Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
File: xYigeeTOtrskwjxSceRYPhzy-ak.mft (raw, json)
Hash identifier: AZX0gspsmJCjNNp/PyiSGD2inoFuEwj285t2u1KuAKE=
Subject key identifier: 9C:39:00:AF:E9:61:62:D9:EF:5D:5E:E1:34:83:D9:FE:EF:33:91:92
Authority key identifier: C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
Certificate issuer: /CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Certificate serial: 019D3A8A723CFF2E47A558277CD623D544E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
Manifest number: 1898
Signing time: Sun 29 Mar 2026 17:00:44 +0000
Manifest this update: Sun 29 Mar 2026 17:00:44 +0000
Manifest next update: Mon 30 Mar 2026 17:00:44 +0000
Files and hashes: 1: Pt1Psw1-lXzUqfn0X0LMWdzipP0.roa (hash: 15BXKGLsn5CILBGoCHvyltyRe1OA4GGdr684IX7Rfck=)
2: xYigeeTOtrskwjxSceRYPhzy-ak.crl (hash: AMO+JURTbrX6k15h9c/KFjnx2YdDi5u+yZK6PSn+Yq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:72:3c:ff:2e:47:a5:58:27:7c:d6:23:d5:44:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Validity
Not Before: Mar 29 17:00:44 2026 GMT
Not After : Mar 30 17:00:44 2026 GMT
Subject: CN=9c3900afe96162d9ef5d5ee13483d9feef339192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b2:61:1d:dd:09:22:62:56:af:99:38:cc:7f:
31:a8:c0:2e:f4:9c:f2:c4:b1:c7:8a:83:ce:5d:26:
79:28:85:44:f6:5a:e3:3f:9c:62:3c:21:50:9a:ed:
d1:7d:ef:d8:ba:fc:b9:e2:72:c8:37:d1:41:fa:58:
bd:77:9d:25:7d:1c:be:92:b3:8d:cd:35:45:76:dd:
f4:ec:47:01:33:ff:a4:50:66:d4:34:64:52:36:dc:
e0:67:c4:72:67:f0:62:d0:5a:76:19:97:c3:87:a7:
d5:fc:0c:80:fd:3a:d5:39:42:2f:f0:7b:c6:f5:7c:
19:63:f5:86:14:a2:5d:29:75:85:09:3d:d8:09:d5:
3b:17:e4:99:0b:b3:eb:39:4d:33:8a:9f:1f:ff:d0:
1c:8a:6b:d4:54:96:6c:af:0e:bd:fb:bb:ea:cc:49:
23:eb:ef:cb:02:86:22:e8:51:f6:59:27:06:6c:79:
81:06:00:57:20:9c:d1:06:f4:c8:94:46:fd:5d:b2:
83:b0:4f:fb:c5:c4:95:34:53:be:60:d3:c4:5c:49:
71:ef:1f:d0:e2:62:f0:df:d7:74:4a:50:65:0d:bf:
44:34:1b:98:df:08:bc:0d:7b:ca:4f:57:03:25:85:
26:32:b8:03:67:02:54:09:76:84:2f:83:ea:66:c6:
fc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:39:00:AF:E9:61:62:D9:EF:5D:5E:E1:34:83:D9:FE:EF:33:91:92
X509v3 Authority Key Identifier:
keyid:C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:7d:9c:66:f4:86:07:4a:61:26:92:ae:f3:61:b2:01:39:5b:
2f:50:11:29:c5:a1:a3:ab:d7:65:2a:85:50:60:24:22:53:b9:
6d:e4:38:90:42:90:9d:46:2e:77:9b:4e:74:36:6e:07:7c:ca:
68:b6:b4:1e:2c:2c:cc:63:a1:36:f4:6d:2d:b6:75:3c:df:a9:
83:96:bc:d6:18:d5:6b:4d:66:89:d3:fa:06:93:0d:bb:0b:14:
52:ca:47:8c:71:00:e2:f6:a0:5c:16:33:1c:6c:a7:72:86:85:
f6:23:35:12:35:63:06:c9:bf:29:55:56:ea:80:c3:b9:d9:f5:
45:a1:e1:08:c7:3c:0c:89:30:39:0e:3b:b8:36:b9:aa:84:44:
fd:00:20:4b:8f:9e:f5:86:06:11:6c:ed:d3:6b:3d:06:88:27:
03:1f:44:9a:d7:85:c1:1f:58:8c:ef:d1:04:9a:d1:11:e9:13:
b3:b3:ee:48:0a:e7:97:89:ac:ae:31:3c:86:3c:67:e3:47:52:
71:d6:d2:e1:45:62:fa:74:7a:1e:29:77:61:fb:b2:e3:65:c3:
d1:10:32:36:ac:d1:58:d4:d3:59:2b:35:1e:fe:dc:06:55:8b:
d0:39:cb:6f:23:a9:4d:a1:f9:5e:e0:68:52:fc:58:de:1f:1a:
9e:64:e1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:21 2026 by rpki-client