Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
File: x4QShQX3-Zx1cEQpgK3rivkMwnA.mft (raw, json)
Hash identifier: 6jYmRnS52mswwyr0W5zqsmSoUy0gsMBqgjTopLNu8yI=
Subject key identifier: AE:92:93:D3:92:F5:7C:10:0F:4E:5B:75:FB:4F:A5:6E:85:7A:A9:22
Authority key identifier: C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
Certificate issuer: /CN=c784128505f7f99c7570442980adeb8af90cc270
Certificate serial: 019CAA8F77BAB4214C5DE745DA6942B1B8BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 18:00:54 +0000
Manifest this update: Sun 01 Mar 2026 18:00:54 +0000
Manifest next update: Mon 02 Mar 2026 18:00:54 +0000
Files and hashes: 1: 6LY_I5SzlhFBv9eGnwKkecDyqDs.roa (hash: rY/4K0UyTx9gEr0sURKBlWuNRZZ59rIT1DcPYpDH8zU=)
2: WpjjTnaqAZv75i8pt4da5AeyrG8.roa (hash: zVLZyAPVL7um6st0K7rE7n1hsZMqjYHJuIbZn63Z38s=)
3: x4QShQX3-Zx1cEQpgK3rivkMwnA.crl (hash: +8uDcgwjcsyObDFLLaiAQg1VqKf9kRk7AIXvbs59+go=)
4: zFQaWtM5PgZgQ7lLGiUdAyDYFlk.roa (hash: T++koCK9BmrUNL9Ums78HVke+W3UNP2l17fVLv+FlR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:77:ba:b4:21:4c:5d:e7:45:da:69:42:b1:b8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c784128505f7f99c7570442980adeb8af90cc270
Validity
Not Before: Mar 1 18:00:54 2026 GMT
Not After : Mar 2 18:00:54 2026 GMT
Subject: CN=ae9293d392f57c100f4e5b75fb4fa56e857aa922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:29:92:4d:fb:6c:38:00:21:e9:49:a4:bc:13:
e9:bc:d4:eb:e8:a8:fd:7f:4d:62:0d:7f:5d:88:8d:
f7:73:75:5c:0a:97:32:bb:3b:ff:6f:6f:29:3a:8a:
74:ca:de:73:64:85:1e:6c:d4:ff:b8:1a:49:fc:76:
92:0c:6b:46:d0:3a:47:39:15:a0:18:0e:ad:72:8f:
a8:80:88:77:70:81:79:53:56:e8:8f:74:66:c3:44:
15:a2:a7:f2:37:7a:14:f3:6b:83:3c:f4:e4:af:19:
dc:b5:3c:45:12:3c:90:c3:06:59:b1:1c:81:3f:ac:
e7:df:5a:fa:81:88:bf:f7:a1:92:e4:b9:71:bf:5a:
16:0d:81:d6:8d:78:8b:c2:58:4e:32:fb:19:60:ad:
05:dd:9f:96:c0:69:0f:54:c0:c3:00:65:35:5a:80:
cb:16:7f:b8:c2:1e:ba:de:4a:1a:7b:57:8a:35:88:
c5:30:39:f2:05:44:eb:f5:03:82:7f:18:68:ca:c0:
4c:45:9a:c4:47:51:a5:e9:8b:a9:3f:61:62:9e:46:
fa:39:31:1c:4b:42:25:8b:c3:b2:d3:f8:0a:14:41:
d3:1a:c0:49:ae:77:c8:ab:35:8b:98:8f:af:d6:0a:
08:2b:a3:df:66:03:96:1e:44:24:b3:4b:79:a7:f0:
fe:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:92:93:D3:92:F5:7C:10:0F:4E:5B:75:FB:4F:A5:6E:85:7A:A9:22
X509v3 Authority Key Identifier:
keyid:C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:07:91:fe:45:23:fc:b4:92:a7:c9:aa:16:45:15:26:d0:17:
f7:21:58:ca:77:26:b0:c8:12:d1:80:8f:df:dc:16:49:c5:36:
9c:e3:06:c4:f4:dc:41:50:e1:24:8d:23:3b:ee:ae:2b:09:d2:
b0:93:d0:8b:96:e5:2a:2d:d5:76:e1:99:97:6a:b8:cb:11:73:
e3:2d:b7:df:01:5f:62:0f:c9:60:e3:9a:11:dc:f6:d0:6a:b1:
95:63:3a:4b:69:f9:2e:9d:28:5c:80:52:36:11:fb:d5:c7:77:
8c:35:69:62:8d:b0:0e:27:bb:a1:f2:c0:62:54:dd:51:74:eb:
9d:5b:e5:75:0a:6e:1c:c6:97:be:29:36:9a:04:9b:7e:7d:bc:
c4:5f:b6:01:0c:8b:15:95:2a:d2:f7:5f:42:c4:ec:71:aa:1a:
89:6c:8a:12:2d:61:c6:0b:86:d2:fb:45:1e:7d:ee:4c:2a:09:
7e:83:44:36:08:41:22:61:62:31:b3:ad:5e:67:0f:79:dd:6e:
79:48:9e:2a:1a:66:8b:87:e8:96:59:29:ae:06:ca:e4:55:66:
9d:23:0b:c8:c6:69:7f:e8:23:d6:e3:b9:f9:28:b2:3d:ef:54:
aa:35:7a:56:56:0d:fd:71:40:c4:66:ef:e2:56:f2:c1:03:af:
7d:27:bd:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:51:15 2026 by rpki-client