Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/b8aeef-6889-4614-b7fc-5c75c3f421f5/1/x1VP0-E7SlDB2HSCp0N7gcY-mVE.mft
File: x1VP0-E7SlDB2HSCp0N7gcY-mVE.mft (raw, json)
Hash identifier: QAB/i7K1dcATymLgBv+B1byPhGSltYk84CrfwD6xfy0=
Subject key identifier: 41:CA:F6:F2:45:96:31:CC:99:2C:63:5A:B0:53:F1:82:55:DA:B8:1E
Authority key identifier: C7:55:4F:D3:E1:3B:4A:50:C1:D8:74:82:A7:43:7B:81:C6:3E:99:51
Certificate issuer: /CN=c7554fd3e13b4a50c1d87482a7437b81c63e9951
Certificate serial: 019D386571B4B4183FBD7FBD837F6635C0B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VP0-E7SlDB2HSCp0N7gcY-mVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/b8aeef-6889-4614-b7fc-5c75c3f421f5/1/x1VP0-E7SlDB2HSCp0N7gcY-mVE.mft
Manifest number: 17D0
Signing time: Sun 29 Mar 2026 07:01:05 +0000
Manifest this update: Sun 29 Mar 2026 07:01:05 +0000
Manifest next update: Mon 30 Mar 2026 07:01:05 +0000
Files and hashes: 1: b6Lf3I0HlauTHnUuGmmLuCNwsAE.roa (hash: KijRIA7qKwkEizHIArRbDBK9UDc+o2TKpuLXk0/8BMg=)
2: x1VP0-E7SlDB2HSCp0N7gcY-mVE.crl (hash: 3Ba7sLaJmKjs1zSxYcO1gCShorYs3sLxnn0k91tWYbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/b8aeef-6889-4614-b7fc-5c75c3f421f5/1/x1VP0-E7SlDB2HSCp0N7gcY-mVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/b8aeef-6889-4614-b7fc-5c75c3f421f5/1/x1VP0-E7SlDB2HSCp0N7gcY-mVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1VP0-E7SlDB2HSCp0N7gcY-mVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:71:b4:b4:18:3f:bd:7f:bd:83:7f:66:35:c0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7554fd3e13b4a50c1d87482a7437b81c63e9951
Validity
Not Before: Mar 29 07:01:05 2026 GMT
Not After : Mar 30 07:01:05 2026 GMT
Subject: CN=41caf6f2459631cc992c635ab053f18255dab81e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:62:f4:da:50:95:b5:b5:33:21:43:61:26:2f:
1b:69:ac:cc:8f:98:d7:4d:fc:06:d4:21:db:03:ca:
eb:0a:71:38:df:71:69:33:98:18:d9:7e:d7:8c:18:
70:aa:cd:2e:39:d2:f2:1d:ff:08:f3:2f:dd:f5:43:
b9:de:93:b3:22:ba:8d:0f:22:a3:96:9c:a0:e5:36:
1d:9c:1d:c2:90:62:f0:cc:10:62:37:ba:a2:7e:bb:
ba:f8:49:32:6a:a0:24:96:8f:88:6c:0e:1b:53:eb:
c1:b0:49:17:c0:c0:45:aa:ec:cc:d6:8d:dc:56:9c:
a5:a2:5f:c5:e5:aa:9f:7a:4e:27:61:c0:f0:9a:57:
16:2b:7e:ff:5f:b4:8a:e9:a3:aa:42:7f:f1:dd:73:
e1:dc:27:24:c1:88:e6:59:ab:3f:57:62:c0:66:3c:
26:80:cc:d3:2e:2e:82:5c:5c:e8:84:04:b8:8f:92:
09:f4:4e:d1:c3:f3:c1:67:90:23:3f:50:60:db:98:
ff:99:12:47:6e:5c:67:f5:c6:47:eb:0a:3e:9e:ef:
65:56:fc:f9:43:91:8c:f5:de:f9:8c:5a:9c:b6:da:
4a:92:8c:5f:c1:f1:e6:ba:b3:21:a9:3a:66:a5:61:
48:03:c6:b1:73:8e:4b:0a:21:1d:7e:32:c3:f3:d4:
0e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CA:F6:F2:45:96:31:CC:99:2C:63:5A:B0:53:F1:82:55:DA:B8:1E
X509v3 Authority Key Identifier:
keyid:C7:55:4F:D3:E1:3B:4A:50:C1:D8:74:82:A7:43:7B:81:C6:3E:99:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VP0-E7SlDB2HSCp0N7gcY-mVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b8aeef-6889-4614-b7fc-5c75c3f421f5/1/x1VP0-E7SlDB2HSCp0N7gcY-mVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b8aeef-6889-4614-b7fc-5c75c3f421f5/1/x1VP0-E7SlDB2HSCp0N7gcY-mVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:36:02:f4:1b:1d:da:f3:0e:16:f6:7c:7b:a0:40:57:68:12:
fd:f3:45:5e:c5:db:75:18:95:cc:9a:bd:a1:9f:1d:5c:b1:b6:
59:81:65:0a:f4:9a:2f:43:f7:bf:df:1f:9b:98:c3:40:8b:e0:
6f:d4:a6:37:7a:ef:26:e3:84:b3:9b:12:86:38:4b:e2:62:20:
32:dd:1d:74:36:6b:c2:2f:bd:37:3d:12:c6:a3:64:a1:36:63:
f1:11:47:be:0d:37:14:93:0c:be:30:6a:2c:30:d3:97:e1:80:
da:74:27:0f:77:3f:58:fe:f6:56:6a:23:f8:a1:7a:a6:12:01:
63:c8:29:6e:bf:7b:27:2c:3a:6f:e0:c1:65:d1:67:d7:ad:dd:
ee:88:c2:69:3d:c5:a1:7e:25:85:ee:4b:66:08:b4:a2:15:91:
67:39:48:30:8a:49:b1:99:6d:e7:13:d0:b0:23:e3:51:b7:34:
58:f9:74:e7:0b:17:06:b4:02:f1:6e:99:87:3e:9e:0f:ad:d5:
98:29:cf:70:3a:78:7b:81:f1:f3:12:1a:46:05:b6:ac:46:1c:
62:c3:ac:e6:fc:ff:02:f1:c9:c2:fe:bd:ca:85:be:62:a8:73:
1f:76:20:03:2c:b7:d4:4a:92:68:5a:38:10:a9:50:9a:c0:c7:
5c:5d:86:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:48 2026 by rpki-client