Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
File: X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft (raw, json)
Hash identifier: JXC/7fXmVVpDsc3r1NAhJaRvIvjm0Gc3FH84KQcfe1I=
Subject key identifier: 7A:09:A1:3E:9C:0B:FB:57:63:09:29:E8:33:BA:27:7C:CA:EC:23:89
Authority key identifier: 5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
Certificate issuer: /CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Certificate serial: 019D38D2C240B97875E1DF8D0EF942054BCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 09:00:29 +0000
Manifest this update: Sun 29 Mar 2026 09:00:29 +0000
Manifest next update: Mon 30 Mar 2026 09:00:29 +0000
Files and hashes: 1: X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl (hash: 6IJINcMz/neghSUCMNxMfmaMRACzLUrmTSlszMWJ+xA=)
2: YboTsZW5E_LquEoNeH4f-DKai2A.roa (hash: rVnU6oaQsX3x5ymp+Ryvp8mswyZTbG+O1Im+gcRa5NQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:c2:40:b9:78:75:e1:df:8d:0e:f9:42:05:4b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Validity
Not Before: Mar 29 09:00:29 2026 GMT
Not After : Mar 30 09:00:29 2026 GMT
Subject: CN=7a09a13e9c0bfb57630929e833ba277ccaec2389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d9:b8:8e:c5:68:74:6f:b4:10:0f:f3:8e:f4:
5e:c1:41:99:0c:b5:3c:27:d1:0f:d8:52:9d:c5:e2:
be:62:03:fb:ea:8c:fb:a8:3a:0e:60:f8:e6:10:c5:
4a:9a:52:7c:c3:57:98:06:fe:fc:0c:f1:86:4d:ae:
db:fc:28:e1:66:f9:23:c0:7f:a2:f9:b4:43:79:4f:
94:a1:51:07:4f:fb:6e:70:5a:30:58:eb:78:cc:59:
1f:2a:14:41:60:9f:9d:8c:ec:d1:0e:e5:88:47:7a:
fe:90:8f:5b:02:4e:27:b5:49:56:16:6d:7d:59:f6:
94:b0:a4:8b:76:a3:5e:93:5b:13:06:07:d7:c5:a7:
9a:c5:be:48:d7:24:a0:06:81:70:45:ad:d5:45:f3:
ff:d8:d2:7d:d7:0b:8f:3a:04:c6:e5:5b:e8:95:17:
d0:c0:b1:ed:ca:6e:90:a2:19:92:28:2d:93:d3:62:
a7:3e:60:16:e0:f0:a3:0f:56:cb:9b:2a:d8:37:6d:
15:af:6f:06:9a:68:20:05:18:0c:09:ad:bf:b8:4d:
bd:5a:c0:37:22:5d:cd:b4:67:b8:51:b3:cb:e1:92:
0c:4f:c8:99:81:0d:12:6a:9c:84:85:72:dc:51:20:
df:7a:7a:f9:ad:c8:ce:df:ad:32:15:b5:50:2e:fa:
78:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:09:A1:3E:9C:0B:FB:57:63:09:29:E8:33:BA:27:7C:CA:EC:23:89
X509v3 Authority Key Identifier:
keyid:5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:92:d0:1f:0c:bd:29:8c:a8:49:d4:74:dc:fc:2f:f2:d5:2e:
03:5c:a9:5a:34:9b:75:7a:77:24:26:db:87:9a:50:df:ca:93:
57:94:45:80:12:7b:0d:15:1d:7d:1c:f4:0c:5a:d3:ce:3e:6a:
cf:a8:d2:6b:f3:8c:25:87:c3:27:84:81:af:0d:f3:01:dc:de:
38:9d:63:06:70:51:3e:9e:ac:ce:82:ea:e7:8e:06:f9:4c:45:
b0:f6:a5:80:f9:bb:06:ad:ab:db:bd:ac:02:3d:79:ec:96:f8:
fd:f5:24:93:a4:0c:0c:8d:d1:d2:56:71:a4:bc:f1:4d:36:81:
da:29:5a:91:17:61:30:34:37:f8:21:8a:cf:a8:bb:e5:2b:bb:
af:2d:53:71:73:3e:91:c9:33:5e:5a:60:04:01:d2:9f:04:08:
3b:08:ae:f9:a0:be:c9:2c:04:60:90:38:72:9e:e0:8b:9b:48:
c4:8f:a5:9b:a1:50:ce:c1:2e:0b:41:1d:44:31:7a:9d:6b:90:
09:f7:3f:91:cd:3b:e4:9c:04:c2:42:b5:bf:0f:55:9a:4d:d6:
48:d9:96:34:67:05:1c:fa:a3:9a:a2:b7:e8:30:08:77:c9:a5:
55:37:0e:a3:8a:10:3c:5c:71:76:d6:64:0c:74:21:e6:96:79:
81:56:80:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:53 2026 by rpki-client