Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.mft
File: xBOLshC3wajwZm4HWfR18AZN8fc.mft (raw, json)
Hash identifier: fwLKeUmqEYNFE5zdfYNQq+oqHxg2WEQA0bC/PKWIwzA=
Subject key identifier: C7:A2:56:7A:52:D8:FB:47:6E:E8:B5:19:8F:64:24:0F:70:C3:8F:25
Authority key identifier: C4:13:8B:B2:10:B7:C1:A8:F0:66:6E:07:59:F4:75:F0:06:4D:F1:F7
Certificate issuer: /CN=c4138bb210b7c1a8f0666e0759f475f0064df1f7
Certificate serial: 019D38D330012D5C9463EAB33149777C6611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBOLshC3wajwZm4HWfR18AZN8fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.mft
Manifest number: A8
Signing time: Sun 29 Mar 2026 09:00:57 +0000
Manifest this update: Sun 29 Mar 2026 09:00:57 +0000
Manifest next update: Mon 30 Mar 2026 09:00:57 +0000
Files and hashes: 1: 7h5eSPNlffr_391YlxjHN1ItANQ.roa (hash: XEuG2vwGeCYbNa542z5LaRxd5TGJ34KJdQn28qGEDr0=)
2: KiNMgdfJ-jED44ngYXhsk4y4eUo.roa (hash: a7w7sWRkPS/IylXEpEG2ZktzWT1XLIn8MRkkpzcobUA=)
3: xBOLshC3wajwZm4HWfR18AZN8fc.crl (hash: PAyouS3uXzNYhRK1G1Oky5Upf0HaBqq1yXGV1RX76H8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBOLshC3wajwZm4HWfR18AZN8fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:30:01:2d:5c:94:63:ea:b3:31:49:77:7c:66:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4138bb210b7c1a8f0666e0759f475f0064df1f7
Validity
Not Before: Mar 29 09:00:57 2026 GMT
Not After : Mar 30 09:00:57 2026 GMT
Subject: CN=c7a2567a52d8fb476ee8b5198f64240f70c38f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:59:3e:cd:d4:95:ff:d4:2f:f5:0e:17:c8:cb:
88:c3:36:6a:8f:eb:5f:7c:ce:8f:e3:f6:d4:2d:f6:
7e:61:8d:99:f6:ad:a9:ed:cb:32:ae:71:0b:95:9d:
71:3b:7c:f5:88:b5:76:16:78:4e:61:b4:a4:f7:78:
e3:af:51:75:29:d8:a6:86:13:84:70:bf:8e:31:7a:
d4:b3:96:f8:d1:d0:e5:13:7f:e8:51:9d:38:77:4c:
6f:6f:eb:91:78:db:4d:c2:a7:c4:dc:9e:f9:ab:c9:
8c:d8:a8:88:68:1f:23:93:ef:14:44:92:47:32:ac:
9c:80:de:e4:98:a6:ad:af:73:66:f7:f2:f1:57:6a:
2d:eb:94:02:d9:7e:c3:5a:ff:7f:fe:5a:81:a4:da:
f4:0b:d8:64:73:69:60:c5:2d:cc:16:bd:33:ac:e1:
e8:ca:5c:ae:19:d6:2a:69:22:02:1e:ff:c2:ae:66:
84:bc:0d:3c:14:82:a8:c0:8d:1b:8b:d4:d8:10:72:
30:b4:85:76:4c:60:ba:cb:ad:71:ba:90:02:32:6a:
15:e2:47:0b:5b:1c:70:52:07:45:98:c1:4c:4f:b4:
28:7f:54:f0:23:3e:29:c9:0a:55:8d:e2:3c:23:49:
cb:52:36:24:31:24:bf:33:b3:43:e3:e4:33:57:d1:
db:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A2:56:7A:52:D8:FB:47:6E:E8:B5:19:8F:64:24:0F:70:C3:8F:25
X509v3 Authority Key Identifier:
keyid:C4:13:8B:B2:10:B7:C1:A8:F0:66:6E:07:59:F4:75:F0:06:4D:F1:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBOLshC3wajwZm4HWfR18AZN8fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c0:9b:6c:18:23:4a:55:46:e6:84:ce:bb:89:e8:fe:7e:71:
d5:41:0d:d4:ae:d8:c7:82:4b:45:40:f2:d0:d8:48:81:6a:16:
e5:58:d8:2f:66:9f:80:ec:59:f0:dd:0a:70:5b:e3:48:e5:f5:
19:b5:d8:63:5d:7f:91:25:4e:70:29:1a:45:fa:2c:6b:d2:c5:
95:87:91:52:f4:1c:e9:0f:1f:f6:1f:71:37:80:15:df:c3:37:
1a:fa:be:76:44:30:62:53:ef:a4:c7:77:4d:bb:8a:52:0a:8d:
cc:ab:c5:50:94:6d:5b:1f:b9:c0:47:6b:5f:43:40:25:8b:c0:
c9:fd:66:9d:c7:9b:0f:aa:ca:13:91:34:fd:5b:0c:1d:55:4f:
ac:18:98:e8:ca:e8:56:10:e2:29:b1:e5:c9:e4:1c:f8:38:b2:
e6:d9:cf:6b:1d:7c:68:9c:21:c0:3f:eb:0e:b8:e3:5a:f2:df:
71:60:87:57:1e:94:2e:59:af:e7:fc:72:4f:6c:bc:69:85:6a:
ee:e6:17:d6:91:aa:de:89:65:e0:9b:96:a5:a3:90:80:70:c4:
2b:6c:28:f9:41:5a:ef:f1:0b:8f:44:30:f0:b3:ae:52:09:fc:
0b:4c:0c:6a:f2:d7:c8:b8:a0:51:33:74:f0:c7:64:40:92:8e:
26:92:6e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:55:28 2026 by rpki-client