Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
File: xN_w4VI3gFUHr10Dq-3riDK0uMs.mft (raw, json)
Hash identifier: 8uxtiWAOeHjJcYkbAwmw/gDPKE3uySVLvqv8FEWgml4=
Subject key identifier: 82:8E:D1:5B:C7:3A:D8:32:38:41:AD:C7:F2:E9:84:A5:03:77:1E:05
Authority key identifier: C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB
Certificate issuer: /CN=c4dff0e15237805507af5d03abedeb8832b4b8cb
Certificate serial: 019D37C00B8F306EF5385641BC0898E9FFE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 04:00:25 +0000
Manifest this update: Sun 29 Mar 2026 04:00:25 +0000
Manifest next update: Mon 30 Mar 2026 04:00:25 +0000
Files and hashes: 1: 1ZYXmJOrMeMc_d7Mkc1TagHI2yQ.roa (hash: qeka0m7QmqNt2z/3WOdknE3KXx1vrYZ3br+BR0VNMV8=)
2: xN_w4VI3gFUHr10Dq-3riDK0uMs.crl (hash: 0AfqzMatGU9oLAut8zwvv8LgDCeKT/8LzcWQMb57cuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:0b:8f:30:6e:f5:38:56:41:bc:08:98:e9:ff:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4dff0e15237805507af5d03abedeb8832b4b8cb
Validity
Not Before: Mar 29 04:00:25 2026 GMT
Not After : Mar 30 04:00:25 2026 GMT
Subject: CN=828ed15bc73ad8323841adc7f2e984a503771e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4b:f8:8e:9e:c8:ef:91:a8:b8:79:8d:dd:29:
35:b6:ad:89:71:4a:19:4d:30:cd:0e:a4:35:8a:39:
3a:2f:52:a7:f1:38:cb:01:c5:b1:71:e9:89:7f:46:
eb:4e:96:2b:8e:fa:80:e8:a2:d2:d8:a6:0c:9f:a8:
02:98:36:81:f1:9e:d3:9d:4f:d2:fc:ac:98:3c:50:
d7:a3:29:b5:aa:31:b8:8e:7b:19:cc:1c:22:cb:5f:
e8:48:6f:3e:0f:56:36:38:fa:0d:f0:53:36:85:21:
36:62:e4:18:41:46:b6:12:2f:08:7c:cf:b5:fc:d7:
9f:d0:58:48:6e:b5:89:88:23:f4:23:33:d0:3d:c7:
f5:2e:20:ee:bd:a0:f3:6a:12:be:aa:97:e2:54:41:
ca:af:11:ca:d8:21:7e:f6:36:57:db:f2:36:97:55:
99:43:59:34:89:f1:ed:24:64:f1:73:c1:e7:3e:2a:
45:3d:00:44:d6:0b:f0:1c:5e:7b:53:e6:92:f3:0c:
7f:2c:5f:24:54:b7:58:60:81:2a:9e:c5:6d:47:00:
4a:83:4a:ca:c0:78:b7:ae:44:36:a9:85:b9:9a:58:
8b:2f:c2:bb:5f:6f:6d:17:b0:e5:2b:52:92:de:f2:
56:74:1b:ea:11:4c:b3:a2:d9:fc:5f:83:7e:66:a8:
da:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8E:D1:5B:C7:3A:D8:32:38:41:AD:C7:F2:E9:84:A5:03:77:1E:05
X509v3 Authority Key Identifier:
keyid:C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:7a:e2:6f:dc:ef:64:ac:90:8e:52:3a:0c:98:46:76:b4:f1:
60:16:7c:5a:00:7b:c3:ab:ab:d1:37:50:3f:84:d2:54:93:e2:
c2:c8:34:c5:ce:81:24:ac:42:42:cf:d0:ec:14:06:fc:35:a2:
28:fd:20:7c:e6:d1:16:a1:29:46:2c:4e:14:e7:3d:b1:b8:2c:
2f:76:14:56:c6:b1:a3:a4:22:3f:48:06:c1:ee:43:ef:0e:c6:
aa:89:b2:9f:60:64:c2:75:e8:50:a4:c6:2e:af:68:1f:ab:ed:
d0:a4:e3:4a:a6:78:1f:2b:42:d9:f7:e5:4b:85:37:b1:59:a4:
b8:4c:f3:2d:49:78:95:9c:37:d3:a8:c5:8e:4d:79:7b:69:f3:
cc:cb:e4:91:63:e9:86:4f:65:3f:0a:c5:f2:66:de:59:cc:ba:
b1:0a:64:29:25:0b:2c:45:9d:39:f3:ce:00:fc:65:15:fb:b8:
1e:6c:94:da:96:46:20:0c:13:a7:15:bf:e6:f7:eb:76:da:95:
0a:0f:63:7f:4e:85:d5:bd:5d:6a:d3:44:72:c1:cf:66:62:8d:
41:2f:ee:7b:62:51:e0:39:ce:6b:1c:f4:aa:f4:53:21:90:f7:
d8:42:c7:f2:18:4a:26:7c:68:a5:d7:40:0e:ce:d2:c4:9e:ef:
c4:00:5b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:01 2026 by rpki-client