Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
File: xBRUZfBpanDV8D7h1d7K_UHcY4U.mft (raw, json)
Hash identifier: fK0PtsK/cXF6UIW/JEa9dcmBXq+Q3MujmQ9aBLjBWRE=
Subject key identifier: D0:54:07:E3:11:EC:8D:46:84:2A:06:08:4D:DF:73:84:FF:FB:71:43
Authority key identifier: C4:14:54:65:F0:69:6A:70:D5:F0:3E:E1:D5:DE:CA:FD:41:DC:63:85
Certificate issuer: /CN=c4145465f0696a70d5f03ee1d5decafd41dc6385
Certificate serial: 019D3789376B14CFFA6271EB227A8AEEE470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 03:00:32 +0000
Manifest this update: Sun 29 Mar 2026 03:00:32 +0000
Manifest next update: Mon 30 Mar 2026 03:00:32 +0000
Files and hashes: 1: biJ04bmigw6iVpUiIdYRLfiKayE.roa (hash: //R/p5jeoEyHzrVxssR2SpOIbWo1BamvM90LorlHczo=)
2: xBRUZfBpanDV8D7h1d7K_UHcY4U.crl (hash: vuvQJkY/+6VkEhL9hEWgTejopDiPUbCPHDZx9SJYqwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:37:6b:14:cf:fa:62:71:eb:22:7a:8a:ee:e4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4145465f0696a70d5f03ee1d5decafd41dc6385
Validity
Not Before: Mar 29 03:00:32 2026 GMT
Not After : Mar 30 03:00:32 2026 GMT
Subject: CN=d05407e311ec8d46842a06084ddf7384fffb7143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ce:e2:e3:57:7f:0a:67:d7:b2:7a:08:1a:12:
47:7c:9f:4c:e1:a4:d8:32:6b:9c:81:2f:0e:d6:11:
cd:cc:84:6e:e3:26:8e:dc:fe:d5:74:54:bb:db:bf:
94:da:d0:5e:c5:56:8f:4f:43:bf:72:03:d9:3a:d6:
c3:55:54:6c:c8:04:8f:37:e2:6f:d7:86:6d:61:f7:
f5:17:ce:15:72:7b:db:96:6f:47:9b:28:74:b2:f1:
33:22:52:28:89:87:91:6e:2e:88:8b:fa:e9:b3:04:
a1:a4:db:9d:f4:dc:27:25:a0:af:32:59:35:96:69:
f8:00:1b:a0:6a:0e:9f:0e:a4:9e:31:4f:63:b0:28:
4d:65:98:d7:79:1b:03:ae:72:11:8b:bb:28:99:aa:
8e:cc:04:53:de:42:26:34:2d:1d:67:ff:57:42:11:
96:0d:49:82:46:13:78:14:6c:ab:7d:0c:bd:e8:ee:
1c:6e:47:d5:a1:a0:1b:36:45:9c:15:68:0c:f8:64:
16:d8:ea:7b:c4:da:f7:4d:77:08:c8:11:b8:f0:1f:
46:4f:b8:81:c8:f6:f6:09:d7:65:54:56:92:4d:dc:
0f:fe:10:fb:e5:b4:cf:fb:2e:46:27:bd:51:ab:27:
dd:5a:90:2d:8d:f4:89:13:17:50:a7:65:b0:fa:38:
ef:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:54:07:E3:11:EC:8D:46:84:2A:06:08:4D:DF:73:84:FF:FB:71:43
X509v3 Authority Key Identifier:
keyid:C4:14:54:65:F0:69:6A:70:D5:F0:3E:E1:D5:DE:CA:FD:41:DC:63:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:51:9c:99:32:da:ba:77:93:28:84:1a:41:60:bc:43:12:f1:
d0:e0:d2:d8:66:c9:f7:9e:05:66:f5:ca:b2:1f:f8:a4:96:0c:
24:a4:ba:6b:00:44:33:75:2b:bd:f3:f2:b5:d5:6e:d9:9c:b5:
9c:c4:b3:1a:39:3c:3e:10:34:2c:f1:43:ee:e1:f9:de:b6:00:
eb:09:90:c3:90:52:7f:82:1c:23:f2:bb:70:16:20:1f:ff:87:
0b:31:60:3f:c9:08:4d:6b:92:75:1a:6d:4f:85:1c:6e:62:4e:
4d:e2:c4:b0:09:a9:54:cf:0f:2d:17:ae:82:5c:e3:3a:d0:96:
2d:c0:1f:7f:1a:da:e5:55:e1:01:3c:58:e8:b6:c1:34:5d:a7:
76:11:ff:03:1c:22:a4:47:4e:52:04:75:b1:57:fc:7b:1d:71:
8d:84:8d:b0:9d:d1:39:a5:be:84:c2:bc:be:74:96:ca:7b:0c:
72:f4:a1:8e:56:68:3f:8d:2e:3e:7e:b8:97:87:ca:89:5e:86:
08:2f:54:49:c2:1b:18:e8:c6:8e:3a:8f:17:38:16:60:36:13:
c4:56:a2:2d:5c:ec:54:ff:bf:87:7f:47:49:da:83:ff:5d:75:
d3:68:e0:e2:50:5d:b4:91:59:58:47:13:da:2d:0a:66:db:64:
4e:f7:d7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:42 2026 by rpki-client