Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
File: xIQvgmL-vSPQE9QKMU2I4lSypUI.mft (raw, json)
Hash identifier: 2mVD9rkkMWz9ZmwK4cmdlyBmlrLFyeuXgO+eIV71XSs=
Subject key identifier: C0:87:75:E4:E4:B7:84:E3:89:18:3B:50:15:7D:E9:B6:89:E9:75:E9
Authority key identifier: C4:84:2F:82:62:FE:BD:23:D0:13:D4:0A:31:4D:88:E2:54:B2:A5:42
Certificate issuer: /CN=c4842f8262febd23d013d40a314d88e254b2a542
Certificate serial: 019D284D853058CAE6233AD8DD6D624C304E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
Manifest number: 07D4
Signing time: Thu 26 Mar 2026 04:01:02 +0000
Manifest this update: Thu 26 Mar 2026 04:01:02 +0000
Manifest next update: Fri 27 Mar 2026 04:01:02 +0000
Files and hashes: 1: kOwA2VMp0-d5NZ8ZjSEsa9A6-fM.roa (hash: ZSmsV9FGmLqKWen++kiAr3q47+GvBQzYyI0Yg4ZwozI=)
2: xIQvgmL-vSPQE9QKMU2I4lSypUI.crl (hash: N38qTEoZzaROQfmWfuHt2MtXgIyW8TyfUazhigiPBgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:85:30:58:ca:e6:23:3a:d8:dd:6d:62:4c:30:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4842f8262febd23d013d40a314d88e254b2a542
Validity
Not Before: Mar 26 04:01:02 2026 GMT
Not After : Mar 27 04:01:02 2026 GMT
Subject: CN=c08775e4e4b784e389183b50157de9b689e975e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:51:77:47:96:fa:12:3c:09:ef:1a:f1:d7:1a:
67:55:ec:a0:e9:5a:45:9c:ed:6a:0d:20:31:f9:e6:
d0:5b:44:bf:3d:5a:22:ca:bc:1f:21:d4:69:5d:9c:
41:38:50:bf:a8:d2:9f:5d:83:7f:32:b1:12:5b:ed:
a8:dc:4e:f0:0e:a1:10:75:2c:52:cc:ed:1b:e7:9d:
ce:3f:24:0c:01:58:40:38:88:52:c3:b9:92:a3:9f:
e0:52:6d:07:ff:58:3a:ec:46:09:90:8d:85:91:fa:
6f:ad:b3:a2:a2:83:89:ab:3f:a0:da:d5:60:a6:d2:
a0:c4:b9:07:bb:fa:dd:68:ca:4c:69:20:71:80:f0:
5b:ce:2e:21:7c:90:5a:eb:7b:f2:88:97:68:ca:b6:
98:ec:55:38:c6:55:9b:f1:f7:94:63:4c:c1:9b:8b:
16:b7:be:ce:c3:77:1e:b3:88:a3:09:26:a8:24:2f:
98:26:21:fb:7c:09:af:48:60:64:57:12:91:8b:f4:
f0:4b:b7:66:1c:4c:37:54:d2:4d:44:2e:6d:61:51:
69:a8:e6:b4:4b:c0:4c:ff:9e:2f:99:1d:c8:80:db:
f1:1e:96:e7:f6:53:05:fb:06:db:4e:e0:32:81:1f:
c8:e9:6b:e6:ae:45:97:5e:15:26:d9:04:1e:cc:c8:
69:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:87:75:E4:E4:B7:84:E3:89:18:3B:50:15:7D:E9:B6:89:E9:75:E9
X509v3 Authority Key Identifier:
keyid:C4:84:2F:82:62:FE:BD:23:D0:13:D4:0A:31:4D:88:E2:54:B2:A5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:9e:c3:11:16:98:1f:0d:54:7e:a6:7f:6b:ab:da:0a:7e:da:
39:3c:1b:0b:c5:83:3d:eb:21:c5:9e:57:e4:26:4d:0f:04:06:
fb:a0:97:8f:97:5e:ef:ca:20:ae:7a:b0:80:01:b4:a4:7f:61:
6d:d9:2b:f8:9a:9f:c0:a2:94:3f:53:7e:bd:e8:b2:bc:5c:41:
0f:69:d9:6c:7e:17:2a:f7:0f:e2:a3:a1:a9:31:29:e2:85:89:
54:fa:74:8f:ce:7d:3b:f2:a7:2a:c4:8c:2d:c5:6d:e3:8c:90:
44:93:86:71:52:c8:11:0b:99:fd:48:d8:45:33:1c:38:eb:f2:
ed:52:b8:ce:d7:a7:09:ac:21:53:14:9a:c0:68:29:32:78:92:
3c:61:a6:4f:11:8e:a1:ec:c9:11:da:5d:93:d7:5f:c7:c2:0f:
10:1b:f2:b2:99:e3:97:b7:63:db:9a:a0:ac:1a:b1:4b:ff:02:
e9:36:f8:41:c3:6b:12:6f:99:54:f5:0f:58:57:4f:69:39:ea:
db:ea:97:1f:9e:56:46:fa:33:d2:f4:d4:2d:e5:50:9f:97:c1:
0d:4d:a0:f8:8b:94:9e:4e:cb:9a:eb:a1:5c:b6:0b:3c:72:08:
38:1b:d3:bd:0d:46:09:85:b6:f4:86:c4:6b:4b:ed:2b:84:bd:
d9:e7:0d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:19:36 2026 by rpki-client