Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
File: xmpfK0aNs161Yr034fNuzqgTzKw.mft (raw, json)
Hash identifier: 95R2HBLgWNDKOS/FAiLRL1OwtPalT9cf/fiUkgQIcXU=
Subject key identifier: E6:78:D2:66:7C:4F:25:7F:5D:7E:0B:D1:19:6D:E0:06:07:CF:06:0F
Authority key identifier: C6:6A:5F:2B:46:8D:B3:5E:B5:62:BD:37:E1:F3:6E:CE:A8:13:CC:AC
Certificate issuer: /CN=c66a5f2b468db35eb562bd37e1f36ecea813ccac
Certificate serial: 019D3A5421CBBDDA7758BAB9805306CA7747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 16:01:25 +0000
Manifest this update: Sun 29 Mar 2026 16:01:25 +0000
Manifest next update: Mon 30 Mar 2026 16:01:25 +0000
Files and hashes: 1: nd2ovDlF_Zmo_XxAGJs-agTwP6k.roa (hash: wKDGlke9HUoxSKsazb91lMdI0w1rZkvOiuN/NBOarjE=)
2: xmpfK0aNs161Yr034fNuzqgTzKw.crl (hash: 0DfRUDIUCGtq8tYMFOLJUmJV2vItNtj7+kbYj8MKq5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:21:cb:bd:da:77:58:ba:b9:80:53:06:ca:77:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66a5f2b468db35eb562bd37e1f36ecea813ccac
Validity
Not Before: Mar 29 16:01:25 2026 GMT
Not After : Mar 30 16:01:25 2026 GMT
Subject: CN=e678d2667c4f257f5d7e0bd1196de00607cf060f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bf:f1:16:eb:16:75:79:c1:c0:33:41:b0:b8:
e1:7f:ec:d3:3d:94:49:18:66:7f:5e:26:fb:75:d5:
40:e2:22:75:16:ef:bd:9b:e9:06:03:e5:7b:71:22:
23:46:3a:b6:84:36:79:68:a7:8b:5a:b5:8b:f4:95:
a5:41:1e:ae:25:52:92:6c:01:ff:4f:74:ca:be:98:
9d:6d:b3:bf:3e:ff:05:ca:51:f7:18:ba:b0:be:24:
e8:66:f3:65:7e:45:7b:60:e9:bd:9a:81:2c:20:31:
89:63:40:91:9c:78:b8:aa:f7:60:87:47:9f:3e:18:
fc:70:cf:8b:c1:11:8c:a3:c8:a9:7e:57:ba:46:a6:
37:c7:72:84:22:3b:28:6f:2a:47:9e:7f:c7:72:d3:
a4:47:a9:84:7a:6d:ed:25:9b:10:13:c7:0b:0e:82:
78:fa:87:4a:ca:0e:90:64:8e:61:85:84:17:72:7b:
6f:a6:bf:79:22:4a:cc:01:b4:57:11:9f:4e:37:0a:
00:78:71:bb:9b:f8:a1:2b:04:79:ad:a9:23:87:0a:
5b:b1:e0:ac:a1:f9:6d:80:0f:26:09:da:6b:e6:7f:
e1:2e:c9:c9:fa:08:49:27:80:f1:53:e5:67:1b:78:
65:d5:47:03:2e:96:86:e0:c8:c0:2a:b7:ec:54:17:
53:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:78:D2:66:7C:4F:25:7F:5D:7E:0B:D1:19:6D:E0:06:07:CF:06:0F
X509v3 Authority Key Identifier:
keyid:C6:6A:5F:2B:46:8D:B3:5E:B5:62:BD:37:E1:F3:6E:CE:A8:13:CC:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:25:50:b4:41:64:a5:0d:33:d2:50:b1:fb:f4:93:40:49:51:
c6:79:e8:7c:7c:34:ad:10:56:07:82:c8:a6:1d:f2:0e:9b:bc:
4a:d5:a5:28:e4:b5:3c:e6:80:66:3c:3f:67:29:b9:f6:4c:18:
e6:a3:33:58:e5:b4:b4:c4:f2:d4:ef:4c:60:82:8d:0b:f7:c9:
7b:a2:c5:df:5d:81:5a:46:5f:ec:d9:ca:cc:e4:dc:95:8d:db:
c6:fb:e0:45:0d:c9:82:df:40:af:7a:d1:ae:4d:fc:f9:27:c5:
9d:01:bc:5a:44:4c:2e:d1:4e:28:0b:a1:73:8b:b7:aa:91:6a:
04:92:6d:95:f2:5d:0b:1c:d6:0d:e8:de:53:e6:85:c3:13:ca:
1a:f5:e4:4c:2f:5b:59:8c:c9:1b:1e:4e:2b:28:72:6e:48:83:
69:1d:81:8c:60:44:93:d9:00:e1:85:67:d2:a6:9d:1a:ab:ec:
ca:85:20:18:c0:d1:0e:eb:3c:51:4e:fe:db:09:b0:55:10:cf:
61:bf:c6:0f:50:95:b0:4a:88:19:86:7e:18:7b:2b:11:b8:ea:
9e:4f:8c:f3:09:64:84:12:fd:bd:51:e4:4d:b4:5f:ca:ad:ce:
dc:59:27:02:f3:40:13:0d:3d:c2:8d:d9:e5:ba:7b:8e:2a:23:
25:ae:2f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:30 2026 by rpki-client