Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
File: xPiLXG5RFuUM8rW99D6HIPHYxg8.mft (raw, json)
Hash identifier: gm6E0F09gkFszWZXp7ncCDmWZ42t8NN+PGRIGzS4DEQ=
Subject key identifier: AB:96:96:63:F7:E1:44:57:64:C3:A2:1F:AE:BC:97:A5:A7:4B:BB:8D
Authority key identifier: C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
Certificate issuer: /CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Certificate serial: 019D382E970FAB2C619240932374D48AF83D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
Manifest number: 1343
Signing time: Sun 29 Mar 2026 06:01:10 +0000
Manifest this update: Sun 29 Mar 2026 06:01:10 +0000
Manifest next update: Mon 30 Mar 2026 06:01:10 +0000
Files and hashes: 1: 02JNfVWYOVA2OBy17TDgR9y7do8.roa (hash: x5I0ROnfJh237cohKlOyZemzpgBQnX/4IqZy8ejhw3c=)
2: 5VBhehblaiOfuUShpivHuAhNqvU.roa (hash: SLWl0V7yJEtG44gZ1JVp2uNJOky4M2j+U4CHDGRdNIM=)
3: xPiLXG5RFuUM8rW99D6HIPHYxg8.crl (hash: ttIYfj5aybQARGlKtZun74/TM8Ghfq4/7qIjSFBHfFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:97:0f:ab:2c:61:92:40:93:23:74:d4:8a:f8:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Validity
Not Before: Mar 29 06:01:10 2026 GMT
Not After : Mar 30 06:01:10 2026 GMT
Subject: CN=ab969663f7e1445764c3a21faebc97a5a74bbb8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d2:b4:31:93:e1:94:51:e1:77:aa:20:b5:53:
85:fb:c7:0b:22:d5:27:1b:8e:52:20:5b:a6:71:27:
ca:c0:89:32:d6:8f:a6:0c:0a:f9:b1:92:a3:f7:38:
de:cd:44:3e:3f:8d:a5:4f:be:2c:f6:3d:40:a3:a5:
23:aa:57:1c:8b:3b:94:b2:58:38:25:6a:bf:6f:df:
b9:49:7d:f7:2f:2f:a8:27:73:65:5e:51:8d:1a:06:
27:06:ba:32:51:b0:54:74:b8:09:1e:36:f8:9a:8c:
e9:9d:ae:27:a4:82:46:e5:57:02:36:e1:f3:66:d0:
bb:eb:94:b5:14:4c:36:ff:3f:ea:a9:14:ed:a6:88:
23:98:c9:ac:b0:d2:85:b8:0c:2f:49:a1:99:6f:90:
c7:74:86:d9:c7:7a:01:9c:4f:b7:fc:f5:36:0c:96:
ef:7f:d2:4e:5a:76:45:dc:02:31:2b:f0:4b:d5:c2:
5d:1b:6f:33:37:06:8f:c7:b2:1f:c2:9a:d2:ef:4f:
dd:db:2c:33:29:14:27:61:16:39:18:d1:84:1e:f2:
13:d6:06:38:dd:0f:80:45:a7:0d:a6:ec:42:b1:83:
ec:b3:58:00:40:30:58:05:c7:3b:b2:8e:2e:bc:44:
f0:e3:42:ff:6e:7a:b7:fd:e6:d9:e6:5a:b4:e3:7b:
9d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:96:96:63:F7:E1:44:57:64:C3:A2:1F:AE:BC:97:A5:A7:4B:BB:8D
X509v3 Authority Key Identifier:
keyid:C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:19:39:dd:a1:98:37:28:75:0d:b7:f6:3a:24:39:8c:6a:a5:
28:8a:9a:53:92:e9:17:6b:6c:79:23:b7:20:66:4d:a3:6f:e3:
96:a5:20:88:a6:b2:0b:99:9c:3a:63:1f:fb:91:50:4b:4a:07:
6f:37:3c:f2:16:51:5d:5c:ce:26:d8:d1:2f:dd:f0:0c:67:07:
3a:df:23:e7:10:bb:60:88:dc:1c:71:17:e4:1e:81:ec:b8:ac:
ed:46:5b:6b:88:44:eb:1b:f8:6f:57:d8:57:08:ec:6b:f1:6e:
46:03:00:b4:13:f0:db:18:7a:10:ba:da:da:ff:6b:f4:b5:6d:
9d:f9:9f:76:5c:b0:ce:0f:28:22:e3:ba:ff:f9:f1:8f:7f:56:
24:ad:fb:26:d8:75:de:75:8d:1b:61:a8:11:37:b1:81:ca:b2:
c7:5d:a1:52:ad:ff:4a:23:7a:04:d7:d9:1b:d3:36:d0:87:e0:
ce:c1:2a:ee:31:51:b7:6b:ab:8e:02:27:39:9c:3d:04:9c:91:
c6:be:0a:65:d6:8f:53:53:9e:73:8e:0a:7f:be:d5:85:a8:9b:
db:e3:5a:96:e1:2c:02:aa:2f:a4:52:60:a4:76:1c:bb:0a:04:
91:5d:53:3e:32:40:6b:c5:a4:64:2f:94:7e:4a:25:a5:0a:3b:
dc:00:db:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:41 2026 by rpki-client