Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
File: xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft (raw, json)
Hash identifier: DAEYxYuKSNbKiSh8QzUbxlisNko5dZ6U1xX6jLXlkJ4=
Subject key identifier: 03:30:A5:2D:D1:BF:75:35:7F:49:D5:18:D3:54:51:10:1E:23:25:FA
Authority key identifier: C5:F2:20:3B:C0:28:67:02:34:5A:C4:65:50:0B:44:88:C0:31:C6:B5
Certificate issuer: /CN=c5f2203bc0286702345ac465500b4488c031c6b5
Certificate serial: 019D37C052CD148A872B0A7BCE863A2068E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 04:00:44 +0000
Manifest this update: Sun 29 Mar 2026 04:00:44 +0000
Manifest next update: Mon 30 Mar 2026 04:00:44 +0000
Files and hashes: 1: grgC47iwv_yPcU0PK-57zcrhx3w.roa (hash: Byu89q/FbONyFmYfNVRxv0Nw5EmOQBEB3SRiUqdLOKE=)
2: xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl (hash: 1Dj7T+fYdVxYKb/lT1QRmIktGRYI4je8Wv88EDN+GJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:52:cd:14:8a:87:2b:0a:7b:ce:86:3a:20:68:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f2203bc0286702345ac465500b4488c031c6b5
Validity
Not Before: Mar 29 04:00:44 2026 GMT
Not After : Mar 30 04:00:44 2026 GMT
Subject: CN=0330a52dd1bf75357f49d518d35451101e2325fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:af:af:3c:f9:03:56:df:a8:ce:f3:c7:be:b8:
64:1d:5d:57:a5:c4:54:36:6b:7b:b7:2b:ab:e0:25:
13:11:6c:c3:7d:38:1b:62:81:00:24:9d:53:b0:27:
f6:cf:28:f1:b2:3b:34:9d:a7:42:16:75:fa:23:95:
66:69:f9:79:5c:8c:c4:64:f3:9f:d6:e7:d3:52:09:
1a:40:ad:7b:b7:23:a9:60:1e:e7:07:9c:95:8f:35:
a0:63:b4:a8:73:e3:c7:28:1a:ee:bb:e4:84:69:51:
a5:27:99:b1:7d:fc:ef:9a:ac:b1:91:82:ae:f6:72:
0a:33:b7:45:2c:8f:1f:d7:53:0e:1a:b9:df:dd:d7:
05:cb:31:18:d7:ad:bc:1e:a6:e2:62:db:2e:0b:5b:
63:e8:94:53:2f:73:30:42:b3:cd:ff:05:40:89:3c:
15:b2:9d:48:37:5b:ba:fb:a2:00:99:02:66:ad:35:
43:95:c5:81:48:32:ac:40:d4:8f:d7:d5:04:d9:37:
4b:db:ce:19:19:7c:43:db:51:f4:b1:06:cf:dd:92:
6e:a7:30:58:1c:46:12:ee:75:d5:88:2c:0f:e7:e8:
ea:b6:40:a9:66:01:ca:8d:9c:52:23:de:09:e0:9b:
fb:83:6f:29:8b:3e:5e:bb:91:06:7d:8f:ec:4a:c2:
b1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:30:A5:2D:D1:BF:75:35:7F:49:D5:18:D3:54:51:10:1E:23:25:FA
X509v3 Authority Key Identifier:
keyid:C5:F2:20:3B:C0:28:67:02:34:5A:C4:65:50:0B:44:88:C0:31:C6:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:12:ad:b7:b6:76:f3:ea:2d:ea:97:1e:71:24:e0:c2:a1:00:
63:dc:38:05:ff:a9:af:f1:b8:a6:93:69:67:23:2b:e9:ac:09:
09:16:44:f7:0f:be:b0:d4:5f:04:2c:2b:31:cb:03:b9:ae:c3:
28:8f:c6:e7:33:72:d5:43:66:9f:68:f1:d9:76:94:ae:4f:50:
b3:40:d6:0f:52:fe:5f:8e:2b:d0:84:59:62:7a:d6:19:0e:f2:
2f:ed:35:fb:e8:6c:b7:d6:59:fa:06:59:a8:bc:03:f6:31:e3:
59:8c:fb:f9:7e:e9:30:a4:42:ab:2e:37:37:df:12:53:a6:3d:
b0:ae:02:80:51:24:ca:e6:47:7b:40:26:8c:e6:b7:04:c3:e8:
fd:b9:87:b1:f5:e8:99:a0:44:9a:34:ea:ea:6f:91:a7:18:68:
91:a1:7a:14:89:83:e5:7c:75:4c:d8:95:44:ca:21:cb:66:f4:
d1:8f:57:b8:32:2c:3c:01:e7:f1:6b:3d:ea:3e:eb:00:75:a1:
fc:1e:bc:8f:01:2d:b6:05:2c:af:0f:a3:0e:c0:3e:72:6a:89:
c2:af:df:7d:c1:27:40:f4:38:d2:f8:d7:6b:f3:9b:95:a0:9d:
ab:ca:6e:ba:9c:ac:bc:48:ef:37:1e:f3:15:18:9d:8f:83:fa:
1c:a2:9f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:39 2026 by rpki-client