Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
File: xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft (raw, json)
Hash identifier: Xioh9pSAo/YM5xjrA4LpzbysQQ7q5ZPUF6G+eEz/xZU=
Subject key identifier: 3D:98:E4:BA:C7:9D:63:98:CB:D1:BB:21:D6:0A:EF:11:DF:FB:B1:7C
Authority key identifier: C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
Certificate issuer: /CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Certificate serial: 019D3A1C8269A296209E149C277B3E6275CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
Manifest number: 1897
Signing time: Sun 29 Mar 2026 15:00:40 +0000
Manifest this update: Sun 29 Mar 2026 15:00:40 +0000
Manifest next update: Mon 30 Mar 2026 15:00:40 +0000
Files and hashes: 1: YYRSpcNyohXAVMmCQRhhQXcor54.roa (hash: fuXM313ONuqmW2wV79N+ZCUER2LAZ4hkP7+nINYw4hI=)
2: iKpp3qI47nAdkGSzRA3WViJJwfU.roa (hash: cua53JtZVRFiG1D02IQc2WZ6uSxKMIhsPK5IrnlN2iI=)
3: vkpwNDj7xXwx6pMj2XVWZxBCxc4.roa (hash: YGEdE5O7bWJqyVhJI5l0CUgDvZQQki89nPNnaYxZHCc=)
4: xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl (hash: fuchO0XkKm/rSDo5CYRwH6AMu52hn8X328LDyM/xuHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:82:69:a2:96:20:9e:14:9c:27:7b:3e:62:75:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Validity
Not Before: Mar 29 15:00:40 2026 GMT
Not After : Mar 30 15:00:40 2026 GMT
Subject: CN=3d98e4bac79d6398cbd1bb21d60aef11dffbb17c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ed:db:09:29:fd:5e:a6:89:c1:b5:0a:31:3a:
10:16:3e:e6:46:fe:65:1f:99:4c:b4:4d:a1:b6:22:
3c:c2:76:d1:3e:55:ff:74:79:ec:2a:ac:c9:b5:d8:
98:1e:d5:ae:92:f0:7e:ab:3f:8c:a5:85:3f:37:8f:
b9:b5:53:33:43:9a:20:5c:7d:7f:ba:fc:5b:53:43:
f4:43:3d:87:7d:60:8d:58:f3:66:ac:b4:e3:7d:2c:
c2:9f:0a:bb:bf:a4:33:9f:4a:57:f8:6e:30:b8:5f:
c8:a8:4c:70:25:e9:95:68:a2:e5:8b:af:01:b0:7f:
9c:b9:f1:b7:f4:2b:d0:26:cc:40:b1:0d:33:34:af:
1b:64:98:33:d1:ce:4b:20:53:cd:34:a5:a4:72:cc:
d6:15:49:20:16:08:f3:e0:8d:c3:ff:00:ab:a9:70:
ee:83:07:00:03:ee:e6:8b:ac:87:d8:b7:13:b5:1f:
34:1b:bd:e4:e3:84:77:6c:11:50:79:b3:7b:b0:69:
6f:c5:0e:87:e7:15:5f:ee:c0:75:e7:d9:01:d1:06:
0f:98:74:02:43:04:6a:36:06:17:80:ad:93:d9:b4:
b2:0b:d8:6e:f5:52:20:bc:eb:ad:26:de:9f:01:1b:
5b:9d:b1:7b:dd:8e:2f:52:2d:2d:c9:0b:c7:cd:d0:
ea:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:98:E4:BA:C7:9D:63:98:CB:D1:BB:21:D6:0A:EF:11:DF:FB:B1:7C
X509v3 Authority Key Identifier:
keyid:C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:7b:d5:f7:9c:65:f2:7c:a7:da:bc:97:b4:6f:53:42:05:a5:
b2:58:26:5d:ae:0d:7f:15:5c:e1:76:a5:3e:77:69:21:a8:54:
b5:c9:a6:be:a1:a0:cc:4c:38:93:62:19:46:71:6a:51:74:ed:
a4:bb:52:36:17:9a:fe:0e:0a:2e:52:c5:4f:fe:f0:f9:cd:b0:
3b:cb:be:1d:3d:b6:b7:61:0a:ac:04:d7:aa:a3:e9:2b:0f:c4:
f4:51:b0:bc:b9:f5:bb:d5:d1:96:e1:d5:16:a7:a8:07:d0:c7:
77:76:ce:2b:34:0d:74:52:0f:28:85:45:02:e2:78:2d:61:53:
46:f1:14:90:2f:e2:db:ce:9f:02:58:a8:21:3f:d4:78:a6:9c:
2f:34:da:dd:e0:cb:4d:6c:a5:ef:08:f0:67:6a:ee:bd:c4:a3:
38:cb:31:39:00:84:1e:55:a1:18:e7:a3:5a:5e:4a:df:0b:a8:
59:73:f2:5d:3e:b7:55:16:99:06:a2:5f:37:e7:e1:8b:17:44:
e1:04:b2:67:3f:1e:36:fe:23:1d:04:6b:4a:d6:a4:0e:3d:74:
26:19:e6:91:ab:df:b1:69:2b:c3:ae:69:fb:b2:67:8f:6f:01:
34:0f:ee:21:b9:b2:b2:7b:7c:72:df:ed:ed:30:76:bc:08:d2:
24:1c:6c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 22:06:08 2026 by rpki-client