Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
File: xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft (raw, json)
Hash identifier: 7qE9tcSfLvb1jVuLEckr934sYDPQKVml5iiGWj36OoA=
Subject key identifier: A0:01:E3:A3:C7:A2:45:19:F8:4D:93:B5:87:0B:30:C2:14:5D:6B:B1
Authority key identifier: C5:CD:CE:32:AD:C6:2A:FB:77:E4:31:86:CF:7C:2C:07:1E:42:B7:BB
Certificate issuer: /CN=c5cdce32adc62afb77e43186cf7c2c071e42b7bb
Certificate serial: 019D29616CE5A92CA7E2DD2D1DE06B45A4CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
Manifest number: 0EA0
Signing time: Thu 26 Mar 2026 09:02:23 +0000
Manifest this update: Thu 26 Mar 2026 09:02:23 +0000
Manifest next update: Fri 27 Mar 2026 09:02:23 +0000
Files and hashes: 1: 4Kxd8dm-CWu1jCIsUqmZWt5sIc4.roa (hash: RVAhzYMBRgQ2W1wIbtL6Kztr89B+xTCwvr6xBM79OwQ=)
2: xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl (hash: bdwP9Ggch2rZfy1bZb3PivdsS6pq4jL9tGxXJmSaZzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:6c:e5:a9:2c:a7:e2:dd:2d:1d:e0:6b:45:a4:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5cdce32adc62afb77e43186cf7c2c071e42b7bb
Validity
Not Before: Mar 26 09:02:23 2026 GMT
Not After : Mar 27 09:02:23 2026 GMT
Subject: CN=a001e3a3c7a24519f84d93b5870b30c2145d6bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ef:60:08:37:a4:c4:67:ce:80:e6:ee:ad:dc:
bb:5b:01:eb:72:5e:5c:d5:0f:7b:b1:01:fe:ce:61:
14:92:1e:2b:90:07:90:94:1c:c9:ae:65:42:41:2d:
4a:ca:01:d9:20:95:cf:5f:4b:b8:2d:99:f2:b1:30:
2d:df:61:2d:d2:8a:4d:dd:3f:18:26:63:9f:65:9d:
38:5c:a8:ac:ad:47:24:cc:2b:22:90:6c:4e:ea:7e:
8b:60:73:4f:34:2b:a7:ff:c5:a7:4e:48:ff:51:75:
3f:a1:69:a9:0e:96:1a:91:37:d2:69:59:92:49:97:
55:7b:dd:3f:9a:c3:b5:4a:c7:a9:fc:5b:1a:5e:b0:
54:2b:0b:39:70:9e:c3:13:70:b2:75:ef:95:25:b4:
3b:35:97:0f:ac:e5:2e:ff:44:73:4c:04:14:6b:6d:
22:f0:49:49:ce:40:56:b7:20:61:1a:e0:9d:2b:22:
fc:89:80:86:4d:d5:d4:b7:cd:f2:83:62:68:f4:59:
a1:53:87:0f:8d:41:eb:1b:f9:ce:4b:6e:85:ef:7b:
ff:95:c8:0e:45:33:41:e0:2c:67:3b:41:73:d0:76:
af:ef:05:4a:b8:2a:d4:2f:4d:a2:cb:56:7e:36:a6:
4a:1b:89:d1:8f:27:3c:6b:43:2a:32:32:97:70:21:
6c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:01:E3:A3:C7:A2:45:19:F8:4D:93:B5:87:0B:30:C2:14:5D:6B:B1
X509v3 Authority Key Identifier:
keyid:C5:CD:CE:32:AD:C6:2A:FB:77:E4:31:86:CF:7C:2C:07:1E:42:B7:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e5:93:62:09:9b:a1:74:75:58:0b:97:46:f8:b4:5a:36:20:
e3:80:c7:12:b0:f5:82:2c:83:b7:1b:b7:dc:c2:e9:00:15:db:
33:5e:46:4a:b6:ba:b5:f2:8f:80:86:28:bf:56:de:55:c0:29:
48:0e:36:b7:36:70:bf:d0:28:a9:a3:f5:ed:19:f6:65:39:94:
03:77:b1:d5:07:a4:fa:86:69:3b:07:21:49:4d:39:bb:87:ea:
3f:24:50:5e:5a:30:7e:58:60:70:73:3f:f9:9a:d8:6f:66:0d:
4a:ec:c6:b5:02:96:6a:0e:51:1e:3b:1d:70:45:c8:e4:32:f3:
41:97:8e:14:79:df:ad:94:28:f4:4b:5f:79:8c:bf:10:6f:aa:
aa:79:4d:90:ee:b3:a0:7c:a1:91:38:e9:48:fa:1a:39:7c:fa:
03:2f:aa:e1:56:60:00:d5:c5:a0:92:4f:86:36:d3:21:51:56:
5d:d5:52:26:e8:c6:36:21:3b:2f:02:19:44:29:f8:7a:f2:88:
ca:63:0d:90:03:9d:68:da:d6:5b:09:51:e0:46:97:c9:92:b2:
c7:fb:76:f1:ad:4a:47:20:96:c1:1d:90:64:75:2a:f9:45:63:
f5:c2:43:57:f2:d6:1a:99:db:65:29:80:2c:82:df:ce:40:54:
ef:b5:f7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:00:26 2026 by rpki-client