Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
File: xOuh_fbE3hksHT7fioAMpZf5fWg.mft (raw, json)
Hash identifier: b2tC1pTWlJD961Wo6muIklokcrpov9DBNTQGI/t+u44=
Subject key identifier: A1:98:DD:F0:E9:14:C9:96:3B:7E:72:3E:AC:10:0A:B2:55:ED:73:9F
Authority key identifier: C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68
Certificate issuer: /CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68
Certificate serial: 019D37C029053A9C2A04922ED7ED533BE8D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 04:00:33 +0000
Manifest this update: Sun 29 Mar 2026 04:00:33 +0000
Manifest next update: Mon 30 Mar 2026 04:00:33 +0000
Files and hashes: 1: 2eq1zQiZruK_fgcYKv9VqgWsnLg.roa (hash: dGmPb+aKqyf+4gPgmSdPDA+kT9hY/m7lfSRDQRbeow8=)
2: asN3gxb8XZb5KqWRogBq6WRHiqA.roa (hash: Prp8LNadOYmrHAOgpcP5VxtRwnxwbuoePqoVUvrBJuc=)
3: xOuh_fbE3hksHT7fioAMpZf5fWg.crl (hash: D/pNx5e6p3YbhLj5Rv5rHYS22M7ruBufT1b/yQljAKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:29:05:3a:9c:2a:04:92:2e:d7:ed:53:3b:e8:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68
Validity
Not Before: Mar 29 04:00:33 2026 GMT
Not After : Mar 30 04:00:33 2026 GMT
Subject: CN=a198ddf0e914c9963b7e723eac100ab255ed739f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a7:33:d2:77:65:7e:42:50:0c:b9:24:94:c6:
32:ee:4f:1f:29:1f:d2:fe:ca:3d:26:ef:2e:21:66:
84:8e:d6:6d:a6:80:cd:41:c9:db:54:df:58:6f:c1:
2b:23:c5:40:8d:a1:c4:27:44:b5:4b:ff:b8:a0:65:
aa:e0:d9:5e:f2:0a:75:31:d6:3b:1f:a1:82:a1:c9:
96:1f:91:36:9a:98:75:0a:a9:8e:89:22:46:b0:de:
6c:9d:dd:15:70:f0:af:85:da:6f:7f:b8:23:e0:3c:
b2:07:0f:27:77:4b:83:17:5a:ef:f6:2c:7f:76:a3:
9e:ee:09:0d:77:62:0f:ff:19:28:8b:22:78:34:91:
fe:a1:19:0a:2e:3b:1d:eb:f8:29:0b:fd:fc:59:a9:
04:3c:0a:29:4d:67:bb:ee:dd:7f:62:53:90:c7:eb:
6e:46:1a:c3:ca:3b:1f:21:fc:32:f2:c2:af:3f:85:
ae:e5:22:15:d6:14:61:56:78:fd:2a:1e:58:ea:bd:
e9:c6:0c:60:68:f1:6f:d0:f9:61:20:f4:20:92:71:
05:9c:48:6b:3f:5d:e9:bd:81:c8:bf:f6:fa:45:bd:
ed:80:7e:4e:3c:7f:e9:0d:8e:e7:76:40:2e:5a:b3:
ed:c7:9e:87:fa:25:c1:ab:e9:91:08:2f:8e:f9:a1:
fb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:98:DD:F0:E9:14:C9:96:3B:7E:72:3E:AC:10:0A:B2:55:ED:73:9F
X509v3 Authority Key Identifier:
keyid:C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:eb:e1:5e:39:88:67:4e:c3:35:80:71:27:05:1e:59:f6:d7:
ec:a3:7b:31:53:9c:71:32:b6:f2:41:65:26:99:58:5f:e3:34:
86:6e:aa:fb:d9:25:04:fd:5f:5f:c6:0d:a2:d1:8c:41:09:7e:
24:b3:33:cd:b4:d5:be:8d:2f:59:f1:cb:25:59:54:15:6f:fb:
de:f4:a6:c1:5f:6a:08:7e:95:0c:c7:8b:14:97:2b:83:d2:65:
35:33:5a:43:be:4f:84:4a:58:ee:e7:94:e5:d4:af:25:ad:87:
d3:ba:6f:a2:05:af:d8:c7:56:f2:1e:2e:3d:e2:39:9b:20:d8:
ce:d0:a9:2f:8d:59:7d:bf:b2:db:61:a5:30:e2:c3:cf:95:f2:
9f:68:b9:ad:71:11:09:e3:a6:da:1b:3d:8c:49:e0:7a:a8:2f:
e3:4e:ba:89:4a:91:87:e1:73:e0:01:45:54:09:6e:fc:74:83:
6b:a4:75:a1:9c:1b:17:cd:76:07:3b:aa:e3:83:7c:4b:d4:54:
b2:71:a8:2f:ca:53:f6:18:fc:b4:5d:2c:46:ee:64:41:7c:5e:
a3:06:1b:5e:ff:a6:ba:10:b3:00:ff:fd:38:32:ae:ac:13:e5:
b6:b3:19:2d:2b:42:6a:aa:9f:1e:29:0c:cb:47:97:b6:c8:fc:
dd:3f:56:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:26 2026 by rpki-client