Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
File: xGPDRgOpRpUv8nbgol_TYfys8lE.mft (raw, json)
Hash identifier: wqbvNJTN5l/SrCxmUvdmjDdN5OEPN/dLuRSEjZ5LH4o=
Subject key identifier: C8:59:0F:F8:1A:39:D2:43:BF:A1:07:5D:92:1F:A7:6A:74:A5:B1:FD
Authority key identifier: C4:63:C3:46:03:A9:46:95:2F:F2:76:E0:A2:5F:D3:61:FC:AC:F2:51
Certificate issuer: /CN=c463c34603a946952ff276e0a25fd361fcacf251
Certificate serial: 019D389C5DBA95A6B53FBB871C6610983360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 08:01:04 +0000
Manifest this update: Sun 29 Mar 2026 08:01:04 +0000
Manifest next update: Mon 30 Mar 2026 08:01:04 +0000
Files and hashes: 1: 7cKCDlZbeTX28BBwTA5QO4eJ2xc.roa (hash: sIuMQVrFFVonk4niSkh2ILAH9kBI8WfPxCPrqjWAlqs=)
2: xGPDRgOpRpUv8nbgol_TYfys8lE.crl (hash: EFORC508iaFmdmsT+siDMOZlklsUm5L/hLyb540GCS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:5d:ba:95:a6:b5:3f:bb:87:1c:66:10:98:33:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c463c34603a946952ff276e0a25fd361fcacf251
Validity
Not Before: Mar 29 08:01:04 2026 GMT
Not After : Mar 30 08:01:04 2026 GMT
Subject: CN=c8590ff81a39d243bfa1075d921fa76a74a5b1fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:62:91:14:9f:22:e0:de:93:2c:04:2a:5f:d4:
db:16:3e:86:0c:11:c7:8c:d8:81:86:54:bb:d0:74:
e8:25:f7:00:31:3d:8a:ed:96:74:bf:85:5e:13:6a:
0f:d0:14:8d:30:d0:1e:58:af:98:59:b6:1c:94:c9:
8a:b0:e5:fc:18:5f:57:63:9f:ad:c2:cc:17:68:b8:
95:c5:d9:f1:60:57:9d:b9:1e:40:49:3a:c5:f4:fe:
40:f0:61:4a:d2:4a:04:f1:79:a6:f9:4a:8a:56:d9:
16:90:b5:79:e6:3d:dd:4e:eb:58:79:60:5b:34:8a:
b0:41:46:58:82:c7:1c:9e:a2:2e:dc:1e:ab:73:4f:
4c:22:1b:dd:6b:a6:90:ad:8f:5f:7d:51:9f:5f:64:
51:3e:f4:16:fa:c9:f6:de:57:67:ee:90:e2:98:03:
c0:f5:00:7b:2e:d8:e4:47:b5:4d:c2:ee:7c:38:0b:
2a:e7:88:79:91:59:c7:6c:cf:d5:75:f8:6f:89:64:
ab:03:50:d7:67:f8:d3:37:01:1f:9d:a7:34:2e:57:
b9:31:6e:ec:97:22:98:66:dd:3e:1d:49:0e:51:b6:
00:6e:63:dd:44:7c:df:94:ad:79:ab:31:9f:cc:48:
79:88:29:81:f8:67:2d:cb:22:59:7a:72:a4:0b:0e:
c5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:59:0F:F8:1A:39:D2:43:BF:A1:07:5D:92:1F:A7:6A:74:A5:B1:FD
X509v3 Authority Key Identifier:
keyid:C4:63:C3:46:03:A9:46:95:2F:F2:76:E0:A2:5F:D3:61:FC:AC:F2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:9d:da:30:6f:e7:8b:3e:22:1c:c7:4f:41:2d:98:dc:1d:6d:
f2:3e:9e:6b:83:85:21:84:bf:2c:38:a8:20:7d:3b:4f:d1:28:
