
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
File: x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft (raw, json)
Hash identifier: 1KOQ35yQPNwJlPk6NmI6QrwfRumLWOhPITryJkWiceU=
Subject key identifier: 18:BF:0B:EF:C1:CA:4C:06:12:64:8E:37:1E:F9:43:03:AC:9C:9E:C2
Authority key identifier: C7:82:73:5A:A9:8D:46:45:D0:41:09:3A:76:62:A1:23:79:50:3A:31
Certificate issuer: /CN=c782735aa98d4645d041093a7662a12379503a31
Certificate serial: 019D38D31B2FBBEECE240BDA398B3F66596F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
Manifest number: 105B
Signing time: Sun 29 Mar 2026 09:00:52 +0000
Manifest this update: Sun 29 Mar 2026 09:00:52 +0000
Manifest next update: Mon 30 Mar 2026 09:00:52 +0000
Files and hashes: 1: 8Oob-MaKU0NvwXJUiKMB7ekq4Cg.roa (hash: 63MHEzPjU99WPqV+lKCTZbVzEP7CPni86OEOEBrlKcE=)
2: x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl (hash: RWcsMSjNbYxPdlCBD/VLF2X8LNjUJCmROgSHpV+Kupo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:1b:2f:bb:ee:ce:24:0b:da:39:8b:3f:66:59:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c782735aa98d4645d041093a7662a12379503a31
Validity
Not Before: Mar 29 09:00:52 2026 GMT
Not After : Mar 30 09:00:52 2026 GMT
Subject: CN=18bf0befc1ca4c0612648e371ef94303ac9c9ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8b:8c:7c:3b:64:8f:2b:af:74:b8:b1:e2:b0:
46:28:a5:3d:05:03:12:e6:4e:28:09:5a:19:21:9c:
4f:54:b0:47:1a:dd:b0:7b:28:c8:a5:1c:3b:39:fb:
52:ce:87:eb:38:10:af:a7:76:7b:34:fd:f3:72:ae:
27:8d:e3:84:39:cd:cc:5b:42:fa:b3:e3:08:a1:fd:
83:80:3b:30:e8:5f:e0:1a:f3:58:2e:52:6f:16:10:
5a:ba:6b:47:4b:b8:ae:b4:4a:a4:88:7b:64:ee:d2:
23:7d:92:7a:8b:28:68:8c:80:e0:80:1c:2c:63:7c:
f2:59:52:18:b7:1d:8d:e8:54:ac:f7:89:88:70:ec:
c5:ff:8e:8f:f1:8f:d4:a4:98:b0:22:6d:d0:36:c2:
a8:b3:33:21:a3:1e:df:6e:b1:32:35:d2:12:09:b3:
e7:92:11:21:22:4f:62:ec:63:07:98:ba:de:4c:e8:
b0:59:4c:f3:30:4f:74:c2:f9:09:e8:64:5a:49:90:
d4:1f:0b:02:ec:39:d2:cf:76:cc:52:b8:b6:c1:84:
57:2e:28:6a:28:49:17:5d:94:3e:3c:93:c4:26:12:
d1:bb:52:dd:b0:36:f5:94:a9:c9:58:ee:02:b1:06:
ff:22:8e:5f:1d:a8:d6:32:c6:fd:85:75:5a:80:21:
d4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BF:0B:EF:C1:CA:4C:06:12:64:8E:37:1E:F9:43:03:AC:9C:9E:C2
X509v3 Authority Key Identifier:
keyid:C7:82:73:5A:A9:8D:46:45:D0:41:09:3A:76:62:A1:23:79:50:3A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:1e:00:79:3f:ee:35:0e:2d:17:97:b9:b1:9c:af:ea:69:e2:
a8:6e:1c:95:fc:b2:e3:6c:3a:78:d9:26:4d:35:e0:7f:19:17:
e0:be:1c:0f:19:96:20:06:77:c6:30:44:39:e8:cd:e9:e7:b3:
e5:e4:02:80:0b:e5:0c:f5:21:e3:55:ad:c3:53:d3:e6:1d:09:
15:b7:a0:47:91:7f:22:f3:50:1d:78:0f:41:6c:80:41:db:19:
3a:b0:a9:ab:e7:3e:bf:25:20:83:4c:db:5f:60:2d:84:b8:8e:
e3:e4:6f:ef:f9:33:dc:9f:94:93:44:d9:a8:22:bf:75:a1:4a:
c8:fc:24:39:9c:8b:a5:e7:ce:a3:96:d4:4b:cf:a2:0e:b2:da:
3e:46:1e:af:1e:cd:1f:06:30:bd:43:3a:0e:98:38:0c:ed:ac:
d5:bc:eb:48:50:f9:a2:3c:d1:af:9b:2a:57:7c:7e:c5:8b:e7:
5c:25:f7:42:5b:7c:27:8c:03:54:52:b4:dc:eb:90:5d:6e:29:
c8:bd:d3:79:76:4d:41:9b:66:d0:6b:99:f1:6b:5b:cb:84:7d:
43:c0:e6:da:f8:bb:c6:0d:f5:ff:3a:e1:e5:32:e7:90:18:ea:
d0:30:67:5d:47:3c:6f:05:7f:7b:0e:3f:e9:2f:a9:10:58:eb:
77:50:11:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:09 2026 by rpki-client