Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
File: xRGedSADkvGi8IvpkHMtgEeyiwk.mft (raw, json)
Hash identifier: qIfXDKWVRD9Oj/bjucE+QdoB9OqYth2JizZv1D4AVlE=
Subject key identifier: F3:71:A4:A4:5E:0F:75:8A:D1:7C:BF:92:93:88:71:93:43:77:3B:28
Authority key identifier: C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
Certificate issuer: /CN=c5119e75200392f1a2f08be990732d8047b28b09
Certificate serial: 019D2695F9D042692CED4213F004671AC008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 20:00:55 +0000
Manifest this update: Wed 25 Mar 2026 20:00:55 +0000
Manifest next update: Thu 26 Mar 2026 20:00:55 +0000
Files and hashes: 1: 5anfbEI-jaspGpdleX4CIuBsAPM.roa (hash: Hflhls/SMNWgATvG3eTRW4iTnqTJ1x1t05I3Ae6Iogc=)
2: xRGedSADkvGi8IvpkHMtgEeyiwk.crl (hash: JHTmRoVXpXucmE2OYbRx56EB6UVPwcPsuwBrcaUyJvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:f9:d0:42:69:2c:ed:42:13:f0:04:67:1a:c0:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5119e75200392f1a2f08be990732d8047b28b09
Validity
Not Before: Mar 25 20:00:55 2026 GMT
Not After : Mar 26 20:00:55 2026 GMT
Subject: CN=f371a4a45e0f758ad17cbf929388719343773b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:10:6a:2d:ac:d7:ff:04:94:b5:2c:63:99:e3:
79:cb:23:82:de:5e:5b:6e:c0:64:da:b3:74:6f:19:
ac:66:b4:9e:c1:f2:2a:2e:57:e7:1b:6d:74:68:a2:
d3:ab:dc:03:00:5f:24:ed:b1:97:e3:f5:b6:16:00:
f0:64:52:6a:40:1f:92:22:d4:12:73:61:c5:22:c0:
24:73:db:55:0f:88:ca:d5:4c:51:9f:e9:ce:6b:3d:
c1:aa:ae:e6:f6:e7:d9:6c:af:c7:79:7d:e6:f5:d2:
8a:3c:4b:96:1e:d3:9c:2e:19:ce:ae:cc:40:4d:58:
c0:35:f5:49:91:76:c1:38:e5:cc:d3:ed:78:83:81:
2c:56:06:27:fa:89:70:57:9e:6b:62:be:67:31:a8:
f5:70:a7:82:c9:27:7b:e0:45:d8:72:66:1c:94:9d:
01:00:16:cc:3f:78:32:05:b2:92:de:48:96:22:8a:
4b:18:42:64:ef:6f:a6:74:20:d6:8e:f2:85:80:2c:
70:21:c8:4c:ad:c8:3b:85:f2:49:41:36:42:a2:4e:
72:09:44:ba:a4:6b:1a:07:a7:16:85:57:45:26:be:
50:ed:2f:67:ea:cc:16:c4:b6:2d:a7:48:3a:4e:b3:
ec:52:4e:49:ca:b9:a7:d3:76:0e:4e:ab:02:6f:4c:
05:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:71:A4:A4:5E:0F:75:8A:D1:7C:BF:92:93:88:71:93:43:77:3B:28
X509v3 Authority Key Identifier:
keyid:C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:78:96:b5:59:b2:9d:5d:cf:1a:0d:d9:df:f8:6d:d7:6f:c5:
4d:ab:16:37:14:ae:29:c8:4c:fe:dd:4c:b6:42:a9:2e:ae:d6:
eb:c8:e9:44:2d:24:1a:f7:aa:22:8e:61:41:98:59:f2:de:43:
3c:48:26:31:97:3d:10:f3:bf:f6:9f:17:e2:09:fc:56:72:55:
2d:1a:76:8b:cb:9b:f4:87:45:a8:b8:c0:f8:a2:f9:e9:3b:5e:
dd:00:7a:03:1b:73:76:97:c7:7c:fe:1b:69:52:82:1b:38:e5:
2f:83:ef:2a:c6:29:5f:66:c0:bb:b3:96:e0:e3:a9:43:74:98:
04:11:9d:61:83:bd:03:9b:86:c8:d8:83:91:db:78:51:82:2b:
76:a9:9e:37:92:e0:ce:24:9c:a4:d7:e6:15:5a:87:47:ed:74:
15:65:c8:de:87:02:3c:3e:dc:ec:54:08:f6:f8:5e:04:fe:4d:
a0:51:96:c9:36:c4:80:43:65:2d:95:1f:08:1b:02:f7:87:b0:
08:2e:f9:63:8e:46:b9:e5:d6:1a:f8:89:19:27:cf:0d:9d:ad:
a7:13:4b:be:14:cb:b9:5d:1c:6d:24:da:0a:0e:29:54:6c:3c:
8f:32:6c:bb:a2:3b:f9:fd:47:4c:b2:2e:87:e0:9d:d9:dd:60:
b8:ba:f7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:16:39 2026 by rpki-client