Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
File: xCKHxoRY-YDKm3w21h9q9YZGSyg.mft (raw, json)
Hash identifier: OCK8UcJIMGjZexxQ556DBqWH2RlP+YWW/LBY+U5ffIk=
Subject key identifier: F7:89:9C:57:6F:2C:B2:72:C9:9F:DC:2D:44:A1:39:12:9C:C0:DA:47
Authority key identifier: C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28
Certificate issuer: /CN=c42287c68458f980ca9b7c36d61f6af586464b28
Certificate serial: 019D3941690558106CA2991F435FBB1B37D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 11:01:21 +0000
Manifest this update: Sun 29 Mar 2026 11:01:21 +0000
Manifest next update: Mon 30 Mar 2026 11:01:21 +0000
Files and hashes: 1: KK6V4tkkGOTlna1jDdLR34C1144.roa (hash: VJsTur/NQjIjrIZYxVHk28VDPEOKoZ9mo1/7vuIP+oc=)
2: xCKHxoRY-YDKm3w21h9q9YZGSyg.crl (hash: WgIpzR0G80I0Jd4vargEceETnn2NNCVMqgE1WP+F6gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:69:05:58:10:6c:a2:99:1f:43:5f:bb:1b:37:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42287c68458f980ca9b7c36d61f6af586464b28
Validity
Not Before: Mar 29 11:01:21 2026 GMT
Not After : Mar 30 11:01:21 2026 GMT
Subject: CN=f7899c576f2cb272c99fdc2d44a139129cc0da47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7e:c1:47:25:3c:ec:4f:8e:60:06:47:b1:41:
23:95:97:34:68:da:dc:9f:32:5c:29:82:6b:2e:f4:
fd:5b:20:fe:02:4c:56:90:09:95:52:27:4e:5d:ff:
fe:16:80:78:24:27:1f:41:d6:87:f1:44:3c:a5:06:
9c:e4:2e:ca:24:6f:16:da:98:10:04:05:6b:d0:70:
1a:1d:14:da:88:5e:b5:03:1d:9d:19:98:8c:fe:24:
8f:eb:32:17:eb:4b:48:7c:ea:df:cf:c8:92:45:c0:
4e:2b:71:c3:c1:61:5d:b0:c8:d7:82:15:25:74:62:
f8:ae:7d:0b:36:be:86:f5:5a:7e:17:81:a8:ac:60:
23:cc:c1:39:76:a2:22:05:44:51:b2:ff:ab:36:e1:
f7:2c:95:5e:58:34:6b:f1:e9:70:55:9b:70:1a:02:
4c:3b:90:b1:48:56:6b:ba:95:2c:9e:5a:42:98:23:
22:9e:3e:10:e1:d7:46:7d:45:8e:b6:72:f3:ce:a0:
47:72:4a:80:2a:42:10:4e:c5:9c:b2:d1:79:cc:68:
f9:79:a3:53:8a:52:99:2c:e6:92:aa:13:e9:11:e7:
17:c3:51:43:0e:0a:90:2d:fa:9e:cc:fe:e0:79:31:
e4:06:db:d5:69:b8:de:a2:59:a5:a5:6c:8d:4e:af:
6c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:89:9C:57:6F:2C:B2:72:C9:9F:DC:2D:44:A1:39:12:9C:C0:DA:47
X509v3 Authority Key Identifier:
keyid:C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:dd:70:2c:ea:4e:bd:31:c3:6b:c6:ba:09:ba:c1:02:e3:59:
90:e5:45:e7:ef:0a:c6:1b:78:fe:ff:e3:08:a5:01:7e:0f:40:
cc:83:4f:56:28:75:3d:ef:0b:3f:95:5b:c5:c4:c8:16:af:f1:
a3:7c:22:74:67:db:fa:88:e1:eb:46:48:ee:84:99:13:20:f6:
4f:4a:3d:10:10:a6:44:ef:da:d0:fd:88:ea:74:c7:1e:88:62:
9c:2a:94:77:8c:e3:91:7a:3e:2c:a7:f1:09:9f:a9:e4:16:20:
48:be:38:18:95:87:e9:6d:a5:21:51:6c:27:1e:83:de:7a:2a:
80:25:dc:6f:70:c0:64:f4:12:09:d9:2b:13:2c:29:3d:99:f7:
d2:45:57:59:bb:7d:c9:21:25:dd:45:53:82:22:bc:10:12:91:
9d:f1:d6:76:57:b8:e0:59:ef:74:86:e7:f1:6d:9d:54:0b:27:
b4:c6:98:47:99:a4:b8:3b:aa:52:78:e4:81:fd:cd:82:1f:ac:
68:a9:61:1e:06:06:05:8e:ae:2a:ad:2c:f4:0a:db:1f:b0:38:
09:d3:c7:c8:77:62:01:aa:2c:53:40:31:88:f8:ea:e0:e5:ef:
99:47:08:0a:af:49:f6:d6:28:2c:7e:78:32:eb:73:62:25:0a:
7c:3f:5b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:10:55 2026 by rpki-client