Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
File: xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft (raw, json)
Hash identifier: 41/kP7CA8s637a/3vl0O0zMyIIZiUefyLVTTAhk1D7A=
Subject key identifier: 7B:E8:5F:D2:DA:27:21:75:A5:DA:A7:B1:82:B0:62:97:EB:9D:EA:B4
Authority key identifier: C6:9C:EB:12:40:84:4C:DE:8A:16:88:97:E4:7C:1D:F5:D6:EC:BF:21
Certificate issuer: /CN=c69ceb1240844cde8a168897e47c1df5d6ecbf21
Certificate serial: 019D3A1C8EFDA7384B1CEBFA2AA459E75B2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 15:00:43 +0000
Manifest this update: Sun 29 Mar 2026 15:00:43 +0000
Manifest next update: Mon 30 Mar 2026 15:00:43 +0000
Files and hashes: 1: BQk9R-N3GOOYrja30Pn_XVDUf88.roa (hash: Yweym3mWkXHkGOyAmG6nDG9vHGdFCmlWDKJNXExlolQ=)
2: Z16EOuIvCScFGsV_p1V2RWzx1ZA.roa (hash: rAhtAVQwXrS7vputjJ+v+BvlJ+PvCNgskZKO8Cfnpys=)
3: xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl (hash: bOn8RMJGPZn6rvA8krU2a8lMHjWtgl/9kPAdD7Fr1Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:8e:fd:a7:38:4b:1c:eb:fa:2a:a4:59:e7:5b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69ceb1240844cde8a168897e47c1df5d6ecbf21
Validity
Not Before: Mar 29 15:00:43 2026 GMT
Not After : Mar 30 15:00:43 2026 GMT
Subject: CN=7be85fd2da272175a5daa7b182b06297eb9deab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:09:92:ba:48:63:16:a8:63:36:6e:53:e5:c0:
26:a9:5b:28:07:58:67:a9:c7:c0:b7:46:3a:d9:79:
e3:6c:12:e5:c1:da:5a:87:e5:0e:70:62:5b:1a:aa:
32:3a:92:71:20:a4:e6:ea:54:b7:0c:0c:b9:7d:dc:
39:59:d3:75:2a:7d:28:f9:d1:12:f2:8b:8f:e3:c3:
db:61:27:aa:6a:48:2e:33:58:50:cf:36:37:40:d3:
83:97:48:5e:a8:ca:18:b9:a5:dc:3c:cc:e9:cf:aa:
95:f5:22:6c:53:2f:d2:ae:b3:f0:d6:5e:02:0c:a7:
a8:ec:77:84:b3:48:27:33:ea:73:2f:91:02:a1:80:
c6:e6:ee:8b:1d:25:a4:f2:f9:5c:08:7f:19:ae:72:
f0:11:04:54:6f:a8:d0:ff:71:87:ad:1c:a4:4f:d2:
14:2c:92:8e:08:96:39:da:75:e7:bb:2f:ae:b1:ed:
86:09:81:2b:bd:b9:2f:6c:3a:06:ab:5d:11:42:cb:
69:40:b1:a4:23:de:2f:4d:96:70:dd:54:97:46:72:
dd:0b:8d:ce:48:2e:96:25:ee:06:6e:cb:ac:2c:d1:
50:1b:cf:ab:a7:ab:f6:44:1e:f0:66:9e:86:4f:69:
bd:39:75:25:85:47:fa:90:65:ba:68:67:aa:7b:fb:
34:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E8:5F:D2:DA:27:21:75:A5:DA:A7:B1:82:B0:62:97:EB:9D:EA:B4
X509v3 Authority Key Identifier:
keyid:C6:9C:EB:12:40:84:4C:DE:8A:16:88:97:E4:7C:1D:F5:D6:EC:BF:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:d1:45:da:2d:a2:14:db:d7:ad:02:d8:14:e3:c8:46:a4:7e:
46:f0:a8:cc:a3:11:2f:c9:59:d7:bf:d9:1d:7d:6c:4c:a7:ae:
29:34:1b:f6:86:6a:f4:14:f7:10:6e:ca:e9:f2:ec:eb:11:71:
1d:75:61:23:7d:39:1f:df:ad:8a:b1:0e:70:ad:dd:39:69:87:
fc:74:1e:a8:4c:4a:31:82:84:17:ca:73:9f:f5:f1:84:d6:e4:
1e:07:7a:02:8f:bb:b9:29:4b:77:a4:db:fc:81:dc:d4:45:d3:
df:c4:28:c0:1f:00:ea:99:83:ca:c3:19:2e:26:68:e1:9f:39:
f9:fe:40:fc:d1:c7:a4:ad:39:75:be:e8:8d:ec:74:bf:11:f8:
54:a2:16:39:26:54:5b:c2:26:68:83:55:51:9c:be:5e:6e:c5:
d3:48:d8:7d:53:70:36:c9:7c:eb:17:7f:11:dd:8a:12:14:8f:
a6:cb:e8:25:2a:9f:10:74:50:2b:23:7c:1f:d1:99:4a:80:c1:
bd:5f:23:1f:77:6b:32:4c:59:00:8b:bf:92:84:98:29:46:83:
b6:9b:5f:19:13:13:94:5e:c5:88:f3:46:5d:23:d6:d7:6c:f9:
f4:27:40:c2:7e:6f:fa:a6:1a:5f:a4:d2:a3:80:fc:2f:33:fd:
5d:23:94:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:02 2026 by rpki-client