Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
File: xqvTc8xZUGDxozB2tT4RYlEsPNc.mft (raw, json)
Hash identifier: tvkhyRBbn3vnVwSOxcw0CcTA+8ZodkE7HJyzf9Xp41Y=
Subject key identifier: AC:68:DF:66:69:91:8A:7B:78:1A:40:79:F3:F3:08:DA:9D:3F:09:75
Authority key identifier: C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7
Certificate issuer: /CN=c6abd373cc595060f1a33076b53e1162512c3cd7
Certificate serial: 019D37C0F43799D894CB8FA445EAA39A567A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 04:01:25 +0000
Manifest this update: Sun 29 Mar 2026 04:01:25 +0000
Manifest next update: Mon 30 Mar 2026 04:01:25 +0000
Files and hashes: 1: 5AsWyF1f4ujjHWSDojwUCJzIsQo.roa (hash: i1HUG5lw4XQU4xSl9+H4tPoxXwRgahcdEdU4boFga8o=)
2: aTIoEqt3GwezbAZZTmKXYT0O0SQ.roa (hash: K+hfO/BW2nP6cpPF3ceYJcKox+Ctdij1CCqhzl808Eo=)
3: xqvTc8xZUGDxozB2tT4RYlEsPNc.crl (hash: Mg4HvR/eJbUMZuMA/AQUH5+BdOjAVXgGFoKpS8IKX6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:f4:37:99:d8:94:cb:8f:a4:45:ea:a3:9a:56:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6abd373cc595060f1a33076b53e1162512c3cd7
Validity
Not Before: Mar 29 04:01:25 2026 GMT
Not After : Mar 30 04:01:25 2026 GMT
Subject: CN=ac68df6669918a7b781a4079f3f308da9d3f0975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0c:7c:e7:ab:fe:f6:e0:83:58:c5:a2:85:7f:
8c:61:24:61:c3:16:d7:28:ae:55:3d:c8:e2:b2:d4:
0b:fe:1a:d0:9c:79:82:49:89:c1:cb:91:58:21:2d:
9f:52:14:12:c0:cb:20:e0:61:4b:0f:87:df:28:de:
2b:0d:22:ae:ac:2b:43:41:1d:23:26:42:9e:66:d5:
e9:01:6a:f7:6e:4d:04:ee:df:48:ce:76:d9:b5:df:
09:de:c1:ea:82:bf:47:78:0c:4c:51:b0:75:e9:d2:
61:37:96:22:76:ef:2b:fc:a5:9b:d5:b1:70:8f:29:
7b:ee:f6:dc:65:47:aa:ba:df:de:62:ba:ce:56:9c:
69:fc:7d:09:e9:e2:b8:32:cf:93:02:b6:85:20:5c:
47:f9:48:f8:87:5c:03:79:55:e1:c8:70:c8:4e:77:
cc:9e:e6:37:93:bb:f7:c7:0a:e7:27:4f:7f:3a:2b:
a9:28:f8:01:8f:d0:d3:65:d6:a5:c2:72:36:88:30:
93:bf:10:06:35:88:ce:10:33:d1:a8:6d:8a:40:59:
d0:fa:cc:57:31:b3:d8:49:11:44:a6:3c:00:d8:a7:
8d:be:00:29:f7:59:83:92:12:6b:70:bc:1a:33:78:
64:ad:11:04:9d:8b:4b:7e:47:69:b3:14:f4:cb:b6:
1e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:68:DF:66:69:91:8A:7B:78:1A:40:79:F3:F3:08:DA:9D:3F:09:75
X509v3 Authority Key Identifier:
keyid:C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:05:f6:84:e4:6c:af:be:c9:f3:e9:de:ec:60:f2:fe:a9:e7:
34:1e:8d:50:e9:f2:93:5a:80:4f:d9:dd:54:20:d1:e5:bb:9c:
ca:50:11:10:df:33:02:a0:9a:69:83:47:89:84:aa:d8:b6:75:
9e:d5:28:cc:6c:86:d4:b3:f1:b6:cc:2a:cb:a3:6c:f0:78:73:
bf:36:58:a1:90:0e:78:04:5c:ae:af:21:37:76:1f:01:dd:59:
53:87:c0:ca:11:66:c5:3f:e4:f8:a6:41:5d:6d:af:ba:40:bf:
17:9c:21:e7:9e:84:de:6c:34:f0:56:c7:5b:7f:04:b6:3a:5f:
d8:ce:c8:57:0b:fc:3f:33:f6:cc:df:01:4c:01:10:f0:b5:9b:
53:2b:1e:45:4a:c6:75:44:a3:f9:ec:d6:8c:1a:80:48:97:98:
83:b7:15:d4:9f:b4:93:81:fd:0b:cf:b7:b6:ac:83:c3:0e:92:
a6:54:4f:97:b9:c8:7d:2c:e1:da:4c:e7:3f:09:e0:01:9a:13:
6d:16:fd:69:e9:23:2b:e5:7f:4a:3f:07:a7:ec:f2:86:f2:8b:
06:33:c3:13:26:5f:cb:a5:fa:b4:e5:51:86:5d:31:74:03:c6:
6d:fe:b6:dc:1c:89:f0:a8:6b:99:7e:04:12:a1:99:04:79:26:
19:74:c2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:06 2026 by rpki-client