Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
File: xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft (raw, json)
Hash identifier: z4RhTwt50ecKjjO4pd7EwBiyTO2f+XdPqTNPhEmJyl4=
Subject key identifier: C5:21:45:D5:52:43:FA:52:01:CB:52:9A:93:EE:05:55:15:D9:91:36
Authority key identifier: C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
Certificate issuer: /CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Certificate serial: 019D3AC22BB241CC03A36A1547B40D79807C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 18:01:36 +0000
Manifest this update: Sun 29 Mar 2026 18:01:36 +0000
Manifest next update: Mon 30 Mar 2026 18:01:36 +0000
Files and hashes: 1: 7yu1vZA6sQopFbJ477QSAd_T4No.roa (hash: y294/GuVma254ox9Je2JWpyy0Aod0Bh8Uh2WyhLyqks=)
2: AOST2v0fOQI-ty-pWahAGdkHAEs.roa (hash: jxMvz/MnFmWAmclh3cHyqmlZEVpCA/u6934edlXvIDs=)
3: v92-Eaw03d123_02nzbPzAiBgtc.roa (hash: EG21x+MWDXMZMqTlMifEMC9yWAbNwFpO2h6QDrwu7Io=)
4: xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl (hash: 4bm112wsq95+ssaXyvSFmzkhWHKVZH1m2iDPSTKRCys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c2:2b:b2:41:cc:03:a3:6a:15:47:b4:0d:79:80:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Validity
Not Before: Mar 29 18:01:36 2026 GMT
Not After : Mar 30 18:01:36 2026 GMT
Subject: CN=c52145d55243fa5201cb529a93ee055515d99136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e0:fc:ca:76:49:eb:8f:20:05:be:05:4e:37:
68:4f:d0:df:04:e0:aa:a9:2d:51:17:ae:2e:e6:b6:
a1:c3:db:b4:1d:be:2e:0e:54:4f:3c:d8:97:26:35:
d3:66:d0:a5:69:d2:74:bc:2b:af:6a:6a:77:5e:f9:
42:ec:5a:8a:58:6f:6c:b3:3b:13:50:ac:0b:91:f0:
58:e8:fb:5f:cd:0d:ae:35:22:89:c2:2d:71:1b:2f:
68:ea:10:9d:d3:3b:e7:00:45:16:9d:55:f9:56:54:
60:df:27:d6:c5:b9:56:d3:8b:89:4c:cf:fa:bf:e5:
14:55:fd:56:ac:50:ea:5d:9d:71:bb:34:e1:d1:96:
19:46:ba:19:75:6a:1d:a5:f8:98:47:c5:77:a8:51:
37:4e:07:a6:c2:b7:92:6c:b6:ba:24:ee:46:6a:1c:
53:45:76:fc:35:0a:b5:d0:7c:d6:1e:30:3b:7c:6e:
1a:27:43:00:26:fc:18:88:f3:a0:e4:7c:a0:6f:52:
1c:65:b0:c8:ac:fc:3b:46:60:84:49:bd:67:e7:57:
31:4b:19:6c:33:01:68:bf:64:c8:12:71:70:f6:e7:
93:ad:22:90:19:89:a8:ac:ec:41:60:f8:9a:86:38:
43:5e:3e:4f:d2:ce:fa:28:1d:44:80:35:97:57:6f:
bc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:21:45:D5:52:43:FA:52:01:CB:52:9A:93:EE:05:55:15:D9:91:36
X509v3 Authority Key Identifier:
keyid:C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:7e:61:6d:49:a4:d8:eb:bd:0e:b6:70:19:92:e5:03:af:d7:
22:15:3c:08:b4:aa:3e:dc:d2:34:43:b8:6f:2e:2d:93:0a:02:
30:31:bb:8b:cf:ba:f6:e6:a9:f5:ed:a3:80:ee:04:3c:a5:6d:
6a:9d:5d:ab:0e:02:82:f1:bc:af:b8:61:0a:e2:3d:b1:11:fe:
3c:67:d1:f0:72:ee:a4:de:ea:60:0e:e0:d3:6e:01:43:d7:42:
4a:c9:f5:2b:9c:5c:e1:9c:fe:a6:14:6a:56:bd:fc:a5:ae:dc:
c3:82:b7:9a:6b:d8:00:d3:86:19:59:87:47:a2:83:03:c7:1d:
69:4f:4e:32:29:b4:df:df:9d:f4:46:e5:34:61:36:d2:2e:85:
38:d2:18:c0:95:bd:5e:a3:c4:bc:f9:47:06:fb:a2:d8:7a:c3:
8d:b7:59:ca:38:e1:2b:b8:d2:01:22:b8:73:d5:f4:c4:0c:bb:
33:fb:87:ff:66:e7:86:2f:87:64:f8:89:b9:eb:78:dc:de:ef:
65:d3:8a:b0:9e:21:e9:40:60:27:53:21:3c:09:8e:fa:eb:7d:
0e:48:56:cc:1e:66:d6:09:c0:2e:6a:49:87:a2:4f:dc:c8:f5:
a2:6a:f3:89:12:16:ca:70:24:a5:91:2d:bf:b3:cc:7d:7d:c6:
8a:46:6e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:16:50 2026 by rpki-client