Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft
File: xcgmUInL3eamxXnNd2tfgMD4rdQ.mft (raw, json)
Hash identifier: AURTeF4M9Z655HrrQSEAM//xByxySJnO7/0GZw2rnqI=
Subject key identifier: 8A:31:36:5E:2F:97:83:7E:61:3E:E4:DF:61:9D:87:92:BE:22:29:E7
Authority key identifier: C5:C8:26:50:89:CB:DD:E6:A6:C5:79:CD:77:6B:5F:80:C0:F8:AD:D4
Certificate issuer: /CN=c5c8265089cbdde6a6c579cd776b5f80c0f8add4
Certificate serial: 019D38D33FB5A5CB2F8A70FF55EFF9C7758C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcgmUInL3eamxXnNd2tfgMD4rdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft
Manifest number: 03A7
Signing time: Sun 29 Mar 2026 09:01:01 +0000
Manifest this update: Sun 29 Mar 2026 09:01:01 +0000
Manifest next update: Mon 30 Mar 2026 09:01:01 +0000
Files and hashes: 1: m7FhPhHs11a2vSve5xnlsfFohsw.roa (hash: hMpM0IenW1hqeUpQGO4ux70XpFaz54EzPiQ0jMGVOds=)
2: xcgmUInL3eamxXnNd2tfgMD4rdQ.crl (hash: Krp206FHYWJu4c08KYBNoR6mmkfLgoXPhyEOte2i+r0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcgmUInL3eamxXnNd2tfgMD4rdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:3f:b5:a5:cb:2f:8a:70:ff:55:ef:f9:c7:75:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5c8265089cbdde6a6c579cd776b5f80c0f8add4
Validity
Not Before: Mar 29 09:01:01 2026 GMT
Not After : Mar 30 09:01:01 2026 GMT
Subject: CN=8a31365e2f97837e613ee4df619d8792be2229e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c1:ef:7d:2e:ff:f6:3e:64:b9:96:2f:81:65:
53:f8:74:b4:52:f2:6f:7a:c1:7f:5b:cb:5d:0d:b9:
9d:17:b7:c4:6c:4f:67:46:0d:ee:91:57:2f:b8:60:
0b:b8:1b:62:1e:2b:81:11:8c:9e:7e:bc:c7:9a:50:
f1:8a:3a:b2:ef:05:5e:61:ee:d8:fd:8d:29:c7:4d:
a7:18:30:48:60:18:c0:d0:fc:68:c5:2e:fe:43:2a:
1c:38:e3:f8:a1:d2:08:72:ee:82:69:6a:93:6d:fc:
f2:3d:1d:07:8e:5c:d2:fc:4c:90:0b:8d:34:27:b0:
f4:e5:e3:7a:e0:4c:6e:72:22:80:e5:e8:0f:1b:2f:
aa:03:18:80:6c:75:73:85:68:ec:6f:ba:39:55:9f:
88:f5:24:cb:5f:2c:48:3c:bf:e3:6e:3c:bb:47:2b:
bc:7d:19:e4:17:25:41:0d:d1:cb:e2:fa:9c:ba:16:
e2:4a:ab:57:81:b9:d8:2b:55:a1:da:b4:93:9c:ee:
f9:9a:b6:d7:ef:7a:ee:d4:c6:bb:e8:0c:52:75:87:
86:3d:94:44:13:5e:55:60:4f:03:f1:c1:f6:ca:46:
62:8d:77:e7:ba:b4:ab:e9:ad:ad:e5:86:52:84:e5:
f6:d3:c8:30:2c:b7:5f:b1:4b:a3:c2:01:81:6a:6b:
3d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:31:36:5E:2F:97:83:7E:61:3E:E4:DF:61:9D:87:92:BE:22:29:E7
X509v3 Authority Key Identifier:
keyid:C5:C8:26:50:89:CB:DD:E6:A6:C5:79:CD:77:6B:5F:80:C0:F8:AD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcgmUInL3eamxXnNd2tfgMD4rdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:7f:46:55:5a:aa:01:b7:01:f2:75:1a:04:ea:21:d0:3a:d2:
97:e5:7c:d1:cb:3a:82:4f:73:0b:83:bb:e5:41:ae:43:60:ec:
c6:83:65:69:52:82:af:37:9c:08:ee:d9:13:35:3b:f5:a4:61:
ad:f4:d8:32:09:3e:95:9d:03:5d:9a:95:8a:a2:99:23:46:b9:
75:53:02:c7:0f:dd:d2:cc:c8:70:17:08:4f:08:db:0d:07:72:
ac:9d:88:26:03:9e:cc:2b:6b:7c:dd:c2:22:ee:46:1b:9d:60:
54:2c:cf:39:61:ce:b0:3b:39:da:6e:83:c4:3d:da:ab:2c:4e:
6d:cf:03:f5:23:e0:01:15:20:90:28:85:42:f1:36:83:24:f2:
e8:0e:2b:5c:e8:e9:19:ab:a1:45:38:45:ec:34:28:e5:db:63:
94:64:b5:87:c6:85:d7:6d:94:29:33:48:ca:6d:61:6a:4b:72:
26:04:c9:dc:e0:fc:91:c8:b3:b1:fc:1c:ff:89:ea:66:6e:46:
32:95:42:bc:af:d4:91:0e:29:af:3c:56:85:e8:54:3c:92:67:
20:1f:59:0e:09:b8:d9:22:9a:21:14:14:53:43:0f:fb:c6:e7:
a6:6c:66:ad:65:e3:5c:87:6d:b4:8a:bf:61:98:90:4e:87:7e:
ca:8f:a8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:25 2026 by rpki-client