Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
File: xFvSa8XYHu6cjhotDXjRDarggZU.mft (raw, json)
Hash identifier: MLSRiULAz6cf4M8J3xcH7VjsJLKDmALF08TEUlZtsl8=
Subject key identifier: 5C:23:B1:F7:E2:EE:AD:BA:19:B8:D2:72:A3:48:1E:CF:26:74:B7:18
Authority key identifier: C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
Certificate issuer: /CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Certificate serial: 019D284E34D7368317D00F8FB81F545D8427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 04:01:47 +0000
Manifest this update: Thu 26 Mar 2026 04:01:47 +0000
Manifest next update: Fri 27 Mar 2026 04:01:47 +0000
Files and hashes: 1: FX91S7TqeS_5eNXFwkhAJLeDMDY.roa (hash: 7/g0n2srHScQb2lUJNavUfjGDwgVOP/uF61M1Zy+4aU=)
2: xFvSa8XYHu6cjhotDXjRDarggZU.crl (hash: rQQsbU8WqvAmcNkpk86paKDVe2J1/ov5rANlhYxvqjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:34:d7:36:83:17:d0:0f:8f:b8:1f:54:5d:84:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Validity
Not Before: Mar 26 04:01:47 2026 GMT
Not After : Mar 27 04:01:47 2026 GMT
Subject: CN=5c23b1f7e2eeadba19b8d272a3481ecf2674b718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:59:81:29:9d:55:bf:f5:54:53:e0:eb:06:de:
3b:72:43:74:6a:19:fa:b9:c2:1b:9a:5c:85:df:12:
35:ea:09:07:a0:ca:85:27:6a:22:ac:b0:26:fb:33:
5b:0a:1e:76:52:57:88:4c:60:3d:8d:76:48:24:9f:
a9:6b:f1:89:5c:be:52:c6:31:02:23:eb:c0:e8:cf:
1c:7b:42:6b:91:78:e6:4d:d9:87:f6:f4:53:60:11:
fe:2d:6e:5f:00:67:e3:aa:3e:d2:19:f3:fa:84:4a:
86:5b:87:82:5a:02:7f:8e:8c:54:6a:05:8b:ad:9e:
62:cd:be:a1:dd:ec:a4:13:c3:fc:69:51:e0:94:2d:
aa:92:53:59:77:a2:9d:2d:6f:29:63:a5:5a:88:33:
44:31:f8:14:b1:db:74:10:77:24:c9:ea:85:32:07:
23:3c:cc:21:13:5b:99:28:72:cf:cc:a4:03:f5:f5:
24:b1:4a:cb:d6:f8:f0:6b:45:d9:e0:79:be:92:e1:
dd:66:15:ba:68:19:a3:91:77:6c:36:a1:d3:d8:a0:
f7:48:8b:eb:a9:13:cb:1d:a2:9b:95:f7:b3:b1:7d:
5b:90:f6:5c:e1:c2:0c:c1:64:2d:eb:02:f6:90:9f:
48:51:bf:22:2d:cd:ea:05:bc:2c:27:4d:6e:62:01:
1b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:23:B1:F7:E2:EE:AD:BA:19:B8:D2:72:A3:48:1E:CF:26:74:B7:18
X509v3 Authority Key Identifier:
keyid:C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:0b:dd:df:34:51:7f:43:0e:ff:4b:98:f0:6c:92:2c:05:42:
e1:22:ff:b3:ae:7d:e5:cf:cb:68:83:0c:b4:da:5d:36:f5:32:
7d:90:c9:61:c6:bf:3f:9f:5d:94:85:ed:8e:00:13:81:c6:87:
6e:c9:df:fe:9b:91:70:d0:fa:0b:87:f0:12:d7:96:40:40:a5:
ce:58:34:72:cc:23:51:da:20:1c:05:a9:f7:1c:c7:b3:ce:ad:
d2:ca:81:6e:d3:f0:7e:1c:a0:fb:a4:fa:e7:c3:92:19:cf:50:
a8:67:90:45:b2:b7:d8:ce:09:e5:ab:ad:20:4c:28:90:87:9e:
81:c5:cc:5c:9a:7b:bc:3a:8a:b5:9a:57:0c:ba:f7:29:44:87:
22:a0:8a:9d:94:64:c3:de:32:5a:d4:7c:03:0d:1c:00:67:56:
c6:e3:0f:58:59:1a:22:6a:57:03:cc:67:72:01:49:e4:86:f3:
d1:f5:27:db:80:da:49:88:e6:2e:e2:15:17:6a:27:71:c9:a9:
e1:00:9b:95:4f:61:39:34:d1:f0:3f:b8:7f:da:ef:df:46:0b:
01:67:40:92:4b:1f:98:2d:b8:35:a9:90:0b:f9:e5:7f:48:70:
41:01:c9:f5:f8:95:38:6d:4a:b0:35:d2:c8:99:f3:91:7e:4d:
79:98:05:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:50:07 2026 by rpki-client