Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
File: xgWHGIm53K_n7DE2rtHd_uLfvH0.mft (raw, json)
Hash identifier: brz2Ia0dZFe/U5cqcvsqXjXUNnMvbUJmbc9iyeusfbQ=
Subject key identifier: 4D:F0:63:AF:EF:79:C7:7D:F5:B6:97:2E:A3:92:77:28:C4:07:41:90
Authority key identifier: C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
Certificate issuer: /CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Certificate serial: 019D25F1B0008B6FAFBEE74F7A74AFB57B84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 17:01:29 +0000
Manifest this update: Wed 25 Mar 2026 17:01:29 +0000
Manifest next update: Thu 26 Mar 2026 17:01:29 +0000
Files and hashes: 1: LS6g_qbOyr5L3M2tEJSHcqYLaGo.roa (hash: pmKUoQElX3xSvG0E8J7HtZYFqjVisgOfWkSTHkEuCRA=)
2: p_1zOjE7RDNIPM-9ijPLsTD4cC4.roa (hash: XKWGoP/7AKlCb/UQ1yCnmOl4XCSltYQxcpO0+1gE4vE=)
3: xgWHGIm53K_n7DE2rtHd_uLfvH0.crl (hash: PuezNsBFzbUyZ8o2Ux/JTeCDIzhtrubyHO9qGDCTJ0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:b0:00:8b:6f:af:be:e7:4f:7a:74:af:b5:7b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Validity
Not Before: Mar 25 17:01:29 2026 GMT
Not After : Mar 26 17:01:29 2026 GMT
Subject: CN=4df063afef79c77df5b6972ea3927728c4074190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:32:9d:e2:4e:61:a7:fd:e0:71:fb:2a:c6:bb:
d9:32:61:d6:bd:f0:6e:77:fb:b9:5e:92:25:21:2d:
76:11:80:25:76:60:79:49:91:8b:29:03:98:fe:35:
df:28:4b:71:bd:98:c6:bb:cc:2a:98:5b:c6:d5:27:
73:49:7a:2c:8c:31:32:7e:61:31:04:8e:fe:99:c3:
0d:f8:01:2f:ee:c6:27:e7:46:5f:d5:c2:2c:63:e6:
06:b8:98:ca:1a:44:91:6e:a8:b1:b8:f2:ea:68:8e:
d4:bb:cd:c8:ed:8e:98:27:d3:82:c4:0a:58:ae:ee:
f7:d4:38:ca:f3:e9:0f:ac:47:49:1b:09:98:42:cf:
b3:aa:9d:f6:a1:f6:ea:f2:a1:94:c3:bd:ae:1b:43:
ab:b9:ce:aa:e6:61:26:98:f6:be:57:4f:c3:6f:40:
50:bb:bd:9e:51:ba:c9:3b:45:31:4e:3a:05:35:07:
ca:a9:9d:e4:a3:28:18:63:6c:52:ff:9e:68:fa:e1:
a8:c9:df:a9:66:d2:67:bc:ca:55:18:3c:3b:16:75:
0f:34:88:65:a6:67:6f:53:0f:ff:51:3a:e2:64:a0:
e8:58:f4:c1:3d:a2:f3:92:27:29:38:db:b9:dd:93:
4b:8a:22:85:80:40:5a:19:76:c4:c7:dc:e7:12:0c:
28:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F0:63:AF:EF:79:C7:7D:F5:B6:97:2E:A3:92:77:28:C4:07:41:90
X509v3 Authority Key Identifier:
keyid:C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:56:a7:28:89:24:cc:fc:07:90:2c:be:c3:71:dd:32:05:3f:
54:87:ca:6e:84:dc:85:ef:a1:9a:a1:90:ec:6b:16:3e:15:65:
fa:fe:16:e6:5d:3b:94:ab:6c:39:8e:d3:23:8d:2f:bb:e3:9b:
0f:3c:b1:c3:2e:bb:0c:48:93:b1:7d:df:c6:bc:f4:23:55:29:
85:cc:14:97:b4:0b:92:2f:e1:e1:07:2f:fe:93:99:c2:24:5f:
15:dc:b0:d7:e9:7b:01:b3:25:4a:b9:5c:80:be:a8:fa:4c:fe:
8f:52:96:26:a0:e2:a6:b8:7e:43:38:fe:fc:2f:90:98:af:c6:
0b:66:b0:f8:53:bf:8f:95:b0:f7:88:c9:37:3e:b3:c0:71:5d:
a9:c4:c5:06:41:43:be:ba:f5:1d:52:8b:78:60:e6:16:33:2c:
67:4c:86:02:76:0b:07:54:05:46:95:a6:0e:3b:d7:81:00:c9:
6f:49:59:a4:85:46:9c:e4:7c:1c:f1:3a:a6:33:40:1f:64:bf:
10:91:8a:10:2c:c7:45:58:c9:1d:13:c3:12:11:b3:8f:57:76:
14:b4:8d:63:83:d9:8b:01:73:89:da:ca:ec:24:4f:f3:7f:a9:
80:05:a4:a9:df:39:66:87:54:e6:09:5f:0a:2b:3c:92:73:8b:
bb:b5:0d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:43 2026 by rpki-client