Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
File: xYigeeTOtrskwjxSceRYPhzy-ak.mft (raw, json)
Hash identifier: JxNfcNu5LIhK6u2A09LBHco9ia7a9eTbh0cdhzICxRU=
Subject key identifier: BA:2B:82:44:ED:67:83:6B:84:5E:4B:91:AA:6A:F0:50:C5:02:D0:EB
Authority key identifier: C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
Certificate issuer: /CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Certificate serial: 019CA9B3DFC284C88DF412C164F9C0984D0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
Manifest number: 184D
Signing time: Sun 01 Mar 2026 14:01:03 +0000
Manifest this update: Sun 01 Mar 2026 14:01:03 +0000
Manifest next update: Mon 02 Mar 2026 14:01:03 +0000
Files and hashes: 1: Pt1Psw1-lXzUqfn0X0LMWdzipP0.roa (hash: 15BXKGLsn5CILBGoCHvyltyRe1OA4GGdr684IX7Rfck=)
2: xYigeeTOtrskwjxSceRYPhzy-ak.crl (hash: a3+ES78ghHymMkU6wbjtQbQtejtAVMj2c5jrXjy+66s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:df:c2:84:c8:8d:f4:12:c1:64:f9:c0:98:4d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Validity
Not Before: Mar 1 14:01:03 2026 GMT
Not After : Mar 2 14:01:03 2026 GMT
Subject: CN=ba2b8244ed67836b845e4b91aa6af050c502d0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0d:9a:04:ae:1d:74:c9:59:39:08:32:9d:2f:
99:a1:ce:ea:69:89:b7:b5:a5:0f:79:87:bc:9b:a9:
4a:88:50:84:cb:39:57:78:0f:12:4d:1c:9d:2c:ec:
a5:74:97:cd:dc:68:45:d8:33:c3:6d:74:dd:54:36:
8e:50:d7:76:73:eb:c8:68:75:a1:9f:4b:76:3d:72:
56:83:fa:31:2a:a2:34:1f:e1:00:55:e5:68:f1:73:
08:09:86:3d:b4:5a:65:72:ec:b2:cb:ec:ff:fc:dd:
56:87:85:32:21:5c:bc:54:09:48:62:54:b5:43:7e:
e0:81:b9:38:8b:b2:9b:d8:97:d2:b1:40:74:b8:10:
5a:5e:08:97:aa:e7:82:4f:d7:71:ae:77:ae:d6:6d:
1d:07:18:2d:2f:a5:3a:24:06:5c:2f:82:79:f0:72:
27:86:b9:45:71:3c:17:5e:50:d3:7a:70:ba:44:26:
7d:70:1b:b8:30:49:9e:05:c2:ea:7d:6d:36:34:31:
33:9d:95:ab:cf:6d:c1:f9:15:99:11:e6:4b:c1:cb:
a5:ee:90:a5:b9:56:2b:83:e3:22:f6:54:50:fc:5c:
17:0e:33:ef:37:03:16:41:82:1e:6e:59:3b:b7:c2:
bd:b1:be:41:13:86:73:23:08:3e:6b:84:37:fd:76:
7a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2B:82:44:ED:67:83:6B:84:5E:4B:91:AA:6A:F0:50:C5:02:D0:EB
X509v3 Authority Key Identifier:
keyid:C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:be:83:9c:95:b0:ef:be:17:ba:29:64:fa:eb:00:26:ac:5c:
b5:b2:3a:7a:98:fb:cd:92:29:f1:72:bb:d0:b6:61:bc:92:4d:
1b:ca:63:e3:54:2d:6e:74:d3:4b:b9:65:71:0b:c6:09:f2:00:
8a:96:e1:3b:a8:75:b7:36:ed:8d:c0:29:aa:47:c7:c5:5e:5a:
cd:e9:08:ad:30:05:35:3d:3a:80:1b:89:b5:b6:57:a4:b0:a9:
96:16:32:72:27:af:95:e8:86:86:c2:24:8c:4f:5b:ba:ab:07:
21:5b:17:95:2c:51:89:b6:c0:cd:d0:c0:e8:4c:43:d4:bc:b6:
20:18:99:a3:c7:f7:04:6a:57:d1:2f:3d:95:35:00:ef:35:e1:
e9:c3:73:65:f9:d8:6b:97:c2:fb:22:14:74:53:75:51:28:de:
60:4f:d4:5b:1c:71:3b:8a:93:8a:c1:ab:94:21:78:c5:b4:5d:
76:17:aa:13:92:ce:10:1b:3f:bf:43:25:a7:4f:41:f0:34:31:
8d:bf:66:2b:89:6b:c9:31:f7:6f:9c:d6:50:1e:d6:b7:92:cd:
ef:a4:f8:39:9a:4b:03:32:c8:b1:9a:80:bf:41:76:4c:21:f6:
d6:7b:d4:d5:72:3a:c6:92:99:49:40:d2:1f:6c:d2:01:38:25:
e0:80:01:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:18 2026 by rpki-client