Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
File: xJsfdrtbrG0MeWukcTDHaLHHOxw.mft (raw, json)
Hash identifier: /zIRZHuEIX2SE6753lqrKaebWo8wDmh1qKqlhnpEC0I=
Subject key identifier: AE:13:61:69:BD:0D:C1:C8:17:47:E1:53:57:B2:70:B1:A9:0E:01:01
Authority key identifier: C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
Certificate issuer: /CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Certificate serial: 019D26CD0B48A2D0836F3B1C8872FE1B4525
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 21:01:05 +0000
Manifest this update: Wed 25 Mar 2026 21:01:05 +0000
Manifest next update: Thu 26 Mar 2026 21:01:05 +0000
Files and hashes: 1: Ng0DQWDHTBmFSx5wv3FJ35llgcs.roa (hash: rjml5J5gqgFMe9KzjlWTkxUk0orx3tU+r2zl+R9xROo=)
2: wcLWWQG314JWSm8pfpN9yL_5EII.roa (hash: D4VS38hxLq9k1urmiJ5Azd8OYDvuYJ5hUnqD5WiA9F0=)
3: xJsfdrtbrG0MeWukcTDHaLHHOxw.crl (hash: OgAY90/a2ijDdaq0IfxE5iAuhGdmlWRy3vt3T32gdWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:0b:48:a2:d0:83:6f:3b:1c:88:72:fe:1b:45:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Validity
Not Before: Mar 25 21:01:05 2026 GMT
Not After : Mar 26 21:01:05 2026 GMT
Subject: CN=ae136169bd0dc1c81747e15357b270b1a90e0101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d0:8a:ae:38:98:d3:91:aa:d7:8b:c1:32:4f:
db:c1:4f:e0:24:80:27:3b:9f:2e:35:a2:d7:63:55:
ed:12:28:7c:4d:4d:53:86:60:31:c1:c1:18:72:59:
2e:72:b1:b0:f6:a4:f0:02:c4:b8:31:3d:4b:f6:b1:
fa:51:1b:1e:50:52:87:b0:be:1a:55:1a:dd:da:17:
24:58:39:e5:d3:1c:a8:54:ff:4b:8d:ed:04:48:84:
12:fd:85:a3:66:ba:d5:6b:9c:f8:85:ef:a9:b4:94:
14:ca:a9:e9:66:43:57:ad:ff:c6:d5:3d:3a:e8:4f:
00:c5:38:f3:f0:76:f4:28:18:2b:48:6b:92:07:1b:
63:e1:c6:8b:95:9d:ae:59:b2:ea:29:f8:27:e9:b8:
e1:20:96:ab:28:76:00:d3:3a:77:38:4c:84:7a:c6:
dc:bc:c9:0f:b1:e2:3e:a8:67:3f:59:8a:39:4e:cb:
5a:04:f3:3e:eb:81:13:72:e9:43:bf:58:b2:cf:22:
0a:ea:03:9f:3a:43:af:6e:63:96:c5:46:11:e4:11:
aa:c3:04:bf:a7:73:39:de:ed:73:f9:3a:fb:82:27:
bf:bd:30:11:13:13:22:5c:35:d8:b7:ba:bc:da:47:
ba:e3:f0:cd:36:6c:f7:5b:31:13:e6:55:50:22:56:
9a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:13:61:69:BD:0D:C1:C8:17:47:E1:53:57:B2:70:B1:A9:0E:01:01
X509v3 Authority Key Identifier:
keyid:C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:63:90:ad:fb:f9:b8:ad:67:7c:b3:33:d4:28:d6:09:f3:ff:
b7:04:90:92:d4:bb:2b:d4:67:43:c7:7c:86:ff:4d:70:b9:54:
83:8b:21:fa:9e:2f:25:c8:ab:5a:e1:54:83:7d:76:e3:f4:84:
7b:9a:4a:59:70:f6:33:33:e2:53:76:66:5c:81:61:7a:a5:16:
ac:aa:27:c9:36:54:fd:3f:1e:36:9d:10:b4:fe:c8:ed:7b:ee:
f6:e9:84:05:b4:84:5d:29:3c:77:19:76:16:a5:a2:38:f4:e1:
f5:fa:8f:35:eb:00:a7:26:19:cb:71:ed:a6:4a:45:b8:cd:33:
e4:63:dc:86:74:d0:46:f3:d2:a0:1a:aa:b7:75:b7:80:28:2a:
54:a9:89:f5:7c:e5:f9:c6:83:b6:c3:c5:94:77:e0:e2:5c:d6:
61:63:37:a6:40:59:e7:ac:ae:4a:b4:de:df:63:02:dd:32:93:
1a:d3:36:40:7c:10:34:a8:53:b9:a2:f0:01:83:2a:4c:e9:82:
c0:cd:8a:90:5e:43:08:9c:ee:05:5e:ae:a1:68:b4:0d:a1:d0:
93:fb:88:b7:63:50:6c:bc:64:68:2b:aa:08:49:d2:7f:dc:33:
a6:20:d7:02:cd:46:69:be:09:3c:09:72:60:7e:1c:94:59:ad:
51:2e:00:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:53 2026 by rpki-client