Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
File: xVnUaTVVufKtaAe6ztxLWi5wGkg.mft (raw, json)
Hash identifier: fIkqWgRw58Bwtcz7yjUZLzQqg5yQhxx+DzMqGim4Cy0=
Subject key identifier: 26:FB:D1:96:5A:49:44:06:13:F8:8D:02:27:C8:17:82:13:CC:4F:57
Authority key identifier: C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
Certificate issuer: /CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Certificate serial: 019D3A1C85C4E0770A042E4E69F59F6D7416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
Manifest number: 0BBF
Signing time: Sun 29 Mar 2026 15:00:40 +0000
Manifest this update: Sun 29 Mar 2026 15:00:40 +0000
Manifest next update: Mon 30 Mar 2026 15:00:40 +0000
Files and hashes: 1: Hi_yIbXB_AqEZvECw_6A2niKbbY.roa (hash: V9KwW6TEefSi+Nbg4IOw24z7gPz8KPWyVOeCLVyS3EY=)
2: xVnUaTVVufKtaAe6ztxLWi5wGkg.crl (hash: TPgrB9VQdm18NBCrYKF6MhPEmbRvqh87yQLrsgeksjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:85:c4:e0:77:0a:04:2e:4e:69:f5:9f:6d:74:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Validity
Not Before: Mar 29 15:00:40 2026 GMT
Not After : Mar 30 15:00:40 2026 GMT
Subject: CN=26fbd1965a49440613f88d0227c8178213cc4f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:34:ce:09:a8:3d:4b:e2:74:3c:7e:00:50:76:
30:2d:51:c3:8a:50:9d:9a:66:01:ec:ce:08:1e:32:
fd:d9:66:6a:d0:11:72:7d:e5:18:de:6c:7a:ef:22:
30:34:fa:5c:5a:d9:41:09:24:8d:45:97:96:b8:7a:
de:35:dd:2c:44:e9:66:11:41:2e:e4:f3:c3:4d:cf:
52:61:aa:71:de:6a:9f:1a:3b:1f:2f:71:de:ac:58:
40:ef:85:f9:1e:23:71:42:0d:7f:12:f3:82:b1:5d:
c9:cc:a9:4c:08:ce:7c:29:a3:5e:b6:29:3d:a8:17:
3d:af:a8:06:96:61:bb:3a:f2:67:37:05:67:48:c1:
d8:cc:6c:a7:f4:bd:1c:5b:81:8d:6f:0f:aa:7c:93:
11:dd:c8:e5:59:cb:20:03:fe:8a:b0:9a:28:92:5d:
72:1a:77:75:ed:28:8c:ce:49:e6:ce:e7:b8:9e:28:
4f:70:1c:40:8b:65:eb:57:56:1b:6f:55:df:37:0e:
fc:d4:06:b6:7d:3c:9b:c1:82:17:fc:28:6c:51:d6:
d2:00:0b:bf:a6:88:45:b2:2e:dd:af:16:bf:09:4c:
51:4d:0d:12:25:c9:ed:e9:3b:c1:69:39:c1:bf:86:
f5:fc:5b:75:9a:77:d1:0e:35:6d:f2:6c:46:26:83:
52:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FB:D1:96:5A:49:44:06:13:F8:8D:02:27:C8:17:82:13:CC:4F:57
X509v3 Authority Key Identifier:
keyid:C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:6b:6d:e9:63:29:74:32:95:73:ac:61:76:a9:d9:f0:7b:75:
b3:59:16:2f:04:70:3d:5b:c4:58:7d:0f:f8:fb:e4:a9:20:df:
d3:38:d9:56:82:c0:1a:71:cc:25:53:b1:da:22:60:e4:0d:3f:
c9:bf:8f:93:29:84:60:03:53:20:b4:e5:f2:a9:6d:e0:a9:e8:
8e:92:c9:65:ad:01:8f:30:d2:58:e0:f3:dc:95:6a:72:2f:9f:
f9:62:70:59:be:01:a4:de:86:d1:f3:77:a5:f5:6a:f7:88:da:
19:e6:51:d6:f7:3a:63:d6:c2:2e:f7:eb:3b:92:20:d3:d9:1e:
c9:90:0a:1d:e8:a2:42:ad:a2:bc:9b:c0:26:02:8f:c3:49:68:
1b:ef:d2:26:19:14:ff:81:34:e6:c6:7e:06:fc:21:2e:95:12:
42:08:e1:cc:a3:55:23:80:4b:e4:26:7a:28:b0:df:c7:a1:2a:
52:b9:d7:3f:fe:2e:9d:3c:da:79:45:21:dd:7c:65:06:b2:08:
6a:1d:e9:77:c1:09:c3:21:67:83:a8:98:fe:55:9f:fa:0e:6b:
98:b1:22:8d:25:41:f7:55:99:49:d1:76:c2:4a:01:0b:65:17:
65:bc:d1:0c:e2:9d:8c:3c:81:f1:d4:79:a4:9c:59:97:c1:03:
72:9a:36:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:02:10 2026 by rpki-client