Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
File: xN8L0EqoQ-aAgvbezgeYcytviDI.mft (raw, json)
Hash identifier: dQtr2FhPWMHmOh10XflD2uYcE15pW9uW+onNmdZ2GC4=
Subject key identifier: FE:74:BB:2B:07:CC:DD:A8:92:DA:E8:CF:5F:27:43:1F:9A:21:D6:2C
Authority key identifier: C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
Certificate issuer: /CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Certificate serial: 019D389C2B847A0DFE3C945D2DE9B3E08730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
Manifest number: 1821
Signing time: Sun 29 Mar 2026 08:00:51 +0000
Manifest this update: Sun 29 Mar 2026 08:00:51 +0000
Manifest next update: Mon 30 Mar 2026 08:00:51 +0000
Files and hashes: 1: Bufh8fLfGuFcJIRDH90wZyey3vQ.roa (hash: 97pbnQhhP+W/DGuiQ6yzPinj80mmymwV5CPqsqreqm0=)
2: aCjEV-QnOk8LOF5MzDA0-UkFuK4.roa (hash: Xqrg7NBvSV9yvVpUUwp51n6WbUWMsfHL/0GgkjRTj1U=)
3: gjKej6nLmog1Pdhy2m7-nfTgjGw.roa (hash: q4iLVi9p7pL885pUO6lukqaAAVZW6+EWxQvMee6AK60=)
4: phc_rWomL_SloTsFG0Feb3oexB8.roa (hash: vPwplBARp1RlzeoBKfqMgLEmEz1s7NkUpEh7QDk9mPM=)
5: xN8L0EqoQ-aAgvbezgeYcytviDI.crl (hash: CV6hYysA9ksrzsahE7ch9t++QkSiJdUrRF78V9JWk5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:2b:84:7a:0d:fe:3c:94:5d:2d:e9:b3:e0:87:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Validity
Not Before: Mar 29 08:00:51 2026 GMT
Not After : Mar 30 08:00:51 2026 GMT
Subject: CN=fe74bb2b07ccdda892dae8cf5f27431f9a21d62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5a:a7:37:52:57:1b:c9:a8:18:62:cf:eb:c5:
51:5f:6e:b2:bc:fc:74:75:b7:f4:be:bc:93:98:72:
8c:a7:89:9d:8f:4c:76:58:41:03:e3:39:f5:65:66:
16:1f:6b:79:4d:bc:1e:e2:6c:9b:75:95:7d:f7:d1:
11:2a:70:2c:2c:c0:22:0d:90:a8:08:8d:d2:4d:04:
19:7e:0c:b0:f8:30:e4:af:94:08:d3:13:0e:ba:d9:
cd:ab:93:66:1a:ed:2e:1f:23:56:f8:6d:ae:f9:f2:
ac:d0:7f:f0:7d:62:a4:0a:dd:f5:b3:53:b9:3f:c6:
79:b4:40:34:a8:60:70:83:35:31:19:81:5d:2c:cc:
ff:7c:f5:db:57:99:5d:dc:d2:17:a9:b5:d2:3e:56:
00:82:34:56:94:91:d0:d2:e2:f7:87:32:af:a7:e0:
86:7c:a1:8c:10:da:b2:21:f1:5f:dc:65:a2:e6:f6:
71:03:e9:a6:75:cf:fb:fe:ff:b4:6b:f7:70:01:91:
00:3e:d6:ad:d8:fa:3c:a2:cc:2d:09:f1:3d:c5:33:
e9:d4:7a:24:e2:6a:d1:78:37:58:80:f8:fe:c9:38:
f6:c0:98:03:59:99:d6:af:00:76:ff:f0:2e:0c:ac:
c4:5d:3d:f1:9a:2a:3e:56:d0:a0:68:91:1c:a2:fc:
84:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:74:BB:2B:07:CC:DD:A8:92:DA:E8:CF:5F:27:43:1F:9A:21:D6:2C
X509v3 Authority Key Identifier:
keyid:C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:6c:a4:fe:e3:59:7a:ca:0e:49:56:5b:70:6a:c7:b3:c0:2a:
f6:c6:1c:fe:44:40:2e:32:b8:57:ac:6e:98:20:db:f5:65:ab:
23:31:87:b2:9a:e5:d1:96:a1:1b:df:3a:46:c2:89:e2:5b:46:
27:83:2f:71:13:7c:e9:cd:28:f1:43:6c:34:61:58:7f:31:5c:
e9:28:1b:6e:90:3a:12:2a:80:54:e9:4e:3b:5d:97:d5:8d:fa:
ca:15:f9:2b:54:55:24:bb:71:1f:25:6f:28:e9:76:1e:08:d7:
1c:b4:70:36:1c:12:06:05:8c:6e:ee:b3:87:ca:43:bb:94:64:
18:26:b3:31:e5:84:be:a3:79:6c:76:f0:0e:0b:79:92:da:12:
63:b9:98:15:69:ee:7a:7d:2c:68:b9:21:68:65:49:df:ed:61:
b0:91:9a:54:56:3e:87:08:08:c9:4f:49:1f:a7:2b:94:44:fa:
a5:96:33:48:51:b7:0f:30:19:d3:a5:5d:38:95:6f:8b:e6:87:
61:3e:44:3b:49:f9:88:ce:79:5e:8a:35:7e:00:bf:7a:89:be:
fd:ea:fd:cb:32:74:2a:fc:ff:9b:cc:9a:89:70:b9:a8:52:0a:
2c:2f:f3:13:8c:4b:cb:d4:0e:1c:c1:dc:26:69:d1:e9:34:a8:
8c:2d:4d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:43:01 2026 by rpki-client