Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
File: xCKHxoRY-YDKm3w21h9q9YZGSyg.mft (raw, json)
Hash identifier: GQhnXvs8ww5wohQzu5cIBctex+P21rmSx8AVs/R/mTQ=
Subject key identifier: 82:B7:FE:DC:95:40:F2:1A:FF:F3:48:A5:8F:4C:05:A5:B7:0A:85:4F
Authority key identifier: C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28
Certificate issuer: /CN=c42287c68458f980ca9b7c36d61f6af586464b28
Certificate serial: 019D3B2F0FF7CFDB141FD0FF39BD46DA38D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 20:00:33 +0000
Manifest this update: Sun 29 Mar 2026 20:00:33 +0000
Manifest next update: Mon 30 Mar 2026 20:00:33 +0000
Files and hashes: 1: KK6V4tkkGOTlna1jDdLR34C1144.roa (hash: VJsTur/NQjIjrIZYxVHk28VDPEOKoZ9mo1/7vuIP+oc=)
2: xCKHxoRY-YDKm3w21h9q9YZGSyg.crl (hash: ZEmSqd6WcIHoEp6fcV+7LvLZTMVdFkO9G4zuWUYrNO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3b:2f:0f:f7:cf:db:14:1f:d0:ff:39:bd:46:da:38:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42287c68458f980ca9b7c36d61f6af586464b28
Validity
Not Before: Mar 29 20:00:33 2026 GMT
Not After : Mar 30 20:00:33 2026 GMT
Subject: CN=82b7fedc9540f21afff348a58f4c05a5b70a854f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:15:3d:c5:96:4a:99:8e:0d:33:a8:25:77:1d:
de:71:02:20:9f:1b:10:4a:64:7a:95:ef:57:89:a8:
df:6d:9e:1c:38:36:43:39:ed:4c:50:28:60:38:14:
0e:e6:c6:7d:fd:f0:e7:ba:bd:d6:b9:bc:47:2a:55:
c0:48:f9:58:62:d2:3a:b1:ef:2e:7e:c1:5f:0f:b8:
a0:a6:44:38:79:7a:9f:67:18:4b:29:6a:c5:a6:d8:
d3:71:d2:d9:27:79:fc:3c:70:2a:51:61:5f:0d:79:
73:cf:f2:df:11:41:fe:55:f4:c9:ef:e3:b5:59:c1:
eb:22:fc:6d:d8:ad:d9:3a:83:2a:32:7f:75:e2:83:
bf:32:82:ab:a1:7e:1f:63:c9:be:8c:a9:e0:f6:54:
e8:18:81:a1:5f:2f:7e:43:25:7a:4a:a3:f7:d0:9c:
ca:67:f2:3a:96:31:b2:1f:e9:22:ce:08:59:da:e3:
eb:90:5c:80:5e:4a:33:65:0a:3c:57:51:62:f5:27:
43:0d:16:21:98:55:fd:98:d9:53:4a:67:9d:f0:dc:
63:10:d6:25:56:bc:cf:40:aa:d4:d3:d5:38:89:b7:
75:2a:6d:ef:24:c7:b5:61:47:81:d3:5a:df:53:47:
cf:c9:59:91:78:7e:82:e6:39:00:41:e1:cb:2c:75:
3a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B7:FE:DC:95:40:F2:1A:FF:F3:48:A5:8F:4C:05:A5:B7:0A:85:4F
X509v3 Authority Key Identifier:
keyid:C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d5:3f:69:43:32:b8:c2:a8:a2:40:c4:4f:95:4f:96:93:c0:
69:e8:17:b0:74:8b:37:29:9d:ba:21:43:f9:4e:73:7d:b5:ee:
5b:93:9d:b9:58:44:a7:f6:f8:36:39:69:fc:ea:5a:06:e2:69:
17:24:cd:ff:bd:eb:5a:53:cf:1c:7a:dc:75:fe:fa:79:17:7e:
28:0b:48:42:af:69:83:50:d4:ce:5f:24:19:d7:0d:0d:b0:5d:
15:4d:f9:ef:3d:43:29:4b:aa:60:2d:11:83:b8:c5:61:1b:cd:
fe:9f:6e:9b:83:05:49:e4:77:7b:d8:98:f4:5e:ea:34:a8:93:
01:e7:f7:90:f6:8b:d9:3a:57:46:6e:1e:13:a7:99:f9:76:3a:
5d:1d:20:97:fc:90:36:32:9b:d5:30:e6:39:6a:c9:e5:c8:c3:
fb:c7:0e:a3:14:03:96:bc:51:86:d0:be:19:fa:68:c8:d9:8a:
e8:b6:e5:d9:a2:7a:a7:50:6e:9a:af:59:b2:47:7c:ae:09:fb:
a2:d7:17:72:a0:95:d0:2c:a4:45:52:80:bf:02:af:a1:79:64:
e1:b6:20:e3:d0:f6:dc:8e:23:48:92:a4:17:01:97:1a:f4:05:
cb:c0:07:a9:20:ed:f8:b5:1e:24:fb:eb:79:51:35:e0:39:b2:
2d:ec:cb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 22:19:27 2026 by rpki-client