Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
File: x0yghVF4oM3XGRS88iOqMa9jaaQ.mft (raw, json)
Hash identifier: DKcL05C6FL2BUiBEiqnU6dKCQKgcMdbLRGsB4CL0fxA=
Subject key identifier: 22:E2:66:0E:E7:32:AE:8E:E4:79:55:7A:65:57:A2:AE:4D:41:55:03
Authority key identifier: C7:4C:A0:85:51:78:A0:CD:D7:19:14:BC:F2:23:AA:31:AF:63:69:A4
Certificate issuer: /CN=c74ca0855178a0cdd71914bcf223aa31af6369a4
Certificate serial: 019D333E745350472864CEC2850F235CBAAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
Manifest number: 10F8
Signing time: Sat 28 Mar 2026 07:00:24 +0000
Manifest this update: Sat 28 Mar 2026 07:00:24 +0000
Manifest next update: Sun 29 Mar 2026 07:00:24 +0000
Files and hashes: 1: 9sdNFthZZukD_uXtTd0XAPClQdY.roa (hash: tGqQPkljGMhWTFdHBoZoHHu7YzMwjEuFnjQUjnre+7E=)
2: x0yghVF4oM3XGRS88iOqMa9jaaQ.crl (hash: 1RFwmDqWHEziLPiisS5nczRXpUu6vGePXhE8xHCJHGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:74:53:50:47:28:64:ce:c2:85:0f:23:5c:ba:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74ca0855178a0cdd71914bcf223aa31af6369a4
Validity
Not Before: Mar 28 07:00:24 2026 GMT
Not After : Mar 29 07:00:24 2026 GMT
Subject: CN=22e2660ee732ae8ee479557a6557a2ae4d415503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:99:36:3f:4a:fa:22:c2:57:96:4a:c2:a1:c6:
82:6f:1a:d3:ae:89:fc:d0:2a:57:d9:aa:c0:24:ac:
83:97:63:57:b1:af:c9:43:fb:41:fe:e9:dd:5e:af:
3e:5c:13:ba:76:d5:c3:93:d8:f9:18:88:eb:a7:66:
c2:77:29:84:15:09:4f:62:0d:cc:5c:da:bb:71:3d:
8d:35:97:46:e3:f6:95:e4:ab:af:38:ed:4b:e3:58:
79:a9:68:75:5a:98:f9:2e:1f:93:5e:e1:ea:7a:b9:
ee:b3:2f:86:62:c6:71:0a:ad:ec:2f:ec:68:bc:61:
fd:e0:50:78:95:b7:87:5a:74:a3:54:48:66:60:84:
18:a1:7e:4d:e9:51:33:d7:b5:b5:cd:e5:83:01:01:
fe:66:5c:82:73:f9:fb:6e:15:59:50:ba:7d:64:74:
bc:f7:d9:ff:de:cb:eb:82:31:ae:a1:50:63:5c:4b:
5a:30:82:f9:7f:dd:f2:73:54:e5:04:69:bc:75:e9:
df:83:9b:d2:d8:e5:12:79:ac:9d:06:16:44:f9:fb:
59:a3:5c:a7:df:e5:26:07:15:19:62:0d:21:08:22:
0c:46:f9:f4:f9:51:97:58:e6:93:52:65:90:7f:7f:
12:f1:f1:05:6e:73:7e:ba:32:ed:e5:1c:aa:83:47:
a4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E2:66:0E:E7:32:AE:8E:E4:79:55:7A:65:57:A2:AE:4D:41:55:03
X509v3 Authority Key Identifier:
keyid:C7:4C:A0:85:51:78:A0:CD:D7:19:14:BC:F2:23:AA:31:AF:63:69:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:2a:6e:ee:ca:9a:b1:95:00:08:b9:9a:a4:2a:ae:50:34:97:
1b:e4:30:97:9b:bf:02:35:5d:94:c0:a0:84:2a:46:98:b7:5f:
1a:61:29:46:7f:63:c6:4e:c1:6a:0f:e4:db:9a:6c:e6:87:b6:
6f:32:d8:a8:3b:2c:ce:36:87:46:46:99:e1:1b:94:f3:11:3d:
40:5a:08:0d:c8:ab:a2:9f:8c:e0:89:04:e6:51:bc:83:a3:ba:
e5:52:dd:45:58:30:44:f9:74:c4:a5:e2:de:1c:00:e4:c9:e3:
1f:96:c5:f3:d2:15:7b:9f:02:f0:5e:9a:85:a0:1a:35:aa:4e:
e1:73:cb:93:40:0a:5b:77:b0:c1:48:74:3b:40:a8:88:e0:22:
d9:65:41:63:a9:19:cc:49:c9:a2:47:5f:6a:bd:6f:6a:50:e3:
89:e0:30:77:65:8b:57:c0:7e:e1:0c:bb:99:5e:41:fc:45:75:
27:2c:f0:90:89:ca:80:a6:51:cc:4f:e1:99:6b:22:c9:5f:92:
fd:78:2f:93:41:4f:7a:33:fb:b3:22:8c:91:e6:7b:31:01:81:
6c:1b:dd:96:8e:d6:4f:57:f0:c6:a8:4c:a5:61:08:76:c9:1d:
54:67:e9:9a:c2:0b:3e:32:9c:36:1a:59:bb:f4:93:81:5d:65:
27:d9:be:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 18:25:38 2026 by rpki-client