Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
File: x2oNsIMDONLSlh5Mj_sKtaA__l8.mft (raw, json)
Hash identifier: +JA116ZHDJs+01EvT25z8DhQKG10tLpwSe1YSDljxo0=
Subject key identifier: 75:81:E2:53:6A:46:BE:28:06:34:B0:4C:09:71:BD:C9:77:73:5E:FA
Authority key identifier: C7:6A:0D:B0:83:03:38:D2:D2:96:1E:4C:8F:FB:0A:B5:A0:3F:FE:5F
Certificate issuer: /CN=c76a0db0830338d2d2961e4c8ffb0ab5a03ffe5f
Certificate serial: 019D39413DF56031CB6BC00E860464BB2CFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
Manifest number: 131B
Signing time: Sun 29 Mar 2026 11:01:09 +0000
Manifest this update: Sun 29 Mar 2026 11:01:09 +0000
Manifest next update: Mon 30 Mar 2026 11:01:09 +0000
Files and hashes: 1: c50lvA8Sv1SylXjp89qLN1R1K0Q.roa (hash: H5BoXSVjiAe/7XcTXvyS3Sc4Z7PHgmQ7yK1Eha9K6xk=)
2: x2oNsIMDONLSlh5Mj_sKtaA__l8.crl (hash: zC9ls5EJmrwssveo8rQ3+zFzZPGiMxRzqoxTWkvK9SM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:3d:f5:60:31:cb:6b:c0:0e:86:04:64:bb:2c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76a0db0830338d2d2961e4c8ffb0ab5a03ffe5f
Validity
Not Before: Mar 29 11:01:09 2026 GMT
Not After : Mar 30 11:01:09 2026 GMT
Subject: CN=7581e2536a46be280634b04c0971bdc977735efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c3:56:72:8a:be:b6:2e:24:0a:e1:b9:8c:38:
ec:85:56:c0:2c:21:11:82:e7:c0:07:a2:53:3f:13:
e0:cd:f1:1c:98:81:dd:5e:4a:f9:48:9d:a8:db:40:
0d:1d:80:69:92:16:96:15:b9:8a:42:15:ab:4e:14:
94:9d:5f:dc:f4:6e:ef:e0:e3:9a:03:50:12:8f:cb:
d7:9d:e4:2f:5a:50:e4:43:42:b3:65:b6:f4:f2:60:
18:b7:8a:cd:9e:c4:56:ba:87:20:60:64:ad:f9:3b:
70:00:e3:b6:6b:ab:11:e3:51:15:2b:40:1a:cb:de:
ba:a7:7b:ea:f4:11:c7:29:9e:83:10:90:68:e1:67:
ec:ec:12:ee:6a:08:66:fa:77:ac:c5:6b:54:92:26:
bf:a1:ea:e1:d8:e0:8d:44:87:f6:4d:17:af:ab:e6:
50:e8:c7:26:e1:2c:b4:bb:c7:fc:a6:d6:02:2a:1d:
76:33:85:3e:0d:0c:91:b3:ef:aa:52:34:ef:9a:8a:
73:eb:d0:aa:72:8b:f3:4a:b0:04:b6:84:2f:2d:54:
72:21:c2:24:ad:da:74:dd:b0:ee:6f:ee:74:69:19:
12:8d:67:cc:29:68:9b:9c:94:57:8b:95:6d:52:a5:
5d:5c:f0:53:f1:b0:d4:0d:6f:e1:ca:9b:75:b1:03:
2d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:81:E2:53:6A:46:BE:28:06:34:B0:4C:09:71:BD:C9:77:73:5E:FA
X509v3 Authority Key Identifier:
keyid:C7:6A:0D:B0:83:03:38:D2:D2:96:1E:4C:8F:FB:0A:B5:A0:3F:FE:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:17:96:03:62:b2:ab:83:1a:a9:45:5d:5b:6a:af:14:97:83:
5d:92:f8:7f:83:36:28:6c:2c:60:68:c7:2a:31:7a:0a:4b:51:
66:10:fa:1e:81:4d:a5:d1:6d:2e:7d:70:69:4a:2c:16:3b:c4:
50:9c:53:4a:74:2d:c1:38:84:fa:43:1d:27:f9:79:34:4a:c3:
95:54:69:d8:29:c7:90:e2:77:55:1c:31:53:66:7b:af:94:74:
98:b2:ba:b8:6f:ae:22:a2:29:79:61:5c:84:60:50:22:83:a5:
33:0f:83:ae:af:b4:89:0b:d5:4b:7c:33:f8:c2:0a:a2:ec:ca:
2b:f9:8f:49:5f:48:34:de:6f:f0:d2:63:5e:fd:a8:48:b7:e7:
ab:ec:a6:c0:e7:c9:a5:e2:55:4d:47:f7:84:c8:c9:41:8b:b9:
d2:dd:cd:e9:01:a0:4d:1b:f4:11:4e:64:70:19:88:93:27:9c:
bc:4b:51:29:7a:fe:66:0b:1c:a7:7b:39:89:af:61:04:58:c9:
87:1f:1e:04:44:1c:cf:15:70:44:09:2a:00:d5:5c:9f:58:00:
a7:53:d6:07:3a:9d:4e:50:c7:ae:56:1f:53:1e:11:bb:aa:aa:
96:b1:d9:34:00:ba:35:80:a3:08:ff:d6:69:ab:f6:28:2e:76:
2e:d7:b7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:25:45 2026 by rpki-client