Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
File: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft (raw, json)
Hash identifier: UKNQBc5q0zuRNBK+pUYmgqfDXtGSTL4C1wWv2nXlNYY=
Subject key identifier: 1E:32:F2:13:EF:6C:B8:A0:13:20:5D:CE:34:6A:C5:EF:58:4A:EE:D2
Authority key identifier: C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
Certificate issuer: /CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Certificate serial: 019D281692CCC63A907F55EB9F2D1BEB5E2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
Manifest number: 181B
Signing time: Thu 26 Mar 2026 03:01:01 +0000
Manifest this update: Thu 26 Mar 2026 03:01:01 +0000
Manifest next update: Fri 27 Mar 2026 03:01:01 +0000
Files and hashes: 1: AorOXJjA6o7VIXG2KhmRn45N0UY.roa (hash: opct1yXiFy361tzWw8bb0wIPcRKu5irJGelwFQC/fvQ=)
2: ErvwJYNq58NBwdxg4NllytvGu58.roa (hash: L/oQiFOQUaagNx6+74y64js5tlg2OsPgxLI2bOEuDOs=)
3: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl (hash: X35DUDLpHNpgq33J/1zfEdjV1pmtaSV2e1NT4R6nNAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:92:cc:c6:3a:90:7f:55:eb:9f:2d:1b:eb:5e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Validity
Not Before: Mar 26 03:01:01 2026 GMT
Not After : Mar 27 03:01:01 2026 GMT
Subject: CN=1e32f213ef6cb8a013205dce346ac5ef584aeed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:72:5a:15:b2:e9:6f:01:a9:c6:98:2d:dd:50:
5c:6c:7b:99:8f:09:0f:f9:83:ad:ff:4a:22:6b:22:
19:b7:70:9c:22:c7:02:23:24:68:10:cf:2b:89:8a:
a2:48:84:15:4d:5f:67:57:4f:99:bd:8c:34:a6:e5:
e2:26:b1:ae:bd:ab:2b:54:f1:07:10:c2:26:54:df:
f1:d4:eb:e0:74:83:57:4f:28:83:d7:49:c7:d7:2c:
d8:8f:57:9d:6c:7d:b3:72:82:19:d8:3f:28:17:e1:
b9:a0:9a:8e:8e:98:ee:99:95:ab:f4:6e:57:8d:ab:
e3:04:2d:5e:a8:c8:d3:02:2e:f6:d4:e2:b9:ac:c1:
68:30:3f:00:a6:b1:89:b8:bc:46:a0:48:43:6f:35:
c5:c7:e8:e8:80:c5:a4:47:3d:5c:71:42:99:59:44:
c3:df:3c:11:cf:83:13:5f:91:69:60:ce:21:eb:42:
d5:07:2b:9b:8c:da:bb:cf:a9:6c:2a:1b:18:65:87:
08:0a:8e:e1:2d:f1:84:20:7d:83:1e:c8:9b:1a:5c:
4b:e0:32:a0:39:67:86:e4:b6:45:10:b7:5d:5d:84:
4a:25:29:9a:36:bc:86:16:fd:67:78:d8:e1:58:05:
03:f5:f4:b1:ed:8c:7d:bc:7d:fd:da:03:12:8e:0a:
05:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:32:F2:13:EF:6C:B8:A0:13:20:5D:CE:34:6A:C5:EF:58:4A:EE:D2
X509v3 Authority Key Identifier:
keyid:C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:14:e1:4f:91:29:c0:f6:b8:5c:f2:61:d3:48:a6:df:5d:e1:
d0:89:5c:39:20:92:8b:03:33:44:34:dd:1b:73:ea:4c:28:69:
bc:dd:b9:9f:bc:f8:a7:09:81:55:f8:94:fa:0c:ca:45:80:98:
2c:18:c4:10:f9:fa:99:03:9a:45:5a:f4:39:e4:6a:b1:47:3d:
2a:21:21:12:bb:58:15:70:ca:08:ea:9c:63:7b:03:b6:9e:30:
ef:cd:5c:68:36:73:0b:c9:af:a4:bb:91:c5:16:98:39:5f:e6:
d5:40:f0:7b:da:5f:48:4e:a9:fa:c0:ce:90:ea:52:a5:14:5e:
3e:3a:a0:43:e5:16:be:f3:80:99:23:af:f5:bf:16:16:ca:fb:
ab:e2:65:0c:6d:40:26:db:18:d1:35:4c:cd:55:aa:40:3a:d6:
99:86:23:5e:c9:0f:ae:42:2a:0b:da:cf:d6:ea:f7:1e:3b:19:
8a:c4:10:ac:80:5c:c8:4a:f8:95:1b:0e:96:5b:70:18:d1:df:
aa:ef:31:e9:15:ab:c2:ab:c8:21:db:6f:a8:8f:4f:e5:aa:3f:
c7:53:1d:59:41:de:53:10:50:41:7d:bf:b8:58:ea:14:81:b2:
35:53:16:79:fe:33:12:73:d9:7f:04:b4:92:42:79:05:8a:97:
b8:dd:0a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:11 2026 by rpki-client