Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
File: XfEaGA3xeZTkitMxhyz9AK2augQ.mft (raw, json)
Hash identifier: pI4+oAWfV7U16ipeApxraTEKmnf8figL6uq+Sq8zI7w=
Subject key identifier: E1:0C:4D:88:44:1B:2C:C5:71:04:4D:33:E3:F5:22:01:93:C5:E4:2E
Authority key identifier: 5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04
Certificate issuer: /CN=5df11a180df17994e48ad331872cfd00ad9aba04
Certificate serial: 019D37C069C22D001738BA27FE828AA62F9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 04:00:49 +0000
Manifest this update: Sun 29 Mar 2026 04:00:49 +0000
Manifest next update: Mon 30 Mar 2026 04:00:49 +0000
Files and hashes: 1: XfEaGA3xeZTkitMxhyz9AK2augQ.crl (hash: ZVHtpfU9bW+fFxpLAGB2c2FvEDaUjfvVmAeJ0fU5f8k=)
2: vOvUH4QL3euA8n5Zs-p3s8pu5OU.roa (hash: qqJCGshMa7lPJa7oCp0UWM6NmrUrD8W4y4uDd4fxLLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:69:c2:2d:00:17:38:ba:27:fe:82:8a:a6:2f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df11a180df17994e48ad331872cfd00ad9aba04
Validity
Not Before: Mar 29 04:00:49 2026 GMT
Not After : Mar 30 04:00:49 2026 GMT
Subject: CN=e10c4d88441b2cc571044d33e3f5220193c5e42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c3:f6:eb:f9:34:4a:83:11:ac:b1:81:cb:27:
25:6b:68:2b:27:34:fb:eb:20:a4:03:1b:f9:d7:05:
bf:31:79:20:b1:c5:45:ff:1d:68:bd:28:3e:c5:f5:
33:b7:a8:4b:97:8a:a5:12:c7:29:69:ca:6b:9b:6e:
e5:ee:a8:c7:28:5d:56:16:d2:d9:e5:6c:06:b1:46:
27:70:7b:ed:49:e8:7e:9b:fe:db:c1:0d:c0:d2:e0:
b3:3d:34:b5:6c:28:7c:8d:86:65:ab:fb:b6:92:20:
62:d0:94:8b:11:ac:ff:c4:22:4f:80:37:f6:f8:a0:
79:cb:a5:3e:14:37:db:31:ee:d7:56:53:88:7b:92:
f8:ac:83:e9:b7:ca:71:44:46:3b:08:fe:0b:42:46:
1c:9a:71:8e:aa:f7:eb:29:13:03:dd:d2:1c:a6:e7:
91:bf:83:e7:26:2a:66:d8:94:cb:b6:c1:64:97:6f:
2e:e8:33:53:40:ae:01:a5:0c:d2:e3:c9:1b:d9:38:
2e:7d:ae:04:5f:68:41:72:fb:b9:31:a0:3b:b3:ff:
ca:b1:97:a6:e8:99:d3:e1:45:ed:1d:1e:33:20:b4:
c7:9e:dd:1e:c2:03:40:88:eb:6c:bd:9d:f9:f2:85:
1c:db:8c:02:a5:e4:67:92:d8:df:b4:fe:d1:74:b1:
1f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0C:4D:88:44:1B:2C:C5:71:04:4D:33:E3:F5:22:01:93:C5:E4:2E
X509v3 Authority Key Identifier:
keyid:5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:17:27:e0:f9:40:b9:ca:ff:34:79:0a:2c:7d:fc:a8:a0:2b:
9e:a9:77:ce:78:51:c1:00:54:9f:54:f4:59:79:95:7b:21:ce:
27:36:47:fb:1d:b1:b6:9a:78:cb:32:d1:34:b9:c2:c1:a3:a7:
1e:02:2c:4f:ea:56:0b:dc:ab:a9:b0:b6:b0:6e:67:0c:0a:80:
63:64:0e:7e:da:d2:a3:6e:de:a7:c8:d6:5c:13:71:df:3e:ad:
84:18:73:3d:8d:4c:c3:31:8c:61:31:c6:91:b0:8a:65:c9:99:
43:34:a2:06:31:aa:a1:4a:e3:47:f9:d1:a7:1d:d0:d6:2a:b7:
a0:11:0f:72:39:6e:9b:f7:1a:2b:bb:e3:95:5f:cd:f6:67:20:
c8:ed:58:1a:34:57:8c:b9:2e:f3:3b:11:86:b6:04:38:28:55:
d2:ee:a8:fe:6b:50:c7:fe:b6:19:6b:f6:a7:37:8a:74:ef:69:
9a:f2:a6:95:34:3f:2d:b0:80:40:3f:5d:80:b8:62:07:f4:ff:
3e:6f:73:7f:ca:db:34:8d:09:49:00:e4:5f:03:0e:a2:98:d0:
eb:9f:fc:d4:12:26:33:e4:31:37:51:eb:e9:bc:11:f7:04:6e:
76:b4:62:35:13:da:e6:f6:ea:32:33:48:fd:bc:1e:d9:52:cb:
c8:26:4c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:23 2026 by rpki-client