Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft
File: xTG2PRGmzC0c5p4TEch6waanBzM.mft (raw, json)
Hash identifier: 82Ch8kvqxdOj39PSyl4naRerWef7EVlX76S2QxPPYD0=
Subject key identifier: 4A:D7:21:FC:44:E1:7B:41:80:6B:AE:5B:6C:51:5A:2B:DF:24:07:2B
Authority key identifier: C5:31:B6:3D:11:A6:CC:2D:1C:E6:9E:13:11:C8:7A:C1:A6:A7:07:33
Certificate issuer: /CN=c531b63d11a6cc2d1ce69e1311c87ac1a6a70733
Certificate serial: 019D28BBF59ED30D803DF3FE948AED627EF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTG2PRGmzC0c5p4TEch6waanBzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft
Manifest number: 110C
Signing time: Thu 26 Mar 2026 06:01:39 +0000
Manifest this update: Thu 26 Mar 2026 06:01:39 +0000
Manifest next update: Fri 27 Mar 2026 06:01:39 +0000
Files and hashes: 1: WGUKVj-vf2RKGeE0tMRbU2IE_NQ.roa (hash: tHeLPtV3EhtYhN1tkXzaqoA9I1M0f8QKiOJp3r6uMxQ=)
2: xTG2PRGmzC0c5p4TEch6waanBzM.crl (hash: s67V7H8e8apftZPTO1CAPEYXho/jzL/guK84WT+qYUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTG2PRGmzC0c5p4TEch6waanBzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:f5:9e:d3:0d:80:3d:f3:fe:94:8a:ed:62:7e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c531b63d11a6cc2d1ce69e1311c87ac1a6a70733
Validity
Not Before: Mar 26 06:01:39 2026 GMT
Not After : Mar 27 06:01:39 2026 GMT
Subject: CN=4ad721fc44e17b41806bae5b6c515a2bdf24072b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2c:8e:01:b4:99:8d:4b:a2:7a:d0:42:6b:ed:
42:99:be:c1:07:3e:e7:b4:04:06:33:e6:15:8b:9a:
09:fb:24:92:07:7d:7d:14:a0:59:25:3b:75:25:96:
a5:5d:65:2f:2f:fa:87:70:80:27:57:b1:a3:dd:1f:
ba:1a:6b:38:ec:68:12:d6:81:45:1e:55:52:a1:3f:
0e:c2:6b:a2:da:79:4c:25:85:75:dc:28:23:d9:9e:
55:94:44:62:6b:34:cd:c9:51:f4:32:d0:f6:ea:0e:
40:70:bd:a8:ed:9c:06:44:8a:a7:af:b2:b6:a8:6a:
c0:f3:37:6a:d0:62:28:f2:97:05:5a:ac:5e:dd:db:
4f:49:3b:91:69:4c:a4:b1:a9:8a:c6:72:95:b9:33:
ca:51:20:53:3c:6a:a3:3c:22:fc:83:57:11:83:6d:
1f:9e:2d:32:b9:16:58:7d:3e:1a:53:a5:b8:fe:cb:
a4:75:92:06:b6:6d:f9:12:ff:19:74:e9:ee:83:d5:
6b:55:02:ae:f6:2e:c7:43:3b:2d:8f:47:15:ea:c2:
51:3a:ea:a5:e7:ae:77:f8:f0:fb:f0:0f:50:32:44:
24:6e:3c:f2:04:35:a7:20:f3:d7:f7:b2:66:5b:07:
54:7a:d5:17:06:06:5f:26:6b:87:8b:7c:3d:30:a0:
cd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D7:21:FC:44:E1:7B:41:80:6B:AE:5B:6C:51:5A:2B:DF:24:07:2B
X509v3 Authority Key Identifier:
keyid:C5:31:B6:3D:11:A6:CC:2D:1C:E6:9E:13:11:C8:7A:C1:A6:A7:07:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTG2PRGmzC0c5p4TEch6waanBzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:3b:a6:ca:b9:3a:a3:a0:61:3e:4a:fd:c3:f4:01:a4:0f:dd:
c5:be:0c:2e:1c:bc:f3:ea:e3:b0:68:2f:da:e0:e8:12:14:b7:
aa:81:5f:02:5e:b3:11:60:fc:c4:46:9f:0f:9c:93:09:5a:3d:
19:b7:50:0f:55:22:c5:d0:5b:46:0f:89:2b:72:bf:22:00:dc:
1e:0c:40:a0:0e:d7:a7:0c:f0:d2:b3:22:ae:a9:22:80:69:8a:
44:64:86:28:19:26:98:45:27:31:f2:25:ec:d1:be:84:74:ce:
8e:c2:ce:0e:bb:6a:5f:43:bd:23:ab:95:c9:ac:4a:4d:8a:a2:
31:08:bf:64:ad:81:6c:1c:d3:26:ca:8c:99:e6:a7:2a:51:b2:
72:aa:3f:64:71:d9:1b:41:5f:fa:42:70:e8:81:87:52:6d:30:
87:a7:3e:4b:0a:ef:aa:f8:42:14:2a:2c:c4:47:b6:ac:12:66:
9f:a8:e4:4b:25:33:4f:db:40:99:79:6c:43:68:15:28:6b:3a:
f7:ad:f3:08:32:bc:ac:cc:cb:d0:9a:85:b9:cc:83:21:90:83:
c5:21:40:45:a8:b0:19:fc:b6:43:09:61:d8:35:89:9c:9c:f9:
08:2b:7e:87:d1:04:63:97:ef:61:5f:5a:0e:1e:80:39:2d:75:
24:a1:ee:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:37 2026 by rpki-client