Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
File: xFP14jBCC8SnDQph3jtH3NoajQ4.mft (raw, json)
Hash identifier: k6O3DmgTfp1Wocww24VS0gUwS7rAPmI7a3uuL/j7I7s=
Subject key identifier: 51:B0:A4:45:1C:D4:1D:B5:8D:8F:3F:40:1A:A4:EA:83:18:78:B5:7A
Authority key identifier: C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
Certificate issuer: /CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Certificate serial: 019D37C0A9F09E729A4BEA24DDAE56ECC7DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
Manifest number: 17C1
Signing time: Sun 29 Mar 2026 04:01:06 +0000
Manifest this update: Sun 29 Mar 2026 04:01:06 +0000
Manifest next update: Mon 30 Mar 2026 04:01:06 +0000
Files and hashes: 1: pN_P1IlTK7N9Tsyo-7qDne3seo8.roa (hash: 4JuBbaWoHsvx0AsZc9fY1wPJc+hsLORDmTae2tdrxYs=)
2: vCRnh4F_lljPYv3DYF0shQI8Bbo.roa (hash: qW582UkFyFw7De0dFAxA/OIbguYJh97E6vsR4Z29UJE=)
3: xFP14jBCC8SnDQph3jtH3NoajQ4.crl (hash: T/5gdO+ftzlJW8hFn2osG5I8TS56h7UfErd3aWBsnww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:a9:f0:9e:72:9a:4b:ea:24:dd:ae:56:ec:c7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Validity
Not Before: Mar 29 04:01:06 2026 GMT
Not After : Mar 30 04:01:06 2026 GMT
Subject: CN=51b0a4451cd41db58d8f3f401aa4ea831878b57a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b7:ce:ed:c3:c2:24:1c:39:f2:ea:4d:2a:08:
94:52:92:f0:ed:e3:d5:dc:cb:4d:d4:12:1d:a5:3e:
96:97:d7:64:11:1b:8a:24:39:29:02:c3:63:ea:c6:
ac:2e:bc:dd:b1:d5:e1:72:a0:d7:5e:5b:10:41:9a:
ca:be:4e:65:3b:63:65:7e:20:0c:96:17:16:e4:5f:
5d:b5:de:39:01:f2:ab:1d:22:84:0c:18:45:0e:07:
4a:d9:39:62:91:03:b5:f7:dd:d1:23:06:a2:40:fa:
be:29:11:0f:ca:c2:d6:03:95:5c:c5:09:40:45:e4:
0c:ae:c2:ea:0b:ef:dd:52:08:c5:7e:f4:ea:fb:0c:
14:76:19:32:59:0b:0b:42:be:bf:98:35:83:37:33:
81:d3:26:e3:b4:d8:3f:80:6a:44:c1:75:a1:f4:c5:
6e:1c:47:85:03:0e:3e:36:64:1d:9b:d4:13:54:00:
c3:af:86:76:fd:64:08:5a:22:18:b2:08:9a:b4:46:
ca:88:b2:d4:a2:bf:f3:21:4d:6b:5e:26:36:2b:24:
86:ec:36:7c:0c:3a:99:6f:7d:e3:71:53:8d:b8:13:
7e:37:a1:4a:d6:ab:57:02:b7:04:83:95:70:11:96:
14:98:df:9c:75:f7:a4:c8:f6:b5:25:67:01:a8:c4:
79:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B0:A4:45:1C:D4:1D:B5:8D:8F:3F:40:1A:A4:EA:83:18:78:B5:7A
X509v3 Authority Key Identifier:
keyid:C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:cf:1c:db:4f:bc:e5:fb:b9:4d:8f:57:da:ee:ed:e6:a4:2d:
e3:6d:00:0b:c7:38:9c:3d:2f:80:7d:82:f7:de:ad:9e:b3:9f:
ea:d8:14:17:99:66:19:ce:57:ec:a7:cc:ab:3f:35:a3:ca:bb:
26:57:dc:22:32:7d:a1:fe:0d:77:71:8b:1a:10:c0:6d:80:83:
e5:0c:d0:58:0b:82:d1:fc:31:97:6c:75:ec:63:44:57:58:11:
f6:68:02:c2:f8:db:e5:f7:b0:4c:1b:64:aa:84:a7:ad:8c:19:
08:95:02:1b:f3:96:db:8d:e1:d9:4f:42:8e:a9:cc:9e:b3:33:
18:a3:fb:b5:5c:d3:98:62:36:4d:02:f0:4b:5f:b9:77:7e:04:
20:4f:da:2c:0c:3d:0f:7c:1a:f6:e7:03:8d:63:ba:92:a0:39:
6f:cb:f3:28:68:0a:48:6e:49:22:53:11:8f:47:45:f1:84:10:
59:de:de:c9:c3:de:75:3a:6b:3d:d2:f5:b1:47:3c:9e:4b:67:
a5:48:38:a8:e1:ed:40:15:df:a9:a5:eb:cf:1d:94:75:50:1d:
2b:f2:c0:64:6d:c7:f5:1b:96:cf:c5:bc:49:f4:f9:8e:0b:53:
62:e8:2a:07:91:34:86:20:b5:7a:c6:3e:fc:18:01:68:53:2a:
c7:b6:da:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:04:09 2026 by rpki-client