:c1:87:12:4e:a9:48:86:d0:10:
60:c8:1f:bd:75:af:31:ab:ff:9a:16:0f:26:46:e9:
18:c7:8d:07:75:23:e4:5b:54:d7:35:ba:64:fc:e2:
64:26:54:6e:e8:f3:81:6f:0c:55:76:a7:36:b5:06:
0f:4f:d1:5d:ca:39:df:cd:eb:89:ba:b8:0f:ee:ce:
de:ce:7b:df:20:cc:7e:7b:66:5a:f6:00:61:1e:8c:
59:d7:28:fd:ea:ef:50:5e:2f:72:6f:ee:95:f7:37:
68:97:a4:21:37:1e:fc:a7:96:c4:59:8a:c6:c1:59:
55:61:78:7b:cf:5f:75:cf:a4:34:60:7d:db:6a:26:
d5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0D:8E:AB:E3:D0:0D:1F:F0:B3:F1:EE:18:4B:EC:71:82:82:33:C1
X509v3 Authority Key Identifier:
keyid:C6:6A:5F:2B:46:8D:B3:5E:B5:62:BD:37:E1:F3:6E:CE:A8:13:CC:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:81:df:69:1e:c1:44:54:ba:0a:5d:ab:67:d5:06:c4:eb:da:
b2:0f:92:c3:80:37:de:38:0f:c6:2b:bd:3c:e8:65:43:6d:34:
cd:d7:37:dc:cb:be:5e:24:67:67:87:95:c3:dd:ad:aa:4d:c1:
c3:67:ae:b2:d3:e0:b2:18:34:a4:e5:f1:5f:f8:f0:64:bc:24:
f4:00:e9:72:5e:d7:6f:e5:ed:c6:23:23:73:a3:06:32:5c:dd:
ee:4d:09:1f:b3:f2:f1:c0:9c:db:ea:fb:af:5d:01:01:af:f8:
0f:ea:40:a9:08:b9:49:1f:a4:0b:f8:87:a7:77:3d:7e:48:23:
8e:1c:52:d4:37:60:2e:e0:df:b5:17:78:d1:9a:a7:93:5b:57:
32:bc:5b:88:99:a1:aa:1a:b7:56:16:6b:ac:59:48:37:bd:e2:
9f:b9:10:f1:fd:78:4f:92:d8:bc:50:b3:cd:6f:9f:97:70:23:
27:23:10:a0:81:30:f1:fe:16:4b:10:fe:62:20:ae:73:b1:33:
0e:90:30:dd:ba:1d:0d:fd:3f:02:28:a4:4d:c3:59:ad:75:5e:
43:60:24:0e:72:0c:0f:55:2a:39:b9:d7:af:7f:ea:90:35:9d:
95:f3:4b:bd:ce:67:42:55:70:23:20:3a:97:29:bc:bb:b2:22:
6b:2c:20:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:09:31 2026 by rpki-client