Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
File: xMAyk16WM9-LGZJd8L0luBxoY7c.mft (raw, json)
Hash identifier: QBEaZRB4GNr6hRF+kJYYGJbTqpd1Iar9WKHLHob9WlQ=
Subject key identifier: DF:73:F5:69:5D:10:52:5B:7D:76:31:56:1B:85:B8:BE:A6:E6:91:A5
Authority key identifier: C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7
Certificate issuer: /CN=c4c032935e9633df8b19925df0bd25b81c6863b7
Certificate serial: 019D273AFBE4F70C083B64202716FC4BA0BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 23:01:10 +0000
Manifest this update: Wed 25 Mar 2026 23:01:10 +0000
Manifest next update: Thu 26 Mar 2026 23:01:10 +0000
Files and hashes: 1: tXhKuNb4B-Nkw-Ko0kv7aBe86Mo.roa (hash: nAgAkoHpMUFVWXw/y+ljVkLkx6oi2l2uF+ZlnoJC4s8=)
2: xMAyk16WM9-LGZJd8L0luBxoY7c.crl (hash: Ss6JCVQDj0kR0Yl4a01ZZE4Su1ADYmqnfkXSFWrfzE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:fb:e4:f7:0c:08:3b:64:20:27:16:fc:4b:a0:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4c032935e9633df8b19925df0bd25b81c6863b7
Validity
Not Before: Mar 25 23:01:10 2026 GMT
Not After : Mar 26 23:01:10 2026 GMT
Subject: CN=df73f5695d10525b7d7631561b85b8bea6e691a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c7:80:ea:ab:1a:02:5e:1b:03:68:c6:23:e3:
82:e5:1a:b5:9c:6b:33:08:89:42:c0:75:e5:e6:67:
22:8f:c1:4c:28:b8:bb:aa:b0:8f:1e:21:19:f7:7c:
f9:4c:df:e5:6b:6d:18:e4:6f:9c:a3:4a:e6:9e:de:
62:ba:7d:78:95:d9:29:3b:6c:38:17:97:21:6e:73:
57:ff:75:01:92:77:6f:96:2c:60:1b:71:6c:21:9b:
e9:cc:5a:23:f3:88:a6:0a:6c:e4:f3:05:82:72:00:
df:ef:d4:bd:82:e3:f1:68:9d:04:47:a1:08:f4:22:
ad:2c:39:c5:08:76:4f:12:db:c5:1b:15:d4:8b:ce:
34:38:c9:93:a4:f3:74:04:0b:e9:00:c8:bd:f0:ab:
0d:7d:11:55:aa:22:51:e7:bd:fc:5a:02:9d:4d:be:
78:24:75:7d:c8:d7:0d:4a:6d:0f:32:d6:f8:a8:f7:
f9:0b:28:7e:1d:2b:65:49:1a:b9:b5:d2:42:88:98:
3c:48:4e:f1:ad:12:85:5a:62:32:e5:fd:28:b2:a4:
aa:1b:1c:41:19:9f:fa:3b:1d:78:4d:da:6f:59:3d:
8b:5e:72:9f:b2:c5:99:10:9c:79:65:92:21:48:a3:
fa:a8:8a:50:b7:1d:e1:96:e1:09:48:f4:16:58:4b:
d8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:73:F5:69:5D:10:52:5B:7D:76:31:56:1B:85:B8:BE:A6:E6:91:A5
X509v3 Authority Key Identifier:
keyid:C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:58:8c:84:33:c9:a6:16:c5:5d:10:77:14:20:96:45:08:3d:
1c:d3:74:16:23:7c:54:39:6f:fc:50:e1:be:07:ae:43:42:70:
c1:f5:c9:32:57:29:0c:34:a3:57:77:15:c2:49:6d:b7:63:d8:
ae:7f:30:96:7f:08:a1:43:4d:ba:4f:ed:02:df:1d:c8:bb:8a:
2a:57:f6:96:e1:80:33:fc:50:ef:cd:a9:31:54:04:71:4a:c7:
f8:16:cd:6c:58:c0:15:b6:bd:01:54:ce:90:70:fc:b9:0d:64:
17:1b:24:a5:77:47:72:9e:81:dd:92:47:8a:0f:34:88:14:3e:
fe:42:27:5d:eb:c5:d4:a4:fb:c7:d6:a5:b7:51:04:9f:10:a3:
25:52:a5:1d:dd:ba:91:67:46:6d:2a:47:5a:61:39:03:6d:99:
45:54:df:53:95:2f:fb:a9:0b:75:36:32:e8:04:f9:a1:15:c7:
96:69:2e:c6:8a:61:c1:e7:f3:a3:27:40:3b:83:51:40:3e:f4:
d0:82:f3:d2:b1:88:ad:fc:d6:90:df:62:67:76:c6:b5:10:52:
d2:9a:d3:65:f0:25:cd:92:01:a8:21:33:2b:f3:1f:c7:40:6a:
3e:4b:a0:59:1c:ca:0b:ba:f3:64:05:a1:6e:1d:97:3a:9a:33:
a7:a3:1c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:30:14 2026 by rpki-client