Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
File: xQSRCSEw3t2EZv_VzFEFdsiU324.mft (raw, json)
Hash identifier: F7Az4P41D0gRKso/UWhvQc49SttKXz3VIXiZXCh6bPM=
Subject key identifier: 85:E5:88:C6:4F:64:43:18:A6:2C:E5:5C:18:33:F0:34:9C:10:F1:2A
Authority key identifier: C5:04:91:09:21:30:DE:DD:84:66:FF:D5:CC:51:05:76:C8:94:DF:6E
Certificate issuer: /CN=c50491092130dedd8466ffd5cc510576c894df6e
Certificate serial: 019D394144D3E639A70D9C375EEB14F3A1D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 11:01:11 +0000
Manifest this update: Sun 29 Mar 2026 11:01:11 +0000
Manifest next update: Mon 30 Mar 2026 11:01:11 +0000
Files and hashes: 1: QX0TE-TV3E6_Xery30IllGZ3lmk.roa (hash: 2B0PODYP4I37DhlKEI2C0a2CWIscrasrNeELFrYNHjs=)
2: xQSRCSEw3t2EZv_VzFEFdsiU324.crl (hash: ZsJ4hFLWGkO2lcdGeif0bXCYAOtL4m7AhWQQEAQ5hPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:44:d3:e6:39:a7:0d:9c:37:5e:eb:14:f3:a1:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50491092130dedd8466ffd5cc510576c894df6e
Validity
Not Before: Mar 29 11:01:11 2026 GMT
Not After : Mar 30 11:01:11 2026 GMT
Subject: CN=85e588c64f644318a62ce55c1833f0349c10f12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:52:06:54:ee:28:bc:51:59:a6:bd:c2:fc:d9:
5a:20:dc:f1:51:61:d9:52:4d:87:b7:e6:6a:77:c4:
12:15:e6:9c:cb:d0:10:80:b5:31:ef:66:eb:db:3b:
56:98:90:aa:72:b4:59:88:07:f1:62:7f:b0:e7:99:
29:24:34:6b:e3:12:06:9a:69:84:03:a6:87:c1:7c:
02:48:62:28:cb:c1:93:a8:f8:3e:d2:68:2d:95:e9:
e3:78:4d:80:24:c8:73:91:00:fe:74:a1:1c:90:63:
0c:a5:e5:92:9a:73:40:11:a0:5d:2a:28:89:54:46:
38:a9:4f:e7:ab:6a:79:a5:9f:7e:7c:c7:1e:1d:d8:
63:90:cf:a0:9e:c1:7c:7e:f0:93:57:fc:46:a1:7f:
57:07:2f:b6:c2:6f:a4:89:45:ba:18:6c:c5:c2:a3:
6d:b5:c0:d1:36:a2:d4:6c:4b:5e:71:89:6b:ff:ea:
e7:4b:c8:02:63:d8:a5:70:8a:5b:eb:fd:52:8b:97:
2c:a4:1e:fd:9d:8d:53:e4:97:a2:fd:d2:a2:0a:bb:
4a:3c:e7:a0:74:a8:b5:c1:7a:41:07:4e:69:14:a9:
44:04:36:9a:3e:1b:14:b2:7a:a2:bf:0d:de:7e:8d:
ce:67:6a:d2:ac:dc:c1:9e:22:ea:09:03:1f:78:e1:
94:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E5:88:C6:4F:64:43:18:A6:2C:E5:5C:18:33:F0:34:9C:10:F1:2A
X509v3 Authority Key Identifier:
keyid:C5:04:91:09:21:30:DE:DD:84:66:FF:D5:CC:51:05:76:C8:94:DF:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:5e:c0:d1:27:aa:29:5d:48:d4:28:96:10:21:72:4b:43:23:
6a:76:c6:d9:51:42:5f:4a:54:b4:99:73:c3:90:2a:e6:d8:59:
db:8b:1a:ed:75:94:97:cd:8d:c6:cf:5d:41:46:ef:ca:b7:1f:
ce:53:f6:6c:84:92:cd:9a:1c:02:2f:8c:e5:6b:ff:65:4e:df:
a7:29:d6:1f:01:dd:04:e0:c5:31:d9:04:cf:a7:bd:fd:1d:e0:
fa:1f:23:ff:3d:b4:27:16:d8:3e:42:0f:8e:7f:1d:d4:e9:3b:
3c:91:63:41:ad:cd:ed:c0:ad:f9:06:3a:23:26:9f:87:6c:d1:
e2:f3:ac:13:9e:c9:cb:60:80:0f:a1:2d:52:d0:64:4c:52:ba:
24:87:95:39:00:b2:7c:2a:5a:19:cc:9a:c1:ef:0c:fd:86:79:
4c:8d:e5:9a:37:06:f2:9c:fc:26:d0:ec:c5:00:a5:0e:8f:55:
de:c4:4f:71:35:d1:c7:cd:7c:15:dc:1b:d5:df:1c:26:c5:6f:
65:db:30:50:0e:b6:d1:1b:94:ac:f5:a9:96:d0:1f:d1:73:20:
b3:42:53:30:d7:a1:53:58:41:4b:2d:f7:d5:ea:80:e9:62:1f:
ba:dd:cc:ee:d9:31:14:1e:7d:d9:9b:24:00:4d:8e:40:8c:0a:
83:56:32:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:51 2026 by rpki-client