Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/4c18da-4f54-4203-ba75-53a5d322bcc3/1/C8XuRXN7LZSa5t8lkGox-VkD-Fk.mft
File: C8XuRXN7LZSa5t8lkGox-VkD-Fk.mft (raw, json)
Hash identifier: CCwZPbfHEneohTryeLiBe26I0ggTNZhT1x8uCjLYB8o=
Subject key identifier: 0F:D4:3D:B4:21:C3:CB:A4:4C:0D:52:58:16:0B:34:ED:F5:C2:3D:7A
Authority key identifier: 0B:C5:EE:45:73:7B:2D:94:9A:E6:DF:25:90:6A:31:F9:59:03:F8:59
Certificate issuer: /CN=0bc5ee45737b2d949ae6df25906a31f95903f859
Certificate serial: 019D37F759D7479FA7A3F0F6E3FF1FDDA1D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8XuRXN7LZSa5t8lkGox-VkD-Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/4c18da-4f54-4203-ba75-53a5d322bcc3/1/C8XuRXN7LZSa5t8lkGox-VkD-Fk.mft
Manifest number: 21
Signing time: Sun 29 Mar 2026 05:00:50 +0000
Manifest this update: Sun 29 Mar 2026 05:00:50 +0000
Manifest next update: Mon 30 Mar 2026 05:00:50 +0000
Files and hashes: 1: 2ki4F5C_f4OJd8bWDxEOfjMY2BA.roa (hash: SNZLfY0Dnu+nD0hrhPKZ/k/SnrH65xlGDQNmAoLOL0k=)
2: C8XuRXN7LZSa5t8lkGox-VkD-Fk.crl (hash: /ks1WRj5E7FsyZiIlV47IzPPQkWjN1Koekpdn3plDP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/4c18da-4f54-4203-ba75-53a5d322bcc3/1/C8XuRXN7LZSa5t8lkGox-VkD-Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/4c18da-4f54-4203-ba75-53a5d322bcc3/1/C8XuRXN7LZSa5t8lkGox-VkD-Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8XuRXN7LZSa5t8lkGox-VkD-Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:59:d7:47:9f:a7:a3:f0:f6:e3:ff:1f:dd:a1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc5ee45737b2d949ae6df25906a31f95903f859
Validity
Not Before: Mar 29 05:00:50 2026 GMT
Not After : Mar 30 05:00:50 2026 GMT
Subject: CN=0fd43db421c3cba44c0d5258160b34edf5c23d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:12:20:27:46:f9:eb:99:1d:48:f5:df:c9:17:
c0:b5:5e:ca:d8:dc:78:8f:31:65:ea:f3:0e:40:1f:
88:b8:03:95:b7:66:c1:5e:22:17:ba:e3:8e:24:19:
65:63:e9:80:96:f7:bb:22:a5:1b:1f:c5:0f:d5:03:
b1:09:df:31:24:b9:82:6d:b1:01:63:4b:ab:4b:1c:
6d:d6:64:0f:9c:16:05:90:4b:d7:f3:e3:7f:97:63:
da:d5:a8:2e:b1:33:37:4a:ad:0f:d1:d5:2b:57:ff:
16:1a:80:3c:08:5d:1c:ba:b9:2d:3a:6f:d6:a1:f5:
6a:b8:ea:10:71:50:23:c5:4c:c8:8b:58:f7:0c:77:
c1:e1:f3:45:85:59:8b:79:d2:36:5d:57:0e:9c:28:
ce:6f:81:28:64:3a:38:06:7e:ba:87:9f:58:bd:89:
a1:c4:ae:36:e3:dd:4f:1a:e0:2c:53:bf:ec:63:94:
a1:8d:7e:2e:27:2c:d5:04:01:22:89:f7:99:3d:11:
c5:4a:37:8a:11:d9:99:6f:80:60:b1:6e:02:d0:65:
c5:09:b7:9b:f5:40:4d:85:51:8d:d1:23:70:ee:e6:
c9:30:6e:95:44:da:ff:c2:00:17:39:6c:13:a9:2f:
12:7f:19:80:51:36:3d:12:c3:f9:a2:d6:12:14:a5:
7d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D4:3D:B4:21:C3:CB:A4:4C:0D:52:58:16:0B:34:ED:F5:C2:3D:7A
X509v3 Authority Key Identifier:
keyid:0B:C5:EE:45:73:7B:2D:94:9A:E6:DF:25:90:6A:31:F9:59:03:F8:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8XuRXN7LZSa5t8lkGox-VkD-Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4c18da-4f54-4203-ba75-53a5d322bcc3/1/C8XuRXN7LZSa5t8lkGox-VkD-Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4c18da-4f54-4203-ba75-53a5d322bcc3/1/C8XuRXN7LZSa5t8lkGox-VkD-Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:9d:46:00:36:d8:ad:65:0e:4a:19:84:3f:f5:3e:6c:66:56:
f4:d3:f2:75:b5:d9:56:26:e7:a6:18:b4:cc:d5:ee:97:57:73:
47:ed:32:08:95:a7:d3:8d:10:83:ca:21:01:15:9c:71:93:0c:
d2:34:e5:25:4b:04:af:7b:38:f1:26:94:0b:f0:25:19:19:6b:
f4:de:69:07:c4:64:9b:a1:e2:06:43:97:1e:e1:26:e6:68:b0:
5f:4b:57:d2:d6:4c:02:fe:aa:58:9d:d7:c2:45:bc:56:c1:ae:
63:19:f4:67:d1:7b:d1:39:85:3d:c7:af:ca:41:88:09:63:0c:
7e:d3:15:ab:4b:d6:31:86:69:63:44:0d:80:bd:52:81:dc:8f:
fc:8e:ec:13:ca:de:ff:ea:1b:e3:a3:92:91:1c:e7:1d:40:5a:
10:c7:a9:e1:a6:62:61:f2:0a:45:e9:f0:0d:74:be:87:e8:6a:
9d:62:77:b1:e1:90:07:3c:5c:12:eb:c8:4d:84:26:04:e0:c4:
b6:23:d1:d7:78:02:9e:21:b4:88:a7:0c:f0:ee:13:dc:17:80:
e4:64:6b:af:af:8f:c0:74:d2:97:cf:34:41:99:d0:29:87:87:
08:9e:bc:c5:bc:ba:28:bd:c5:2e:f8:f2:eb:30:97:59:35:98:
35:f6:ba:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:28:12 2026 by rpki-client