Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.mft
File: xBOLshC3wajwZm4HWfR18AZN8fc.mft (raw, json)
Hash identifier: 97FTIOYESDIpMJUH4IYU59IzFUHKXXpzxE3DX6PgLSU=
Subject key identifier: E0:22:BD:27:84:63:B8:03:03:A7:6D:6A:FB:DC:00:54:0B:A7:7F:FB
Authority key identifier: C4:13:8B:B2:10:B7:C1:A8:F0:66:6E:07:59:F4:75:F0:06:4D:F1:F7
Certificate issuer: /CN=c4138bb210b7c1a8f0666e0759f475f0064df1f7
Certificate serial: 019D2B4DFC1CD691204BFAEBC54CC3252957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBOLshC3wajwZm4HWfR18AZN8fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.mft
Manifest number: A1
Signing time: Thu 26 Mar 2026 18:00:24 +0000
Manifest this update: Thu 26 Mar 2026 18:00:24 +0000
Manifest next update: Fri 27 Mar 2026 18:00:24 +0000
Files and hashes: 1: 7h5eSPNlffr_391YlxjHN1ItANQ.roa (hash: XEuG2vwGeCYbNa542z5LaRxd5TGJ34KJdQn28qGEDr0=)
2: KiNMgdfJ-jED44ngYXhsk4y4eUo.roa (hash: a7w7sWRkPS/IylXEpEG2ZktzWT1XLIn8MRkkpzcobUA=)
3: xBOLshC3wajwZm4HWfR18AZN8fc.crl (hash: Hgnmm83E3v04NNDUJhASBVcSKsqDZy3DYCUqb+xojtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBOLshC3wajwZm4HWfR18AZN8fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4d:fc:1c:d6:91:20:4b:fa:eb:c5:4c:c3:25:29:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4138bb210b7c1a8f0666e0759f475f0064df1f7
Validity
Not Before: Mar 26 18:00:24 2026 GMT
Not After : Mar 27 18:00:24 2026 GMT
Subject: CN=e022bd278463b80303a76d6afbdc00540ba77ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2b:30:d6:98:0e:e4:d6:f0:28:e9:4a:e1:76:
f7:f9:f2:a8:22:47:97:e6:1f:5c:30:44:f1:a3:9c:
13:de:74:6f:e3:73:44:8a:6d:99:11:9a:96:6a:e0:
9e:e8:d2:46:6e:a3:92:09:6b:6a:01:9a:41:10:12:
e5:c2:03:34:74:54:0c:10:a0:fa:12:11:16:94:e4:
5d:69:cd:58:68:27:e6:91:b5:bb:01:3c:93:c0:53:
38:4f:7c:a2:85:ab:c4:e1:f2:ff:07:88:fb:7e:13:
63:b3:92:e8:59:f9:9c:ff:80:df:41:34:41:de:46:
5c:8a:a0:93:2a:2a:a1:29:7e:b4:ca:b6:16:20:7d:
d9:40:2a:62:66:14:6f:0a:d7:6e:ec:0e:9a:04:4c:
bd:35:fd:98:63:a6:33:a4:32:e1:bb:b4:30:eb:90:
b1:44:db:dd:86:35:a3:04:bc:42:0f:01:65:31:ce:
24:fa:63:23:da:cc:49:c8:7e:93:e4:13:a5:58:f8:
9b:0d:a7:b1:12:74:7f:76:30:ee:05:29:82:91:01:
68:1a:2b:7c:a7:31:bb:d1:49:90:c4:71:ba:7a:fc:
4c:b3:22:94:8d:0d:b3:3f:34:e0:ed:bd:c6:6c:d9:
5e:5e:29:cc:f3:72:22:49:0f:29:5c:19:58:71:40:
c4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:22:BD:27:84:63:B8:03:03:A7:6D:6A:FB:DC:00:54:0B:A7:7F:FB
X509v3 Authority Key Identifier:
keyid:C4:13:8B:B2:10:B7:C1:A8:F0:66:6E:07:59:F4:75:F0:06:4D:F1:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBOLshC3wajwZm4HWfR18AZN8fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:ff:91:72:aa:8f:48:50:69:cb:6d:64:c4:25:a1:7a:8f:ca:
22:9e:ec:a5:88:c0:b4:7a:58:10:4d:6e:a5:e5:b1:66:b8:5f:
52:b1:87:1a:28:2d:7e:d9:55:52:10:a9:d3:6f:5d:7a:e7:5c:
92:3c:1e:51:01:fe:cb:5f:c0:3a:88:1f:c2:ea:60:cf:26:54:
f4:be:e5:9b:9e:f9:a5:c2:92:bc:ea:3f:c5:f9:16:19:26:16:
e1:be:5d:ab:35:b7:38:63:93:7b:f5:58:04:b5:4f:ea:de:ad:
17:93:38:bd:f2:1e:d3:ab:11:ac:34:4f:07:4e:e5:a4:5f:f0:
c8:17:5e:10:7b:59:82:af:30:28:4b:01:80:32:b4:e9:6f:b7:
3e:ae:4f:d3:06:3a:1c:3e:2e:25:fd:da:e3:1e:9e:e5:f0:56:
d9:10:7e:33:63:83:60:88:a9:fb:87:f7:de:18:15:cc:21:88:
59:51:75:6f:64:a8:41:97:4e:47:b3:18:14:ca:97:d0:d1:6f:
47:da:52:cd:48:72:0a:04:e2:f5:f1:53:e7:f6:5e:a1:35:9f:
77:96:b4:ca:19:a4:0c:8b:20:83:a6:f6:b6:a4:5c:f8:8d:38:
cd:8d:08:a0:22:7c:61:c0:32:92:97:99:65:77:75:88:01:d4:
17:97:03:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:07:11 2026 by rpki-client