Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
File: xVCFAF0ORJ07r6McXLQp_4nSxLc.mft (raw, json)
Hash identifier: Y56CJ0xtzy1sgfTrSa2DCd4Scbc8kInenlPxfhikhLg=
Subject key identifier: F5:7E:D5:FB:EA:3A:BA:34:86:2B:43:EB:AF:56:20:7A:38:79:A2:0A
Authority key identifier: C5:50:85:00:5D:0E:44:9D:3B:AF:A3:1C:5C:B4:29:FF:89:D2:C4:B7
Certificate issuer: /CN=c55085005d0e449d3bafa31c5cb429ff89d2c4b7
Certificate serial: 019D382DF84C4B4911B9198EDA9CDCBBB36A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 06:00:29 +0000
Manifest this update: Sun 29 Mar 2026 06:00:29 +0000
Manifest next update: Mon 30 Mar 2026 06:00:29 +0000
Files and hashes: 1: AeS4mieXzUqA4uwiNDkMCtqXsxo.roa (hash: XlaYDtDtth/9oxGh0H1TjUe63WNIoo3CA9/O+obTGX0=)
2: xVCFAF0ORJ07r6McXLQp_4nSxLc.crl (hash: VtFbVYiSZZ3rO6ck/05UWoSFLIv0/AJlv5SS0tAk2kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:f8:4c:4b:49:11:b9:19:8e:da:9c:dc:bb:b3:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c55085005d0e449d3bafa31c5cb429ff89d2c4b7
Validity
Not Before: Mar 29 06:00:29 2026 GMT
Not After : Mar 30 06:00:29 2026 GMT
Subject: CN=f57ed5fbea3aba34862b43ebaf56207a3879a20a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:80:d2:8c:3a:84:75:1b:b7:2b:5f:cf:8e:b9:
b0:2d:3e:8d:9a:33:2c:6b:bc:8a:7c:a9:f7:2b:f6:
a1:b1:f7:60:99:c2:fb:9c:14:13:51:df:3e:96:91:
b0:88:c2:47:5d:63:bc:2f:c6:e7:7d:92:4a:51:71:
c5:72:d1:ef:09:5d:5b:7f:d4:0b:ad:0b:9d:10:90:
4b:24:99:32:59:36:48:51:bc:82:47:a8:4a:0b:a4:
51:b2:15:4d:8c:21:57:88:60:2a:64:1e:70:40:e3:
84:c8:7e:9c:b4:70:3c:11:5a:98:d5:1b:09:1f:ba:
97:e3:6e:91:f5:c6:1a:39:14:9b:07:23:44:9c:0d:
c2:f4:95:2f:50:e4:5a:d6:12:d4:f8:08:e6:66:37:
e9:a6:1d:af:6f:31:74:0f:39:df:5e:4f:a5:38:a0:
4c:e1:d0:99:43:bf:ce:3d:4b:fe:d1:79:9d:98:a8:
a8:36:25:3c:6b:38:ab:b6:74:f3:8f:0a:8a:db:be:
8f:f7:4b:33:e9:83:b9:f7:40:0f:52:0c:9f:72:36:
6b:7c:1e:1e:18:6d:8d:2c:ef:62:90:b1:c1:80:7f:
27:84:ec:0f:30:30:a6:f4:19:a9:31:6c:4e:61:3a:
72:1e:0b:f0:f6:50:4b:9f:b6:e4:ae:66:1b:cd:20:
4a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7E:D5:FB:EA:3A:BA:34:86:2B:43:EB:AF:56:20:7A:38:79:A2:0A
X509v3 Authority Key Identifier:
keyid:C5:50:85:00:5D:0E:44:9D:3B:AF:A3:1C:5C:B4:29:FF:89:D2:C4:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:9f:69:a9:92:09:83:fd:b4:f4:9c:7b:a6:c5:b6:73:74:1a:
10:7b:a0:d8:a1:dc:f3:38:73:13:9a:2c:e3:f9:93:ac:16:67:
7c:b6:69:8a:6a:03:38:99:18:a1:bd:7f:a8:ee:34:20:a7:a3:
53:64:af:b6:07:92:70:64:af:10:82:4d:ef:63:ea:d9:33:fc:
a4:4f:87:88:d5:3f:08:f1:8c:b5:40:d5:a6:a2:f6:52:6f:9e:
3b:99:4f:15:4e:2f:d5:f9:f8:fb:35:d9:f0:e8:3d:6b:13:a8:
52:52:79:14:64:a2:c8:7f:bc:5f:fc:cd:b4:04:e4:31:b9:94:
4b:7e:0f:4a:3a:21:99:e0:95:ac:0a:a1:f4:1f:d0:01:d4:e6:
0d:d4:6f:3b:3d:f8:f9:c2:8d:a5:1b:21:ff:5f:3f:4b:b8:c4:
a5:4c:fd:38:e3:45:78:7a:a0:a8:e0:2e:87:07:66:68:63:5f:
63:c3:c9:b4:d6:c7:fb:db:7c:b3:d7:33:51:c3:53:05:fe:83:
72:99:44:84:58:1c:65:ff:01:7a:a5:a7:e5:8a:06:05:56:e9:
05:6f:a5:ae:cc:18:ce:0c:1b:c4:9b:65:9e:c8:65:3a:d7:98:
2c:2b:f2:65:68:09:0a:c3:bf:14:20:10:8f:ec:66:84:b0:08:
b9:18:6c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:26 2026 by rpki-client