Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
File: xKPrF197V5BsgPUI4V9j4D8Lfvg.mft (raw, json)
Hash identifier: LwNM1//wd4zZXkE5UClS5TZpgUbaoawFDn0zHazAd5w=
Subject key identifier: 66:13:27:08:72:10:B8:D0:B3:46:C7:A4:74:FE:1C:2C:CF:3E:8F:81
Authority key identifier: C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
Certificate issuer: /CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Certificate serial: 019D382E2DCDEA51CFB22A349F34C427B18F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
Manifest number: 182C
Signing time: Sun 29 Mar 2026 06:00:43 +0000
Manifest this update: Sun 29 Mar 2026 06:00:43 +0000
Manifest next update: Mon 30 Mar 2026 06:00:43 +0000
Files and hashes: 1: mTuVuiw3HM2pBIheqITWSq5I3n0.roa (hash: Ipl/v3cZkycb4zTv5tbg7JdjHKPt6S5to0wny64/QVQ=)
2: xKPrF197V5BsgPUI4V9j4D8Lfvg.crl (hash: SMT/Zmi3lwVz/aE86H6WdNFK/hMX4DDVF18CGCWK3E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:2d:cd:ea:51:cf:b2:2a:34:9f:34:c4:27:b1:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Validity
Not Before: Mar 29 06:00:43 2026 GMT
Not After : Mar 30 06:00:43 2026 GMT
Subject: CN=661327087210b8d0b346c7a474fe1c2ccf3e8f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:30:7f:29:0a:33:bf:8f:94:ee:99:f6:6c:04:
85:bd:80:52:9a:be:20:45:7d:11:c8:9d:82:68:66:
a1:0b:27:15:51:69:30:6a:22:b3:57:b2:dd:fe:b5:
e9:9b:80:66:38:d5:5f:28:64:01:6f:70:b3:30:4e:
f5:28:17:cf:e7:a9:6f:6a:6d:e9:d2:c1:e4:5e:f2:
0a:30:f9:e9:29:25:ce:78:f2:f9:ab:2f:81:72:d2:
f4:93:08:fc:41:92:e6:c8:6a:77:24:97:dd:ae:55:
ba:9f:6c:c8:3c:b6:2a:6e:95:a9:50:72:a9:88:a4:
58:11:15:bf:5c:ee:bc:fa:ff:93:09:75:d2:c6:37:
ac:98:e5:62:0d:19:88:3c:ee:93:7e:47:82:f1:71:
60:90:85:d9:31:45:c3:90:9b:3d:22:51:f4:79:2e:
3e:9f:80:b8:94:03:21:07:c7:d3:95:05:84:4b:54:
7b:43:27:15:ca:b3:8e:2e:3c:fe:6e:b2:27:ec:bc:
69:13:cd:fe:71:dc:a7:eb:00:c1:d3:30:5e:2f:5b:
6b:f8:d0:43:2e:cc:93:0e:72:c7:ea:69:ba:a9:54:
42:e7:e9:53:99:66:9c:d2:8f:12:e5:a5:b3:46:52:
81:e1:4d:72:10:a1:d3:d9:0b:1c:7a:25:2d:40:82:
5b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:13:27:08:72:10:B8:D0:B3:46:C7:A4:74:FE:1C:2C:CF:3E:8F:81
X509v3 Authority Key Identifier:
keyid:C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:7f:6d:d4:7a:cf:cf:18:a0:96:fb:e9:3b:1c:f8:5c:9e:53:
8b:ae:13:10:a0:7a:84:9a:db:85:24:44:e7:2d:cc:7a:32:e9:
