Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
File: Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft (raw, json)
Hash identifier: lCMWEaE5EBRKtQ7DOZVn/YySqutN+JBJNR9/Ir83veA=
Subject key identifier: A3:4C:51:0E:14:49:E2:BE:8F:94:26:A3:33:1C:EC:58:54:29:97:49
Authority key identifier: 5E:CE:10:F1:3C:46:80:69:26:A6:79:46:CC:6A:11:02:AA:09:03:1A
Certificate issuer: /CN=5ece10f13c46806926a67946cc6a1102aa09031a
Certificate serial: 019D38656B0C3A2C6696AF7F1121BA3BB4D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 07:01:03 +0000
Manifest this update: Sun 29 Mar 2026 07:01:03 +0000
Manifest next update: Mon 30 Mar 2026 07:01:03 +0000
Files and hashes: 1: RM6TUZSUSaasZ-dBQ85053ksR-0.roa (hash: v5GrLhG4mT6P4v3eZCOBY4Q0WYXL2CD9LeoqtKdCqz0=)
2: Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl (hash: /iu+EzlKfMOvJDjmkJXZYmFmBQwPeMTPBj3i9+HdCEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:6b:0c:3a:2c:66:96:af:7f:11:21:ba:3b:b4:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ece10f13c46806926a67946cc6a1102aa09031a
Validity
Not Before: Mar 29 07:01:03 2026 GMT
Not After : Mar 30 07:01:03 2026 GMT
Subject: CN=a34c510e1449e2be8f9426a3331cec5854299749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4b:0e:ca:f6:23:39:41:45:68:2c:30:87:d4:
a0:10:2f:10:54:46:88:da:e5:ce:d0:75:98:49:d7:
cb:d5:1d:51:1e:a9:46:a9:37:cc:fc:bf:61:54:20:
80:d8:2d:51:09:68:0a:b9:b3:4c:ae:1b:8f:e6:a0:
a6:ec:b1:c5:4b:33:4d:5a:ee:85:e9:f9:dd:12:a5:
64:04:1f:36:aa:79:f3:4d:05:13:1e:ff:d2:79:57:
c5:d6:9a:e5:39:af:e2:f5:22:bf:17:f6:f6:2f:d1:
7d:b1:1d:07:d8:1d:4e:3a:8f:5a:04:1f:e2:99:c6:
55:1f:3a:7b:bd:87:c4:b9:f6:5d:db:33:ce:0d:c8:
3a:73:79:d6:33:ae:09:b4:91:6c:1f:29:89:a1:91:
60:95:8f:55:64:db:19:59:57:28:58:5a:a1:e0:0d:
0a:90:3e:31:20:da:05:97:b2:ce:57:55:74:93:e7:
e0:fa:53:2d:4a:2b:68:48:39:32:8e:50:dd:cf:1a:
2f:f5:d0:45:9d:88:54:4e:fc:30:cf:2b:83:00:be:
3f:bc:e6:dc:c1:b7:42:60:83:33:55:d9:bb:7e:a7:
7d:1c:e9:8a:21:a5:88:fe:2a:b1:1f:4b:93:7e:f8:
d4:50:39:ff:3a:39:3d:ee:37:8e:30:f4:51:0d:91:
24:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4C:51:0E:14:49:E2:BE:8F:94:26:A3:33:1C:EC:58:54:29:97:49
X509v3 Authority Key Identifier:
keyid:5E:CE:10:F1:3C:46:80:69:26:A6:79:46:CC:6A:11:02:AA:09:03:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:fb:a7:2d:d4:d3:86:67:eb:bb:ee:be:37:33:48:ee:61:cf:
fb:f9:09:56:2c:1a:19:85:a8:3e:ff:a4:26:f2:57:db:11:9d:
4f:19:e4:57:83:15:c2:82:9b:95:11:f4:5e:c4:ce:2e:15:55:
58:21:c4:c1:17:7f:7b:93:36:31:ca:1c:c1:96:28:eb:05:01:
f7:4e:ef:a7:b9:2e:d5:37:a8:a2:5d:42:4a:99:8c:d0:32:4c:
b1:35:c1:89:99:bb:cb:ad:c7:fb:0f:67:9c:47:47:85:25:50:
8a:d2:e2:b7:2b:9f:b4:85:f7:7e:fa:0e:0b:65:29:b3:2b:55:
f8:66:98:42:df:e1:94:77:97:64:8f:55:3e:c3:61:67:11:2e:
8b:aa:71:05:6a:53:ae:5e:97:60:cc:5e:49:bc:82:fa:c6:ed:
6d:11:35:b2:b3:ca:78:0e:d9:be:51:eb:cb:50:fc:71:77:fe:
1b:ec:4d:2c:97:1b:c8:c6:5a:44:76:ed:61:d5:6d:bd:47:42:
c6:00:d7:d0:c4:25:90:d7:f1:6f:e2:ff:2b:18:94:a6:a2:98:
65:a2:30:f0:51:67:2d:f2:d1:02:0c:f7:c5:29:af:f0:56:14:
0b:10:a8:8d:07:c5:b7:31:81:d6:89:65:79:e9:27:c1:49:a2:
ba:25:b4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:25:17 2026 by rpki-client