Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
File: xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft (raw, json)
Hash identifier: rxp+mZ/CTWzYu8LW1dCa9cWDzWRxo3XEZ95g+5EDYBU=
Subject key identifier: 40:B2:78:65:C6:D1:97:87:82:67:7F:A2:23:8B:AC:8C:C6:05:82:D3
Authority key identifier: C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
Certificate issuer: /CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40
Certificate serial: 019D2CCF0F46A52C3049C83A457283946A7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
Manifest number: 188B
Signing time: Fri 27 Mar 2026 01:01:00 +0000
Manifest this update: Fri 27 Mar 2026 01:01:00 +0000
Manifest next update: Sat 28 Mar 2026 01:01:00 +0000
Files and hashes: 1: Z4BDlr57O_FweazPHma0rDQN-Eg.roa (hash: RRUvm/U5FkAyaYrRTEjgZo8457PWupRX0eiUbSuUq0U=)
2: xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl (hash: LrJtEU94db9ilU0/84XxmtA6hKXx5E4PWaDLhx7WMi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:cf:0f:46:a5:2c:30:49:c8:3a:45:72:83:94:6a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40
Validity
Not Before: Mar 27 01:01:00 2026 GMT
Not After : Mar 28 01:01:00 2026 GMT
Subject: CN=40b27865c6d1978782677fa2238bac8cc60582d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:99:8e:97:ce:45:63:f2:26:18:16:15:8d:8d:
c6:14:79:99:a0:72:c7:99:e5:7a:ef:e9:21:d2:4d:
13:8f:96:68:2d:61:28:92:36:dd:3a:c8:c0:5c:16:
60:29:5d:4f:9f:99:8a:ca:37:ba:1e:e2:97:38:b7:
af:c9:e5:79:59:3e:ea:7c:81:0c:c7:72:fe:17:d7:
dc:fa:47:55:1b:b7:45:dd:42:9e:7a:57:02:7a:79:
d0:b8:8f:b6:01:d6:44:fe:81:d5:99:2e:e0:b2:47:
bf:47:fe:ef:d8:fa:22:f2:83:f5:58:4a:f5:44:46:
32:6c:d7:e8:94:4d:32:1a:ad:ce:62:fb:62:16:de:
f8:25:87:33:7e:6b:81:91:03:24:a7:f8:57:1a:59:
55:dd:bd:86:30:c0:00:17:f7:9c:1a:83:70:b7:b6:
a5:ba:a5:5e:2e:11:95:e8:d7:f3:a7:76:15:c6:1e:
8e:bb:82:cb:d8:5c:dc:53:b5:75:a6:2e:18:cb:5d:
aa:82:22:3f:71:b3:e9:71:12:5a:50:13:e9:d1:1c:
ff:c5:9b:91:04:60:e8:98:b2:bb:2a:28:be:92:a8:
13:6f:58:ff:23:94:cf:5b:26:12:02:78:53:8f:06:
0c:4c:4e:70:4a:c3:b2:f6:18:8f:8f:28:4e:31:9e:
b6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B2:78:65:C6:D1:97:87:82:67:7F:A2:23:8B:AC:8C:C6:05:82:D3
X509v3 Authority Key Identifier:
keyid:C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:7f:9a:bf:c7:1d:fe:79:9e:55:cb:4e:e0:b8:f1:60:14:da:
50:93:c8:c8:34:55:61:27:9b:38:dd:d0:1a:55:4b:f5:bb:bf:
4b:33:bb:81:d9:8d:24:fa:26:13:c6:f3:d6:d7:9e:0f:7b:cc:
7c:ff:ba:a1:09:81:94:38:3b:24:54:b0:79:45:b2:ba:d4:24:
9a:de:65:34:a4:b8:88:5f:49:57:53:e1:11:77:19:c3:13:3b:
4a:b6:05:57:62:67:fc:d6:13:fa:8e:3d:aa:c0:41:08:55:52:
a9:05:81:50:45:21:b2:22:e3:a7:45:f8:ea:44:37:24:6d:05:
cf:f5:15:00:d5:ac:1a:0f:6c:34:e8:3f:bf:f6:f1:a4:17:d2:
00:35:71:a8:74:13:1e:3a:0b:6c:0f:f4:34:28:e1:5b:1f:43:
1f:08:30:9a:c1:5c:79:6d:af:f2:e9:e3:14:86:0d:86:99:ce:
f2:06:74:8f:c9:cd:b4:a0:86:e3:1b:b2:eb:6e:18:69:40:e5:
85:66:ad:e1:5a:01:f5:0e:33:f5:27:16:ac:ba:11:e6:1e:c0:
ad:7b:06:b7:d9:96:d4:f0:6a:2d:45:cf:70:0b:75:29:4d:cd:
76:01:ed:d1:52:58:82:23:58:66:62:25:cf:4b:a0:f7:8e:4c:
bf:2d:73:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:26:20 2026 by rpki-client