3f:46:80:31:f3:de:30:7c:48:40:a0:05:33:00:14:00:aa:19:
85:ad:c3:a0:06:01:1e:ae:23:8d:ac:83:c0:c2:08:36:06:9e:
36:16:10:6c:e4:9a:d0:07:f9:9d:f6:5c:e6:11:d2:ea:c2:da:
91:30:50:0f:43:1a:c7:a6:16:50:3c:20:41:a1:50:42:c6:42:
02:c3:84:9c:7e:20:52:d5:f2:4e:80:75:b5:56:63:aa:2c:8d:
e8:8d:3e:80:d6:52:27:12:15:be:88:58:72:ad:05:a0:12:db:
31:2e:af:68:2c:66:6b:ae:e3:c6:e8:72:45:4c:c1:97:56:de:
8b:10:9b:33:b1:bd:c3:80:0f:27:c6:5b:cf:a3:3b:b5:8f:63:
95:f6:d7:53:32:5d:86:64:83:79:a6:7a:59:62:a6:f9:5e:c5:
2e:ff:d6:e6:d7:79:66:e1:91:5e:35:c9:ed:59:17:61:5e:ed:
62:a2:3a:dc:d5:38:8a:9a:5e:1c:ef:03:f4:c6:9f:71:58:05:
ac:3c:37:01:37:a6:11:d4:ca:89:8d:08:72:20:3d:67:ab:0b:
40:09:83:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Li3N6lHPsio0nzTEJ7GPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YTNlYjE3NWY3YjU3OTA2YzgwZjUwOGUxNWY2M2UwM2Yw
YjdlZjgwHhcNMjYwMzI5MDYwMDQzWhcNMjYwMzMwMDYwMDQzWjAzMTEwLwYDVQQD
Eyg2NjEzMjcwODcyMTBiOGQwYjM0NmM3YTQ3NGZlMWMyY2NmM2U4ZjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TB/KQozv4+U7pn2bASFvYBSmr4g
RX0RyJ2CaGahCycVUWkwaiKzV7Ld/rXpm4BmONVfKGQBb3CzME71KBfP56lvam3p
0sHkXvIKMPnpKSXOePL5qy+BctL0kwj8QZLmyGp3JJfdrlW6n2zIPLYqbpWpUHKp
iKRYERW/XO68+v+TCXXSxjesmOViDRmIPO6TfkeC8XFgkIXZMUXDkJs9IlH0eS4+
n4C4lAMhB8fTlQWES1R7QycVyrOOLjz+brIn7LxpE83+cdyn6wDB0zBeL1tr+NBD
LsyTDnLH6mm6qVRC5+lTmWac0o8S5aWzRlKB4U1yEKHT2QsceiUtQIJbqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYTJwhyELjQs0bHpHT+HCzPPo+BMB8GA1UdIwQY
MBaAFMSj6xdfe1eQbID1COFfY+A/C374MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEtQckYxOTdWNUJzZ1BVSTRWOWo0RDhMZnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS83Zjc3YmQtYjMwMi00OTMzLWE1Zjkt
ZmNiNGQyMGJjZDc1LzEveEtQckYxOTdWNUJzZ1BVSTRWOWo0RDhMZnZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS83Zjc3YmQtYjMwMi00OTMzLWE1ZjktZmNiNGQyMGJjZDc1
LzEveEtQckYxOTdWNUJzZ1BVSTRWOWo0RDhMZnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoH9t1HrP
zxiglvvpOxz4XJ5Ti64TEKB6hJrbhSRE5y3MejLpP0aAMfPeMHxIQKAFMwAUAKoZ
ha3DoAYBHq4jjayDwMIINgaeNhYQbOSa0Af5nfZc5hHS6sLakTBQD0Max6YWUDwg
QaFQQsZCAsOEnH4gUtXyToB1tVZjqiyN6I0+gNZSJxIVvohYcq0FoBLbMS6vaCxm
a67jxuhyRUzBl1beixCbM7G9w4APJ8Zbz6M7tY9jlfbXUzJdhmSDeaZ6WWKm+V7F
Lv/W5td5ZuGRXjXJ7VkXYV7tYqI63NU4ippeHO8D9MafcVgFrDw3ATemEdTKiY0I
ciA9Z6sLQAmDWw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:13 2026 by rpki-client