a4:fd:02:ac:ec:15:98:36:93:61:20:56:5a:5c:f7:2d:f4:0d:
76:26:17:64:82:98:c8:fa:1b:5b:88:d2:3e:d8:06:8c:dd:c7:
e1:fc:22:2a:ca:ac:c9:7f:4a:a6:d3:7c:10:68:22:6a:86:87:
ab:03:10:df:35:c7:7f:2d:16:a6:60:d7:af:64:11:42:e5:e9:
82:76:19:c4:5b:89:e0:df:67:7f:64:91:ee:4c:ce:fa:88:d3:
d8:5c:ea:b7:dd:9e:24:5b:f9:c9:c6:65:e7:a4:49:fb:73:f9:
61:db:65:e4:2f:12:06:6f:c5:4b:9f:cf:c2:fe:cf:d5:8f:ac:
0c:cd:29:5c:0e:1d:10:b0:0c:fc:e0:b0:96:3f:1d:cb:2e:10:
9f:57:d4:be:0d:11:11:74:11:91:1f:ac:05:fa:4e:63:94:95:
bd:15:c2:48:41:3e:c6:8f:0c:b6:99:53:4b:98:96:fa:cf:2e:
73:03:7e:16:83:5a:fa:33:bc:5b:63:df:21:db:e7:81:4f:66:
3f:ba:af:e8:dd:29:06:0e:7c:ba:be:ac:6c:cc:9b:65:81:df:
aa:46:66:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nF26laa1P7uHHGYQmDNgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NjNjMzQ2MDNhOTQ2OTUyZmYyNzZlMGEyNWZkMzYxZmNh
Y2YyNTEwHhcNMjYwMzI5MDgwMTA0WhcNMjYwMzMwMDgwMTA0WjAzMTEwLwYDVQQD
EyhjODU5MGZmODFhMzlkMjQzYmZhMTA3NWQ5MjFmYTc2YTc0YTViMWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WKRFJ8i4N6TLAQqX9TbFj6GDBHH
jNiBhlS70HToJfcAMT2K7ZZ0v4VeE2oP0BSNMNAeWK+YWbYclMmKsOX8GF9XY5+t
wswXaLiVxdnxYFeduR5ASTrF9P5A8GFK0koE8Xmm+UqKVtkWkLV55j3dTutYeWBb
NIqwQUZYgsccnqIu3B6rc09MIhvda6aQrY9ffVGfX2RRPvQW+sn23ldn7pDimAPA
9QB7LtjkR7VNwu58OAsq54h5kVnHbM/VdfhviWSrA1DXZ/jTNwEfnac0Lle5MW7s
lyKYZt0+HUkOUbYAbmPdRHzflK15qzGfzEh5iCmB+GctyyJZenKkCw7FywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMhZD/gaOdJDv6EHXZIfp2p0pbH9MB8GA1UdIwQY
MBaAFMRjw0YDqUaVL/J24KJf02H8rPJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEdQRFJnT3BScFV2OG5iZ29sX1RZZnlzOGxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8yNGZhZTktZWQ4Ny00NGY2LWE3OTUt
MDA2NDIwZTQzNDRkLzEveEdQRFJnT3BScFV2OG5iZ29sX1RZZnlzOGxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8yNGZhZTktZWQ4Ny00NGY2LWE3OTUtMDA2NDIwZTQzNDRk
LzEveEdQRFJnT3BScFV2OG5iZ29sX1RZZnlzOGxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAop3aMG/n
iz4iHMdPQS2Y3B1t8j6ea4OFIYS/LDioIH07T9EopP0CrOwVmDaTYSBWWlz3LfQN
diYXZIKYyPobW4jSPtgGjN3H4fwiKsqsyX9KptN8EGgiaoaHqwMQ3zXHfy0WpmDX
r2QRQuXpgnYZxFuJ4N9nf2SR7kzO+ojT2Fzqt92eJFv5ycZl56RJ+3P5Ydtl5C8S
Bm/FS5/Pwv7P1Y+sDM0pXA4dELAM/OCwlj8dyy4Qn1fUvg0REXQRkR+sBfpOY5SV
vRXCSEE+xo8MtplTS5iW+s8ucwN+FoNa+jO8W2PfIdvngU9mP7qv6N0pBg58ur6s
bMybZYHfqkZmxQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:22 2026 by rpki-client