Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/21aac6-c9b8-4e86-a578-926d5342cddf/1/xB3lN1MIdK8RrnzS4vYY2msNjvo.mft
File: xB3lN1MIdK8RrnzS4vYY2msNjvo.mft (raw, json)
Hash identifier: 4UtcEaP4DCYf+7XenqWyL1UBSkgVXZSD9fw75fBaTRA=
Subject key identifier: 85:8B:3E:87:29:36:EE:5F:FA:84:3A:EF:D0:EB:40:68:48:73:40:8F
Authority key identifier: C4:1D:E5:37:53:08:74:AF:11:AE:7C:D2:E2:F6:18:DA:6B:0D:8E:FA
Certificate issuer: /CN=c41de537530874af11ae7cd2e2f618da6b0d8efa
Certificate serial: 019D37C071FB4E58FAF6FFEABB4D678DFD88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xB3lN1MIdK8RrnzS4vYY2msNjvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/21aac6-c9b8-4e86-a578-926d5342cddf/1/xB3lN1MIdK8RrnzS4vYY2msNjvo.mft
Manifest number: 07
Signing time: Sun 29 Mar 2026 04:00:52 +0000
Manifest this update: Sun 29 Mar 2026 04:00:52 +0000
Manifest next update: Mon 30 Mar 2026 04:00:52 +0000
Files and hashes: 1: Nq2jt4deL1vcbLLP6JUlP--zYjU.roa (hash: o2B0T84JtLq/eEsMjiJgMnquL7CfY7FdFEuIWNrRV8U=)
2: xB3lN1MIdK8RrnzS4vYY2msNjvo.crl (hash: jZwFd87SUyUvxFKK1BJE5IUQVfQ1K95oui5HHrBbVtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/21aac6-c9b8-4e86-a578-926d5342cddf/1/xB3lN1MIdK8RrnzS4vYY2msNjvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/21aac6-c9b8-4e86-a578-926d5342cddf/1/xB3lN1MIdK8RrnzS4vYY2msNjvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xB3lN1MIdK8RrnzS4vYY2msNjvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:71:fb:4e:58:fa:f6:ff:ea:bb:4d:67:8d:fd:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41de537530874af11ae7cd2e2f618da6b0d8efa
Validity
Not Before: Mar 29 04:00:52 2026 GMT
Not After : Mar 30 04:00:52 2026 GMT
Subject: CN=858b3e872936ee5ffa843aefd0eb40684873408f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ee:2d:e0:21:fc:ee:4e:55:f1:b3:9b:e7:1a:
0f:49:56:eb:70:70:57:50:06:da:b1:ac:9d:22:57:
a9:fd:8e:ab:2d:ef:12:5e:5a:1b:ca:7d:e3:67:cf:
32:e7:cf:26:6c:a3:51:df:57:f0:4e:e0:e2:63:b8:
f2:20:5a:4d:2c:49:6c:07:92:e4:34:c7:aa:fd:3e:
4c:4e:50:8b:e6:0e:24:fa:25:5f:d1:5e:0c:75:7d:
58:82:c6:17:43:6e:5e:77:83:41:89:1a:68:4d:6a:
1a:98:c4:2a:3f:27:72:d7:47:65:67:b6:9a:fd:0f:
6b:6a:75:17:08:83:40:ec:eb:ee:6d:c2:7b:fd:1b:
f9:52:30:c1:e8:c7:18:99:16:a6:e8:87:75:5c:e6:
ee:26:dd:52:5a:d5:fd:3e:74:dc:e3:d6:24:7c:c4:
ce:45:84:71:4b:79:9f:8e:b2:4f:33:ba:d7:b9:44:
11:ad:ed:58:1f:5a:bb:c3:44:a8:8d:c8:01:62:6c:
93:3c:2d:46:3e:23:4b:ec:40:fc:f3:d9:5f:c8:ef:
3b:8b:19:a6:7a:66:f4:98:68:0f:bf:42:3c:54:df:
5e:d9:44:8b:4a:1e:07:c8:d8:94:a3:7d:18:d3:86:
5c:53:f3:0e:41:a4:40:79:ee:78:07:c8:bf:34:46:
e5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8B:3E:87:29:36:EE:5F:FA:84:3A:EF:D0:EB:40:68:48:73:40:8F
X509v3 Authority Key Identifier:
keyid:C4:1D:E5:37:53:08:74:AF:11:AE:7C:D2:E2:F6:18:DA:6B:0D:8E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xB3lN1MIdK8RrnzS4vYY2msNjvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/21aac6-c9b8-4e86-a578-926d5342cddf/1/xB3lN1MIdK8RrnzS4vYY2msNjvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/21aac6-c9b8-4e86-a578-926d5342cddf/1/xB3lN1MIdK8RrnzS4vYY2msNjvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:21:19:39:6c:8c:be:e0:06:eb:a5:bf:39:9f:f7:1c:15:8c:
51:d9:c9:14:33:32:c0:51:f3:31:95:e5:ac:66:81:55:45:ad:
ca:7c:65:20:48:57:3d:cb:6b:a7:53:05:d7:2a:80:ac:cf:fa:
74:ff:4f:c5:74:6b:fe:6a:f2:65:13:ea:79:92:26:87:8e:4e:
75:f1:81:36:02:2f:33:da:a3:95:93:1f:fe:c9:d8:3f:19:df:
90:bd:49:d7:84:b6:73:28:ad:44:f6:6c:ed:52:a9:c2:4a:5e:
2b:24:6b:2d:ab:2d:9e:a7:8b:42:dc:bf:01:d5:5e:7e:31:8a:
b0:bc:02:c6:4e:63:e4:5b:19:82:f2:d5:18:64:9d:2e:8b:c5:
ab:eb:07:10:23:ff:89:bd:bb:8b:95:0d:d3:47:85:85:eb:9b:
74:1a:9a:1d:1f:6f:25:e7:fe:a0:59:9e:ea:52:86:67:e1:5c:
01:84:4f:c1:08:39:d3:b6:94:45:d1:a7:fa:6e:07:fe:69:0f:
ff:72:f2:18:f4:eb:de:70:93:c9:0b:e9:71:d4:ce:d6:b2:d5:
18:53:08:30:8f:83:18:8b:db:0e:ac:7a:28:a5:cf:17:9e:92:
83:cb:a5:1e:0c:38:a3:b6:5d:10:f0:d2:a9:9f:07:c2:61:44:
db:de:f8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:28:12 2026 by rpki-client