Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
File: xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft (raw, json)
Hash identifier: PnxS4ToxFExeSGBJ2UHFXcp/zuB+nsQIBoViqj/bdXs=
Subject key identifier: 22:CE:6D:D1:E3:C2:C3:ED:EC:26:CC:A2:47:4C:C2:91:9F:6D:A8:62
Authority key identifier: C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
Certificate issuer: /CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Certificate serial: 019CE447D2D6E5EA57B3C3B29A6171325B63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
Manifest number: 1875
Signing time: Thu 12 Mar 2026 23:00:37 +0000
Manifest this update: Thu 12 Mar 2026 23:00:37 +0000
Manifest next update: Fri 13 Mar 2026 23:00:37 +0000
Files and hashes: 1: 5nzdgTkkHsT4RLbgZ2GRcxsXvB4.roa (hash: qdwMngtFVt4ZyT/UodrlBdn1CZ1QUvtY6m9NXbdSStU=)
2: FCbP3k2rGutoC5ZIVI42Yy4D044.roa (hash: YEtesgH5hZKksi2t3ICvpYYP+6hkAxgaGRoHD54GMj4=)
3: wQTE-RQ3gReLtYxe4QY_Q7yg75Y.roa (hash: xzHJiZgBxtEtCYr9MbTY6G8tT0OCniElkcH6xF7+Cv8=)
4: xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl (hash: nwUUss17LSHtxFsBRQkcODfrhrlM6DraiGOFaRtNVlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:47:d2:d6:e5:ea:57:b3:c3:b2:9a:61:71:32:5b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Validity
Not Before: Mar 12 23:00:37 2026 GMT
Not After : Mar 13 23:00:37 2026 GMT
Subject: CN=22ce6dd1e3c2c3edec26cca2474cc2919f6da862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:51:9b:78:7c:ba:a8:0b:43:9e:6c:9c:2a:80:
8c:55:48:37:06:74:fc:cc:d2:f6:ea:91:c5:8e:7b:
97:2a:5b:dc:51:c1:d2:69:3c:42:89:6e:53:53:ca:
0e:1a:d3:41:fb:72:ad:c7:00:c8:48:0b:80:89:f1:
9d:92:96:60:44:20:0b:e9:9e:3e:be:e5:97:5e:20:
6f:b9:f7:18:17:1b:8c:3f:50:b5:71:18:82:45:a1:
17:10:53:f1:ea:50:cf:98:43:bf:fb:55:42:9e:e1:
98:d8:53:ba:88:c5:3a:4a:b3:2a:24:2b:56:d6:ef:
94:4f:bb:13:e6:b2:b6:55:d5:af:4e:e9:9d:62:05:
05:15:c3:07:70:b1:0c:26:3e:83:ba:0f:9a:fc:8c:
53:6e:4c:ab:6a:dc:31:3f:b6:da:d7:10:df:6f:fb:
22:8b:7e:52:eb:d3:81:5e:69:d3:eb:0d:95:27:7b:
57:02:c6:22:85:5b:63:4c:55:44:75:0e:fb:2d:08:
f4:7e:4c:ae:47:36:bd:02:c5:95:b7:90:55:b9:69:
ff:b4:79:67:23:e7:6f:2a:9b:fc:e8:7f:d8:e8:d5:
40:14:d0:29:5b:d1:f7:4f:bb:22:b1:bb:47:6b:cd:
6b:ab:02:06:2d:ed:17:ec:71:f9:74:a5:f0:6d:d6:
ef:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CE:6D:D1:E3:C2:C3:ED:EC:26:CC:A2:47:4C:C2:91:9F:6D:A8:62
X509v3 Authority Key Identifier:
keyid:C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:5b:1c:19:22:73:68:66:79:db:e7:aa:73:fa:42:ad:5b:38:
36:ba:82:cf:4f:5e:ea:04:26:9c:6e:7c:c6:44:73:d3:7c:5e:
b2:5b:ae:fe:b3:4a:b0:66:b7:2f:62:19:cb:ce:64:4e:eb:c7:
2f:8e:49:28:71:71:d0:4c:f8:34:50:60:69:65:aa:dc:2e:df:
38:2d:1b:85:e1:52:7c:95:05:f7:c3:42:a7:bf:7c:67:60:c8:
61:f4:02:f7:61:a6:5a:fb:0c:c9:9f:9c:eb:61:7f:f6:92:67:
8c:c1:e2:88:14:a9:4f:d1:82:bc:52:33:99:fc:10:0e:0b:3d:
93:dd:b2:4b:38:cf:41:a1:7b:77:22:8c:88:59:fd:03:fc:7a:
a6:40:4a:d6:8e:c5:34:f2:f0:ea:70:f3:d5:d2:5e:5d:b6:0c:
dd:9a:ce:42:0a:ec:a5:e2:4d:1f:3d:36:0e:39:08:9c:b2:a7:
5c:ef:bd:fc:03:0a:86:a8:ec:0c:17:58:b5:98:fb:98:04:8a:
ce:9a:18:0f:be:a4:df:53:74:59:4b:7f:e1:90:e4:d6:46:18:
03:81:96:b6:f4:f0:9f:64:e9:45:87:3e:e0:21:dc:b5:e3:21:
7c:48:41:68:5d:2f:6e:e9:02:3e:96:c4:12:42:4c:0d:dc:9a:
ca:58:4a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 01:29:19 2026 by rpki-client