Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
File: xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft (raw, json)
Hash identifier: C8xo+CWdXY10XZmsLkyMeH8M3uvuOPTy+/4FdYx7C4c=
Subject key identifier: DD:99:1C:65:DA:A0:CF:52:03:9C:32:D6:86:D1:C2:C6:D4:4E:61:61
Authority key identifier: C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
Certificate issuer: /CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40
Certificate serial: 019D386643A47655B00240B0E9592AB8407A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 07:01:59 +0000
Manifest this update: Sun 29 Mar 2026 07:01:59 +0000
Manifest next update: Mon 30 Mar 2026 07:01:59 +0000
Files and hashes: 1: Z4BDlr57O_FweazPHma0rDQN-Eg.roa (hash: RRUvm/U5FkAyaYrRTEjgZo8457PWupRX0eiUbSuUq0U=)
2: xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl (hash: RVTJkaTkvpJXW7q9+mHYNtTUmEYxNgDfl2WcMVwOt+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:43:a4:76:55:b0:02:40:b0:e9:59:2a:b8:40:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40
Validity
Not Before: Mar 29 07:01:59 2026 GMT
Not After : Mar 30 07:01:59 2026 GMT
Subject: CN=dd991c65daa0cf52039c32d686d1c2c6d44e6161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:83:47:2a:b1:64:4e:6e:94:be:5d:e3:6a:9c:
64:92:17:64:b5:d1:d7:31:de:a2:d5:d8:6b:c4:46:
2d:d8:6f:62:68:72:39:72:bb:c4:81:8c:ec:b0:01:
e5:4e:2e:d1:3f:16:f3:fa:81:0a:26:61:7f:56:8f:
a9:fa:5a:61:c4:03:82:b0:0c:a1:f0:18:03:9f:4d:
46:f8:92:e5:69:ed:8c:48:90:a7:cb:ce:cb:38:d1:
ab:c9:3b:20:7a:37:30:37:f1:7a:a1:64:80:7e:5a:
9b:b9:d0:78:b8:62:71:0e:1d:82:9c:44:c1:1e:ac:
da:cb:7d:f4:52:67:8b:b2:51:47:fb:5c:64:91:c4:
a9:6f:ae:14:b9:c0:4c:e7:68:02:47:1d:f3:5e:49:
aa:3e:16:ef:8c:50:65:f9:ed:e8:0c:ba:81:c1:7d:
bb:28:6f:64:1e:16:74:0c:ed:27:98:74:7b:df:1c:
5a:bc:d9:f1:83:92:76:b5:f6:9a:d9:59:a0:cf:0b:
46:76:17:75:48:81:37:e8:97:e6:5c:d4:f5:1c:18:
c5:29:4a:f8:93:be:83:85:99:e4:cf:c8:85:37:92:
92:f3:c2:b7:09:da:41:4f:c3:cc:7e:18:09:4e:67:
fc:38:0a:c3:a8:c8:77:85:8a:1f:8f:0e:db:a6:fc:
75:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:99:1C:65:DA:A0:CF:52:03:9C:32:D6:86:D1:C2:C6:D4:4E:61:61
X509v3 Authority Key Identifier:
keyid:C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:8a:3a:da:c1:90:c2:c3:fd:58:95:8c:7c:71:ba:09:31:e6:
e7:09:94:6b:e0:ff:bb:cd:e4:30:ae:37:4d:1d:6f:0a:53:83:
28:35:a5:4b:af:c6:c8:5e:34:aa:f6:1c:e9:d2:bb:04:76:3e:
89:96:aa:4a:2e:13:5b:54:68:38:49:92:ff:61:9b:9e:5e:b3:
6f:ac:26:52:92:cf:4c:e6:8e:be:a1:ef:af:12:e4:8f:45:41:
4a:d3:fe:8e:12:02:89:9e:49:1c:03:e4:66:cb:8b:8b:8a:d3:
fb:c2:2a:44:57:f5:0c:97:b9:e8:7d:ce:83:fd:ef:bd:a9:47:
8e:9d:fc:40:e8:61:7c:63:f2:b0:e6:ba:bb:bf:f9:71:1f:82:
3e:9c:43:6e:4e:19:54:86:1e:90:a8:d2:1e:d5:0f:27:b8:dc:
2e:7a:65:66:2b:25:8f:ac:38:cc:4c:a8:bb:26:c2:8f:d8:48:
51:68:53:16:d2:98:b5:e7:fa:45:b6:02:22:87:d1:60:9f:bc:
8b:5c:91:aa:a1:bc:31:eb:0a:bb:db:10:ef:c5:8e:e9:f9:d1:
61:6a:2b:71:92:86:ab:e2:83:42:4f:ce:d8:67:b0:eb:63:00:
7d:7f:79:9e:2f:66:05:31:77:a7:69:ef:01:55:bd:9a:dd:f7:
a3:16:cb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:56 2026 by rpki-client