Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
File: xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft (raw, json)
Hash identifier: eyxdA/EPLgE+uf3bzCF74XKyhN4PtHMHrCgMNZuwUak=
Subject key identifier: 08:1A:74:F2:B4:CB:FE:07:E4:83:68:B7:F4:F6:C1:24:75:D2:BD:5C
Authority key identifier: C5:0E:08:01:82:3F:19:D5:1B:96:2A:B6:D4:EB:BB:C2:7D:D4:ED:96
Certificate issuer: /CN=c50e0801823f19d51b962ab6d4ebbbc27dd4ed96
Certificate serial: 019D3909F0895EAA07FD81A97992DE82C233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
Manifest number: 0E9A
Signing time: Sun 29 Mar 2026 10:00:45 +0000
Manifest this update: Sun 29 Mar 2026 10:00:45 +0000
Manifest next update: Mon 30 Mar 2026 10:00:45 +0000
Files and hashes: 1: 28OK2J3AhlsvkP5KX5FGL4PLk4k.roa (hash: sLJmlSxlUCogmrsIa1DupMYliLkoDK/6nUhbL0KQoh8=)
2: xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl (hash: 49bjiEGohoPpFjgIQwV6kLEJCv040y5m0hW34FMzUx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:f0:89:5e:aa:07:fd:81:a9:79:92:de:82:c2:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50e0801823f19d51b962ab6d4ebbbc27dd4ed96
Validity
Not Before: Mar 29 10:00:45 2026 GMT
Not After : Mar 30 10:00:45 2026 GMT
Subject: CN=081a74f2b4cbfe07e48368b7f4f6c12475d2bd5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fd:3e:dc:42:87:69:c0:35:9c:09:b4:ca:b9:
a6:1a:10:a8:35:f7:67:40:b3:53:91:57:ef:06:62:
ea:95:48:2d:a6:d7:7b:17:a8:cd:c1:ae:57:bb:86:
0d:72:a4:77:bf:4a:85:24:e8:59:7d:81:27:af:03:
ec:e8:67:cb:54:4e:2a:90:10:d1:0d:79:1e:30:3b:
2c:65:42:e7:16:fb:3a:2a:78:b1:de:f5:e5:34:4c:
2e:0e:d9:d7:31:e9:ea:0d:b7:8c:39:01:60:80:00:
e7:ab:17:f0:7e:95:7d:e9:5d:1f:02:65:bd:5a:0c:
aa:6a:c3:11:50:83:20:34:88:28:93:07:c1:0d:72:
16:f7:d1:a4:89:68:ec:71:a1:b4:c4:32:c2:ef:78:
c6:b1:d1:00:06:e1:93:0f:ee:9d:a1:6a:20:36:a1:
fb:66:d0:4e:c6:d0:bf:c9:e5:b8:e9:97:13:d5:d6:
b6:a6:d3:d7:1d:5d:f3:51:1d:a6:8d:61:11:98:f8:
8a:3b:2c:ca:c3:09:8b:08:c9:15:46:4d:fd:42:e6:
af:1a:6c:0f:79:46:84:30:ec:75:03:8b:2c:6d:63:
87:b2:99:2e:7c:03:0d:1f:9c:03:b4:e1:27:0d:dc:
ad:b2:b5:ad:f3:41:87:b1:b5:92:98:32:14:bc:5b:
b8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1A:74:F2:B4:CB:FE:07:E4:83:68:B7:F4:F6:C1:24:75:D2:BD:5C
X509v3 Authority Key Identifier:
keyid:C5:0E:08:01:82:3F:19:D5:1B:96:2A:B6:D4:EB:BB:C2:7D:D4:ED:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:50:5f:0a:50:e8:40:f5:9f:44:d6:db:bb:22:d3:fc:a4:70:
ef:2c:f1:18:96:1d:52:d1:f2:ff:2d:7a:51:c0:ad:9d:ed:6d:
1d:85:3e:d1:b2:27:7d:54:67:2c:5d:d1:7b:fd:5c:c0:2c:31:
5d:46:32:d4:7f:c4:7a:6b:2e:0f:6a:4d:6d:b8:df:d2:00:32:
67:5a:92:0c:02:ae:b6:c6:cf:ad:2c:65:42:29:c9:d4:1a:e3:
27:e0:d8:4f:a7:40:e3:94:e9:62:e7:14:77:bb:e5:3e:70:77:
26:14:f8:dd:c7:c1:fb:3b:2c:b3:8d:bb:98:65:75:9f:a8:f0:
43:ef:b6:0b:f3:c7:f3:5f:02:9b:d3:e8:81:c4:c6:d8:29:d5:
58:d2:9d:e2:9f:3b:7e:1f:96:6b:fe:61:05:58:61:c0:c2:ce:
28:2b:09:06:91:6b:d3:33:21:52:8e:12:e2:e8:21:bd:33:63:
26:35:4b:c8:fc:3b:57:d1:7b:0b:ff:f4:17:74:1e:ed:aa:fa:
86:33:35:da:b1:d7:4f:50:62:23:cd:bf:b3:66:e3:5a:6d:9b:
86:15:84:26:bf:f5:bf:56:7f:7d:e1:f8:04:66:a8:c4:8a:7b:
0f:9b:4b:61:b4:96:4d:d1:8d:d7:a1:2f:aa:b0:5d:03:26:f7:
e4:73:06:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:32 2026 by rpki-client