Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
File: xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft (raw, json)
Hash identifier: gTMcJGcuVQy6A81A3BGlqi22Zs9tiu2CL+keIisyizQ=
Subject key identifier: EC:04:96:A1:8E:A4:09:A3:83:A4:07:B4:49:34:92:44:A1:F2:4D:42
Authority key identifier: C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C
Certificate issuer: /CN=c50c97eb9baf5428f50f45d330357678b73e061c
Certificate serial: 019D29CE0BC0702BBB35E546FBEB15A42B28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 11:01:02 +0000
Manifest this update: Thu 26 Mar 2026 11:01:02 +0000
Manifest next update: Fri 27 Mar 2026 11:01:02 +0000
Files and hashes: 1: 3cbC9vEeA_OfonVqz4nPVMIodpI.roa (hash: IGj7kwjiWovmIKkao+Fqphubf76yFz/hI4+0oTX7zU8=)
2: HRkMr8-Sqbu9H440GtqWqBMvrRY.roa (hash: u8W2AOx3ZvteH41TI9EbqMt/z7mq+kc+OzabEJ0zUCM=)
3: wemV0d9_X9NASzk5HBev3Xd67ss.roa (hash: xfH5MjrkqijIT96yucgZV5bkcjqDyV5OtrwCabRA68Q=)
4: xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl (hash: DtuKtxXOYPuw1m8wZKcHm0qeMMrvjh4Io7vvQurYlNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:0b:c0:70:2b:bb:35:e5:46:fb:eb:15:a4:2b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50c97eb9baf5428f50f45d330357678b73e061c
Validity
Not Before: Mar 26 11:01:02 2026 GMT
Not After : Mar 27 11:01:02 2026 GMT
Subject: CN=ec0496a18ea409a383a407b449349244a1f24d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:07:43:f3:8c:75:69:59:e5:bc:1b:c6:ac:77:
4b:66:23:3d:6b:c7:1c:9a:f7:50:84:c0:1a:fd:e8:
20:8c:95:4f:d2:51:de:61:46:15:9e:ee:51:b9:47:
9b:fb:48:b0:0b:e1:78:5e:29:3a:d7:a1:31:5f:09:
9c:2d:83:b8:1c:86:14:96:b7:cb:a6:68:d3:fc:a5:
76:c2:73:50:4c:dd:aa:c7:94:3e:8f:c9:49:87:5b:
d8:9c:da:ef:b6:ff:1c:ba:9a:e0:be:5c:66:2b:5e:
56:62:0f:0d:f1:55:75:75:4c:41:ef:a2:59:14:5f:
23:5b:7a:d1:e0:78:32:a3:18:ff:7d:48:0c:63:27:
25:c9:9d:dc:c4:b1:bd:42:db:b4:7c:93:49:11:ff:
08:43:17:ee:83:08:35:d2:8c:c6:7b:04:ee:8e:37:
40:83:ce:9d:d1:2c:40:4c:f8:dd:da:ce:e0:ae:df:
cc:b1:a5:13:14:d0:98:3e:89:1a:be:2d:7b:0f:0e:
80:98:74:c5:29:d7:a4:67:c3:fe:36:0b:a1:94:c8:
b0:83:df:f7:90:ce:fa:d7:a6:62:ae:10:31:31:f3:
7e:f2:48:6d:e1:d8:d9:c8:9c:be:bd:a5:0c:45:92:
61:03:14:dc:3f:94:a9:06:2f:bc:b9:be:77:6e:04:
79:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:04:96:A1:8E:A4:09:A3:83:A4:07:B4:49:34:92:44:A1:F2:4D:42
X509v3 Authority Key Identifier:
keyid:C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:6b:28:c4:9a:fd:16:0e:bb:06:dc:b7:6a:9b:a4:b4:1a:98:
40:65:1e:76:48:f8:95:ea:82:28:b2:63:04:9a:ab:ee:3d:0c:
6e:56:3a:b3:6a:bd:72:df:6e:9c:7b:36:de:f3:7c:9f:bf:20:
9e:10:c8:7f:ef:12:05:0b:56:85:21:65:ac:ef:fb:50:57:08:
4f:9e:ed:ee:4a:b6:f8:6a:e0:3f:60:e2:58:42:37:d0:29:95:
d2:18:6d:1a:c3:6b:2c:80:e4:81:cb:a7:fd:54:bf:54:f2:58:
db:18:f6:09:ae:c2:b2:b1:a9:5e:0c:d3:9c:01:72:53:fc:e4:
57:fa:64:ef:31:44:b8:36:73:db:4e:ec:39:4e:de:af:44:83:
e0:5e:af:f9:80:63:9a:ca:f3:c4:d4:da:80:96:ea:d6:3a:7b:
16:85:b9:56:3a:4b:71:f4:1d:81:f5:ea:20:b7:ca:d6:34:a1:
30:53:eb:45:12:16:c9:d9:6e:77:8c:97:b0:c0:88:e8:d9:ba:
80:af:d6:54:05:f5:a3:ae:fd:13:8f:34:d2:30:d7:49:81:0c:
9c:40:9c:64:f5:3d:e3:f6:02:72:c2:58:8e:eb:34:66:26:c3:
a1:7c:3a:e5:82:eb:9a:f0:71:00:1a:e8:aa:1c:64:f7:c3:0c:
26:f1:c5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:03:39 2026 by rpki-client