Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
File: xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft (raw, json)
Hash identifier: rtMy0BOD56UIDSzJteGcSTiYitYVudXNI9eQueQKh3c=
Subject key identifier: 62:B8:9E:38:AA:DF:05:89:6D:7A:F9:B6:01:96:FE:9C:E6:6E:AB:B1
Authority key identifier: C5:9C:41:DA:F0:09:2B:70:3B:C0:59:BA:13:53:F0:71:ED:12:19:9B
Certificate issuer: /CN=c59c41daf0092b703bc059ba1353f071ed12199b
Certificate serial: 019DCE6319A5159758DA6BB6B9274FFB1EA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
Manifest number: 1870
Signing time: Mon 27 Apr 2026 10:01:34 +0000
Manifest this update: Mon 27 Apr 2026 10:01:34 +0000
Manifest next update: Tue 28 Apr 2026 10:01:34 +0000
Files and hashes: 1: 8cS6Qj5MYE4B8boPnbZ2kcXbU-k.roa (hash: AKR29eJxFVsOMPaiI3uGdOD049mIqIl+nuPgud2mgtc=)
2: xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl (hash: 5mhf8VQVXcS3Ve8LdfcMKajaoEz8lan3fZVDmH6EOEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:63:19:a5:15:97:58:da:6b:b6:b9:27:4f:fb:1e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59c41daf0092b703bc059ba1353f071ed12199b
Validity
Not Before: Apr 27 10:01:34 2026 GMT
Not After : Apr 28 10:01:34 2026 GMT
Subject: CN=62b89e38aadf05896d7af9b60196fe9ce66eabb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:49:47:a6:83:76:bb:85:02:4c:ed:65:6b:5e:
c0:35:30:df:c3:54:31:59:9b:28:6c:4e:70:7b:0b:
23:64:85:89:22:9b:cc:54:98:5e:1e:3f:24:45:1a:
6c:3f:5e:ca:2e:1c:90:db:60:44:28:0d:66:9e:91:
50:50:b6:92:22:99:c2:ca:f0:b2:03:d3:4e:32:76:
bd:94:79:56:fc:be:16:bd:c3:db:39:09:06:be:b9:
57:3b:af:d5:3c:ee:f1:02:da:1d:ab:aa:4b:fd:76:
78:7a:18:69:18:21:fe:7a:e4:ab:66:78:9f:55:27:
5d:d1:4e:91:4c:ff:fd:04:fb:c5:00:57:10:b4:44:
51:c6:ba:0b:fa:ed:c2:d1:ed:bc:91:67:63:62:c1:
18:1a:ca:21:e7:11:8d:22:c6:be:0c:cb:aa:a4:0d:
f8:c4:26:d2:b3:ab:e4:3c:07:83:32:ac:1e:72:bc:
d2:5c:74:6f:18:f9:07:ea:8e:ed:78:b3:e1:4c:4b:
41:42:12:ba:d9:be:00:f7:21:a3:17:9c:93:b2:5d:
cd:5c:73:04:30:24:3a:c1:41:06:43:b4:dc:b0:2e:
dd:15:eb:7f:4a:46:d1:1a:75:d6:75:98:20:42:5f:
c6:a8:2b:f1:e4:82:ca:98:0d:a4:f6:39:c5:0c:a6:
6b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B8:9E:38:AA:DF:05:89:6D:7A:F9:B6:01:96:FE:9C:E6:6E:AB:B1
X509v3 Authority Key Identifier:
keyid:C5:9C:41:DA:F0:09:2B:70:3B:C0:59:BA:13:53:F0:71:ED:12:19:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:bf:3c:89:8e:bf:72:4e:ab:f2:29:a1:4f:6c:04:cd:c1:d2:
06:cb:46:36:e3:b1:44:7e:f7:e8:77:de:d0:33:4b:d5:b6:09:
12:89:5f:e8:4d:6d:5a:ee:da:c7:e4:19:40:c7:4b:5f:e8:d6:
29:bf:f0:98:08:62:21:b0:48:7b:1b:0f:8c:31:91:a1:36:77:
fb:d4:a6:e7:4e:22:45:28:0d:44:4b:d9:de:3b:b2:e5:c3:9d:
d4:19:2a:f8:54:01:d7:9d:9a:fd:ed:f1:3c:5d:b7:68:de:86:
52:f0:0c:33:5c:62:73:a8:79:6c:7a:d6:b2:83:2b:26:d4:1a:
39:81:4b:7a:73:96:49:47:10:ef:b3:7a:78:c7:bb:07:ab:f0:
c7:bf:5d:5a:5c:10:2a:b0:44:85:8e:ec:78:89:6f:bb:72:55:
02:d0:1b:5c:d6:ce:d8:8d:fd:66:9a:8f:1a:22:df:0f:cc:cb:
66:e1:95:14:91:6c:8e:28:ef:58:5b:cb:46:33:63:98:a5:ba:
24:cb:f5:a8:ee:6d:fc:16:80:80:bf:8d:cd:d2:a3:5e:84:4b:
1e:71:87:9e:0e:6c:8a:ac:9e:83:60:1a:f8:cb:64:61:ec:83:
a9:b8:04:61:5a:05:38:bd:5f:22:0e:5e:e4:9a:99:f4:db:35:
40:ad:c9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:25:00 2026 by rpki-client