Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
File: xqbiL04jll9sSgJcbJLvwLZi55M.mft (raw, json)
Hash identifier: te3eZL9KjZxBIDYYiSNyOR/J/cYuR77xq1kiut/dJ/k=
Subject key identifier: 8D:29:AF:D9:2C:1B:9F:F7:9B:76:56:BE:FA:36:E1:67:92:AA:E7:13
Authority key identifier: C6:A6:E2:2F:4E:23:96:5F:6C:4A:02:5C:6C:92:EF:C0:B6:62:E7:93
Certificate issuer: /CN=c6a6e22f4e23965f6c4a025c6c92efc0b662e793
Certificate serial: 019D39778A134116621C190500DECC699FE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 12:00:28 +0000
Manifest this update: Sun 29 Mar 2026 12:00:28 +0000
Manifest next update: Mon 30 Mar 2026 12:00:28 +0000
Files and hashes: 1: TV3P0s4uwtaFIK2WOUaoBJ-Xjrs.roa (hash: 9BkM0T1n4z97DADL7bwyZNwxFvKQwjhmNhhGnIrdjHw=)
2: xqbiL04jll9sSgJcbJLvwLZi55M.crl (hash: 4Y81w96aY2oEvO/ulyykGFqzYxIfmJFGB0tZOFHnjR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:8a:13:41:16:62:1c:19:05:00:de:cc:69:9f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a6e22f4e23965f6c4a025c6c92efc0b662e793
Validity
Not Before: Mar 29 12:00:28 2026 GMT
Not After : Mar 30 12:00:28 2026 GMT
Subject: CN=8d29afd92c1b9ff79b7656befa36e16792aae713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:38:04:70:ba:b1:39:17:31:75:8a:a0:96:d5:
46:1b:a9:a6:1b:2c:a9:1f:2e:fe:4a:1e:86:c3:d0:
b8:b2:33:81:7d:77:80:12:4a:fa:16:80:92:9f:09:
50:1d:35:e7:da:b7:19:2e:b6:29:4e:c5:8e:22:98:
3c:a0:96:71:e5:7b:ef:25:29:a2:4f:d8:66:82:0b:
6e:29:46:7f:91:16:b1:db:a8:35:0e:28:b5:3b:f6:
48:7f:6f:89:43:b8:2b:ad:c9:fa:bf:46:1e:4c:92:
1e:2e:d4:38:d0:6f:66:35:17:a9:3f:bb:eb:80:96:
10:59:7e:b1:05:48:1e:ed:59:87:db:fa:f5:f3:26:
5f:96:20:05:2d:92:f0:d6:8c:84:4b:cd:bf:8d:c2:
26:8a:eb:76:21:10:6e:75:47:3b:a3:27:2f:95:80:
45:64:01:e1:d2:5c:f0:bc:a0:5d:7d:54:74:07:21:
f0:e4:0b:a3:39:e0:31:dc:5f:d4:6d:61:88:34:24:
a9:a0:15:4d:22:c6:e4:a0:22:53:7f:91:ca:d1:65:
fb:11:94:fe:ba:cd:2a:ba:53:43:58:3c:0d:ec:67:
d9:a4:82:5f:ca:00:df:99:f9:8b:d6:b3:fc:69:81:
2d:47:cc:79:33:5b:49:c2:97:8e:25:48:b5:f2:65:
df:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:29:AF:D9:2C:1B:9F:F7:9B:76:56:BE:FA:36:E1:67:92:AA:E7:13
X509v3 Authority Key Identifier:
keyid:C6:A6:E2:2F:4E:23:96:5F:6C:4A:02:5C:6C:92:EF:C0:B6:62:E7:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:bf:1b:99:8b:05:4c:19:77:2d:0e:ff:57:42:cd:8a:2e:c5:
bf:69:3d:7d:a8:ce:ca:aa:2e:a5:e2:8c:95:b4:93:0e:e8:f3:
20:1b:f8:9a:e9:21:c9:2f:cf:5f:60:17:47:24:0d:46:42:e3:
fb:fb:37:91:2f:d9:f5:15:8d:d8:38:04:4a:63:ff:84:fc:5e:
93:21:af:79:e8:b2:b6:91:92:0b:e0:a1:51:83:6e:65:b7:b7:
61:6e:4d:d0:d1:cf:f5:8c:b2:24:81:ad:d8:3b:21:5a:35:e2:
dc:d2:fb:f8:66:55:3a:fa:79:7e:02:f0:2e:8b:18:b0:15:8a:
4d:14:36:5e:9a:9e:34:01:24:3b:66:be:53:7a:c9:0a:b3:9c:
34:b4:64:d2:ef:73:39:6d:91:7b:99:2f:3c:fe:bb:ba:b4:72:
17:bf:4f:58:c2:8e:b2:a1:75:75:19:af:51:05:3f:a6:99:c9:
59:9a:1f:59:84:96:05:84:f4:41:a5:48:2b:01:63:39:ac:8c:
5c:cc:5d:1a:15:4c:58:53:72:1e:85:aa:76:f7:cb:04:d4:df:
ed:29:b5:be:3c:47:be:f9:a4:6f:77:07:b5:e0:2e:ac:29:c5:
96:26:b8:22:0d:ee:4c:9a:10:17:94:2d:09:f7:51:91:16:be:
fb:d2:da:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:18 2026 by rpki-client