Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
File: x1eZ_0M1t7GucYjt-lP9fiE-shY.mft (raw, json)
Hash identifier: VHPlspZCpfIHb70zWBuVH49JcKlUpE5m4f2obzpExPs=
Subject key identifier: BB:87:E8:E2:F5:90:59:36:72:C2:0B:EC:F3:C7:84:B5:22:CE:AA:E6
Authority key identifier: C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
Certificate issuer: /CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Certificate serial: 019D28BB369BFA6315B5A7EF67B16D188920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
Manifest number: 180A
Signing time: Thu 26 Mar 2026 06:00:50 +0000
Manifest this update: Thu 26 Mar 2026 06:00:50 +0000
Manifest next update: Fri 27 Mar 2026 06:00:50 +0000
Files and hashes: 1: 7wQkjJzOFmhj4SlVLo-x26w_WTc.roa (hash: uBOYkM28EcQ5gB0Rh8GkUGQb+Ga2UZ8JgAHYGzfSXXI=)
2: uabo7ndnRWzy9MUqP3Ih5P2gxe8.roa (hash: j629zk7F2qIP3WUGuPA4LCpVgjs/1/AZWtVe090YvCY=)
3: x1eZ_0M1t7GucYjt-lP9fiE-shY.crl (hash: GyJOKHMFB7MNYvXuEHW/xZ9sWRRynbxC7dFRgYQSaos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:36:9b:fa:63:15:b5:a7:ef:67:b1:6d:18:89:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Validity
Not Before: Mar 26 06:00:50 2026 GMT
Not After : Mar 27 06:00:50 2026 GMT
Subject: CN=bb87e8e2f590593672c20becf3c784b522ceaae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6c:7a:71:86:ff:ec:18:11:2a:de:d0:42:08:
c3:4a:a4:a2:d3:94:1c:d7:2f:1d:19:71:c0:a3:b8:
4e:36:cc:43:e7:13:0e:51:9f:4a:e2:94:fb:77:d6:
50:a2:cc:1e:b8:4c:cf:47:e8:04:3f:49:78:0f:5b:
33:3f:82:cc:1d:db:be:d1:02:0a:dd:26:b6:5a:fa:
12:9c:ed:9f:0c:f0:07:1f:26:84:86:ad:f8:24:81:
f7:49:e1:b2:ea:85:85:aa:81:72:c0:f9:8a:82:54:
38:88:3b:b0:49:43:ba:1a:6e:d7:74:8e:3c:9c:de:
52:83:93:a5:4b:2f:b7:46:18:38:ca:3f:2e:68:2a:
d1:a8:4d:3e:85:dd:a0:c3:79:6d:9e:18:22:f8:da:
11:66:6c:38:ef:8a:eb:8d:ff:3e:9b:0c:d1:99:3b:
16:00:94:e5:04:13:ea:fa:03:66:6d:45:14:29:7e:
27:11:8d:39:1c:c1:a0:d6:57:fc:bb:6d:71:ad:64:
10:ca:1f:69:93:c5:ee:e2:0a:84:5b:42:3b:25:41:
ea:04:8c:09:92:1a:cb:64:1c:aa:48:e5:38:56:c0:
c0:50:b0:d0:67:0e:5a:6a:54:f1:6b:d3:fd:5b:e6:
7e:87:fa:5f:a3:ad:2f:15:98:e2:27:13:3c:88:f0:
d5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:87:E8:E2:F5:90:59:36:72:C2:0B:EC:F3:C7:84:B5:22:CE:AA:E6
X509v3 Authority Key Identifier:
keyid:C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:00:24:6b:5d:a4:52:a3:aa:8e:21:93:e9:8b:19:7f:14:df:
d5:a4:9d:29:10:da:12:af:73:2d:37:15:2e:5e:bd:95:86:7f:
f0:cc:64:92:69:af:9c:d1:14:2f:fb:b7:b9:93:53:b9:36:52:
eb:6f:83:46:d8:91:82:9f:b2:07:0e:6b:09:9e:64:34:83:17:
a8:f6:1a:c5:86:75:25:6f:c4:44:83:0c:8f:42:a9:ee:13:1b:
bd:a0:6b:a8:f1:ad:fd:6f:20:a6:0c:35:fd:67:5d:9e:4e:8b:
46:22:39:67:72:46:a9:0e:8d:1c:24:41:32:84:4d:1b:5e:f9:
27:73:0a:7f:98:d5:0a:a5:c2:28:8d:11:bd:86:86:c0:86:ea:
fb:6d:20:8e:ec:34:2b:dd:27:3d:b7:2a:fa:08:4e:56:b1:02:
b5:9b:15:84:ed:c1:65:86:8c:68:1f:97:f5:d4:78:9e:f8:8e:
ef:41:0b:d4:86:4b:c5:24:b7:f3:ba:21:99:59:47:5d:fb:1b:
1d:bf:3a:13:8e:51:55:81:d7:45:6e:ba:95:54:37:e0:0d:ca:
5c:dd:2e:34:e6:6e:69:fd:a5:07:74:b7:8e:57:b1:4e:06:bd:
7d:41:6d:bf:3a:42:51:8a:3a:29:3e:48:e9:21:ad:e8:6c:90:
95:bc:4a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:24:27 2026 by rpki-client