Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft
File: xhMz0OgQeIbQMFx72BvdNUiVJ64.mft (raw, json)
Hash identifier: gvcbLWIi+WYz8Te5SweQlJv0ckW6JhOGSb/VoWBJkog=
Subject key identifier: F4:57:1C:31:52:04:54:20:19:75:D0:EF:35:F1:D9:ED:99:F3:9D:08
Authority key identifier: C6:13:33:D0:E8:10:78:86:D0:30:5C:7B:D8:1B:DD:35:48:95:27:AE
Certificate issuer: /CN=c61333d0e8107886d0305c7bd81bdd35489527ae
Certificate serial: 019D39AEA40D34A066104A250C6A5810F878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 13:00:39 +0000
Manifest this update: Sun 29 Mar 2026 13:00:39 +0000
Manifest next update: Mon 30 Mar 2026 13:00:39 +0000
Files and hashes: 1: 5ie9J9ix6eo_LjO_d-h0wTlK5sY.roa (hash: hY4eQy4LzjSe1EFCcdEhDwEocsy77V2cxczGFy9ZGiM=)
2: D0Omi7eTzuK_0HEfZBlA62fHv-s.roa (hash: 0MjChUFTQrOrybRBrDN8jiZf3suuubHFJss7LSX+W2A=)
3: xhMz0OgQeIbQMFx72BvdNUiVJ64.crl (hash: H+6CuctWtZKsHrAFdkM0jSoMr2dbYGljP8MMYeRQA00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:a4:0d:34:a0:66:10:4a:25:0c:6a:58:10:f8:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61333d0e8107886d0305c7bd81bdd35489527ae
Validity
Not Before: Mar 29 13:00:39 2026 GMT
Not After : Mar 30 13:00:39 2026 GMT
Subject: CN=f4571c31520454201975d0ef35f1d9ed99f39d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:34:9a:7d:0c:ef:0a:2d:4a:51:4f:4f:30:dc:
89:cf:78:00:b6:fe:4b:6e:1e:0f:23:4b:15:4a:2e:
13:f6:3c:96:59:fb:ae:85:fa:16:6a:0a:01:17:d6:
64:b4:37:e7:d3:db:b0:de:7f:68:93:5d:fc:a3:f4:
c5:f0:c5:ff:94:5a:fa:76:eb:5e:04:fc:c7:fc:ec:
6c:12:56:de:d8:c5:47:56:96:8d:4f:c2:a8:75:a2:
28:b4:09:21:fa:99:00:b7:0a:2e:5d:55:f7:85:0c:
7d:05:43:7b:be:4c:67:88:28:9c:b6:5e:c3:4c:e9:
04:d2:d0:d7:5f:3d:10:f4:45:96:56:57:0a:9b:1f:
33:81:38:c8:3a:a9:2c:40:51:5f:d7:d7:97:94:06:
47:d0:e2:68:79:82:91:b6:58:6c:0f:52:a5:dc:0b:
5a:8d:7e:f4:dd:04:07:9d:2b:23:c0:48:93:f9:48:
bf:4b:40:a1:8d:85:81:bc:0c:f2:52:f5:4e:95:ac:
a8:5a:85:74:1f:cb:e4:a0:a9:72:62:df:90:6e:e4:
17:48:f2:4a:6a:f1:25:06:ae:3d:ad:28:bd:9e:50:
f2:43:5f:92:07:ca:91:ec:34:c1:62:6d:6a:5d:e5:
17:61:65:13:70:0d:62:4f:3c:46:e5:d8:3e:6a:4d:
bd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:57:1C:31:52:04:54:20:19:75:D0:EF:35:F1:D9:ED:99:F3:9D:08
X509v3 Authority Key Identifier:
keyid:C6:13:33:D0:E8:10:78:86:D0:30:5C:7B:D8:1B:DD:35:48:95:27:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e3:09:ee:fd:df:f4:6f:37:55:a4:d3:b2:32:d0:19:b5:6f:
a6:71:6e:ce:19:b6:1e:81:99:bf:20:49:a6:21:f6:30:81:be:
dd:ca:13:fd:f6:f9:d2:02:96:b7:df:5a:48:4f:e8:e0:07:b7:
d2:70:1a:d9:08:81:8f:de:3b:35:ef:a1:b4:1f:16:54:21:c0:
a5:fa:45:48:a3:3c:38:c5:77:58:84:46:54:e4:fe:22:e6:6d:
45:cf:15:33:22:8a:15:24:73:d3:b4:b2:2a:e3:a3:93:e7:5b:
48:66:4c:51:70:e7:40:5d:8f:d9:57:8f:9c:fe:1a:38:78:4c:
6c:bb:80:49:5a:4c:a7:3b:1e:f1:4d:94:b9:2f:bf:55:47:f1:
6f:a0:f5:83:33:ae:30:03:a8:7b:f3:e5:80:56:99:e0:9b:80:
4a:b6:fc:a2:0d:4b:9b:3c:96:3f:4a:8b:26:9e:4d:b3:fb:77:
35:f7:82:62:5a:1d:2d:1a:b8:7d:50:86:2c:ae:74:71:88:09:
b9:b0:7f:a7:25:90:0f:26:e3:3f:c8:82:eb:9a:24:72:08:f7:
44:d3:aa:87:21:dd:56:d0:e2:81:29:01:f3:01:33:7c:58:6e:
b0:b6:6c:f3:5a:eb:02:2b:b9:86:50:49:de:18:5c:68:de:95:
42:bf:b2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:51 2026 by rpki-client