Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
File: xaL0JAfyHJ12kPsw_YzbK_320DA.mft (raw, json)
Hash identifier: jA18s8O171/kQolMr9tWiXqJXRux5aId3tUe8iW/HbY=
Subject key identifier: AA:C1:40:15:2E:8A:EB:30:AD:06:A9:9B:7A:5A:C0:A4:81:DE:BA:DE
Authority key identifier: C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
Certificate issuer: /CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Certificate serial: 019D38D336B65E1D715BDF269987795AEE92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
Manifest number: 18AC
Signing time: Sun 29 Mar 2026 09:00:59 +0000
Manifest this update: Sun 29 Mar 2026 09:00:59 +0000
Manifest next update: Mon 30 Mar 2026 09:00:59 +0000
Files and hashes: 1: vvOgIMkDpg0381NKvOJ6xEsVrhU.roa (hash: Ilfe2d/82ILTFX47xfIYllXXNOO6y9+T+nkxBpSb/2g=)
2: xaL0JAfyHJ12kPsw_YzbK_320DA.crl (hash: C25at86NNg9WPfft5A7MG0CHwAyjgaacJB/akHfz9NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:36:b6:5e:1d:71:5b:df:26:99:87:79:5a:ee:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Validity
Not Before: Mar 29 09:00:59 2026 GMT
Not After : Mar 30 09:00:59 2026 GMT
Subject: CN=aac140152e8aeb30ad06a99b7a5ac0a481debade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:73:d6:4b:81:d2:06:29:53:b6:1f:64:16:9e:
b0:78:7f:f9:8e:f4:7b:a4:33:71:cd:80:67:84:a6:
23:18:b0:6f:09:f7:de:f5:af:cf:02:0b:9d:0c:42:
95:0f:06:92:ff:6a:c5:ed:31:d9:5f:e6:2e:ab:3d:
d6:bd:fb:0e:6d:e0:f5:e2:3b:01:b6:3c:1f:9a:55:
55:75:6e:76:0e:94:1e:0f:c0:12:8c:ca:c6:a1:4f:
62:f1:fc:fd:49:0b:61:0f:c6:8b:e5:6c:65:fa:ee:
48:8c:b0:dd:2c:66:6f:41:66:ab:ce:4c:c4:35:fb:
f3:0d:93:50:49:7e:0e:21:ac:f6:6b:84:7d:ee:50:
6f:14:42:8f:af:04:52:13:e6:3a:f8:a5:2d:62:6a:
fb:8d:3d:1c:c6:0b:2c:45:e4:3d:39:40:28:41:8f:
92:3e:0d:04:23:6a:95:26:68:ca:2a:94:6e:65:cf:
fd:03:d4:58:c3:1b:25:fb:76:7f:c1:cf:db:8e:b9:
16:1f:4c:a2:a7:9f:ed:16:21:6e:87:3b:46:f2:a3:
f3:2f:9c:f4:27:bb:27:9e:80:8b:39:11:7c:cc:f7:
52:c1:6e:f0:f6:57:31:6d:ab:ae:b2:2c:eb:22:30:
42:e6:60:4c:e4:ad:26:5a:cb:8a:b8:21:67:9e:50:
2a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C1:40:15:2E:8A:EB:30:AD:06:A9:9B:7A:5A:C0:A4:81:DE:BA:DE
X509v3 Authority Key Identifier:
keyid:C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:50:56:93:d5:9f:68:7d:78:5a:7d:9d:88:f6:25:0b:90:cf:
b8:ee:7c:8f:d9:87:97:18:03:b0:a1:82:69:40:90:7f:b3:7f:
e7:23:3b:47:cd:02:ea:44:9e:30:a3:7b:2e:75:4b:1b:ff:f8:
72:27:18:36:5f:72:b4:bd:fa:36:03:68:3a:ec:eb:c7:8b:97:
79:bf:3b:0e:6f:84:af:58:5b:f3:35:65:d8:ac:72:64:57:15:
79:08:10:8c:b8:46:eb:9c:e0:3c:64:76:21:d6:b6:7b:99:c1:
d9:1f:dc:81:90:6e:88:63:56:59:c2:8b:58:03:df:f1:f1:23:
0b:0e:09:a9:5a:b0:ca:4c:f6:2d:16:54:d8:2e:60:ed:6e:e0:
3d:06:25:69:9a:9b:46:ea:f4:bd:91:11:d9:1a:d1:d1:e0:5c:
6b:1d:c5:8b:1f:29:95:4d:1a:99:51:c0:9a:38:1c:a3:bf:8e:
21:b8:80:4a:16:7c:96:df:45:15:92:46:b4:49:6d:b1:28:d2:
31:fa:90:af:ac:da:1d:84:3b:66:9a:f7:28:f9:3c:c5:e1:f2:
7b:19:3c:bf:e7:66:da:a1:03:27:86:d2:b0:2b:93:ef:a0:77:
93:cb:15:f7:58:57:5c:d6:9c:b1:5e:cb:77:b3:64:a0:76:a0:
fa:1f:14:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:49:57 2026 by rpki-client