Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft
File: x0at2Nr-mfan14fUR5VFpkb23tg.mft (raw, json)
Hash identifier: mI1zTKK8itg6ZZOp3CaM0kP/2GmPFmev1ZtrVaskhAE=
Subject key identifier: E0:8A:E3:10:3A:8C:84:78:8B:48:F7:2B:39:8A:26:29:9B:4D:FE:7F
Authority key identifier: C7:46:AD:D8:DA:FE:99:F6:A7:D7:87:D4:47:95:45:A6:46:F6:DE:D8
Certificate issuer: /CN=c746add8dafe99f6a7d787d4479545a646f6ded8
Certificate serial: 019D3866161CB38D5E2927E2300BCEDB4626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0at2Nr-mfan14fUR5VFpkb23tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 07:01:47 +0000
Manifest this update: Sun 29 Mar 2026 07:01:47 +0000
Manifest next update: Mon 30 Mar 2026 07:01:47 +0000
Files and hashes: 1: 5SqsuyoErucRezmQTfvpY2XQz9g.roa (hash: 2gIJFCrAFvF4esdLzO2MxH+s496fv76stiFCWqMIITM=)
2: x0at2Nr-mfan14fUR5VFpkb23tg.crl (hash: 7TQCObM8emjV4goak+p5Gw0I7qPpve2U/TOwom+9r38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0at2Nr-mfan14fUR5VFpkb23tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:16:1c:b3:8d:5e:29:27:e2:30:0b:ce:db:46:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c746add8dafe99f6a7d787d4479545a646f6ded8
Validity
Not Before: Mar 29 07:01:47 2026 GMT
Not After : Mar 30 07:01:47 2026 GMT
Subject: CN=e08ae3103a8c84788b48f72b398a26299b4dfe7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:e8:40:62:72:a2:d4:84:69:1e:f3:56:f1:c8:
81:44:2d:83:e9:3a:c2:f7:74:e9:49:23:45:8d:6e:
a1:7a:6c:9d:48:89:43:1e:2a:db:83:e0:fa:2e:a9:
1d:13:fb:10:4f:b7:3b:4e:3b:6a:3a:4a:a6:7f:65:
60:ca:26:5e:a1:8a:28:6e:1f:96:26:e8:a9:3c:ab:
db:c6:98:86:34:bf:f9:70:c2:25:58:a0:9f:20:06:
1a:e2:cd:57:9a:fb:54:28:8a:17:fd:5b:f7:84:08:
28:5a:2d:ff:ee:5e:87:ea:b2:29:b1:a3:4d:88:0b:
90:e0:c0:73:e8:97:24:ea:c2:ad:4d:9c:77:6e:58:
c4:da:57:f1:7a:a4:37:51:be:f1:9d:28:7f:a3:84:
4b:ae:d9:ae:81:7d:15:8e:56:f0:d8:12:99:ba:ad:
f2:1f:98:ac:5e:fe:8f:e8:99:3d:9b:f0:70:99:b2:
db:07:fe:2c:80:c6:37:75:3f:6a:9e:20:01:a2:ea:
69:b1:84:89:45:4c:89:9b:4d:58:a5:b6:d0:19:55:
27:27:55:a3:92:07:30:c7:e0:18:22:f8:59:29:76:
e2:a8:e4:a4:ab:b0:b1:1a:12:fb:b2:2a:78:c0:fe:
2f:c3:d8:e5:05:51:68:f3:8f:c2:d6:52:18:c4:da:
e3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8A:E3:10:3A:8C:84:78:8B:48:F7:2B:39:8A:26:29:9B:4D:FE:7F
X509v3 Authority Key Identifier:
keyid:C7:46:AD:D8:DA:FE:99:F6:A7:D7:87:D4:47:95:45:A6:46:F6:DE:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0at2Nr-mfan14fUR5VFpkb23tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:06:91:a5:41:f5:9e:50:4e:8e:59:de:15:35:c7:fa:cb:dc:
af:ad:01:fe:3d:fe:60:95:00:ab:96:b4:f1:03:fe:23:0c:39:
ac:df:a8:e9:e7:94:2e:59:d9:8e:6d:7e:6a:f2:ca:4b:44:71:
8c:b2:a5:56:66:93:16:ca:86:cf:fb:54:f7:53:b0:a4:ef:f6:
20:5e:ae:3d:14:9d:34:99:bc:02:ab:61:90:6f:7a:63:be:e9:
ed:aa:8a:c9:69:28:40:00:83:b4:da:f3:ec:82:09:06:fe:62:
fe:f2:53:fe:32:b7:2b:67:ea:0d:63:04:da:ee:17:e0:de:6c:
67:66:1d:60:17:38:9b:99:c2:9b:9e:ce:44:4e:46:1a:cb:cf:
e7:de:c0:13:26:65:11:ee:da:8a:37:8e:ac:fd:e7:e9:17:07:
10:91:ad:66:94:93:81:d4:a0:1d:45:0f:a6:22:a8:d0:7a:8d:
8a:c7:7b:f6:47:22:8c:ba:cf:1f:c9:84:43:4a:82:5a:ce:d0:
93:c1:96:0c:53:2b:64:06:9a:0b:47:4e:d6:1b:fa:1b:10:c0:
d3:ca:2f:6a:c7:6d:89:4b:1f:eb:e1:a2:7d:d9:23:a2:59:41:
52:1c:ad:b2:56:af:ac:cc:97:c4:2d:28:b2:2c:1b:a9:8b:bd:
e1:e8:b1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:19 2026 by rpki-client