Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
File: xN_w4VI3gFUHr10Dq-3riDK0uMs.mft (raw, json)
Hash identifier: kvwVnry49ClYew/1iHXWMPWm7YeH8+1W6Vadw5xSp24=
Subject key identifier: AA:2B:33:10:D5:A3:89:36:CA:6F:8F:1E:80:1D:92:87:52:54:93:38
Authority key identifier: C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB
Certificate issuer: /CN=c4dff0e15237805507af5d03abedeb8832b4b8cb
Certificate serial: 019CACB5569DBF44791DDC4EEB3F3FFA6B89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 04:01:31 +0000
Manifest this update: Mon 02 Mar 2026 04:01:31 +0000
Manifest next update: Tue 03 Mar 2026 04:01:31 +0000
Files and hashes: 1: 1ZYXmJOrMeMc_d7Mkc1TagHI2yQ.roa (hash: qeka0m7QmqNt2z/3WOdknE3KXx1vrYZ3br+BR0VNMV8=)
2: xN_w4VI3gFUHr10Dq-3riDK0uMs.crl (hash: 7CvniemnAp0jYLshm31RaRWt0b2Wah1J6yjh8JkXhf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:56:9d:bf:44:79:1d:dc:4e:eb:3f:3f:fa:6b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4dff0e15237805507af5d03abedeb8832b4b8cb
Validity
Not Before: Mar 2 04:01:31 2026 GMT
Not After : Mar 3 04:01:31 2026 GMT
Subject: CN=aa2b3310d5a38936ca6f8f1e801d928752549338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:32:a1:4a:b3:51:f3:d0:f5:7c:6c:f2:27:f0:
ae:4b:2c:1d:f1:87:1c:99:0e:42:bb:f5:a1:bd:c9:
8b:ba:06:83:8f:0f:fb:fd:3e:6b:79:6b:eb:67:c3:
93:d7:cf:d4:3d:4d:d9:61:9b:75:35:be:1a:1f:1d:
39:3d:16:0e:fa:ad:58:b9:73:13:36:ff:a1:7b:0f:
cf:9b:f7:64:42:ed:ec:e5:04:ec:23:87:e9:26:ca:
29:8f:38:7f:a6:36:f1:6c:84:92:00:3f:5a:2d:8e:
bd:55:c7:05:be:d6:c8:9c:82:15:b0:3c:23:18:fb:
69:2b:07:b5:96:ca:02:ef:c1:dc:67:64:a5:94:3c:
f5:46:54:00:22:47:3e:88:2b:d2:1b:80:5d:2a:7e:
af:70:88:17:18:7e:ee:fa:cc:5f:b6:0a:a8:9d:25:
7d:73:38:bc:5e:88:e0:fd:24:1e:3d:09:ce:5d:d0:
80:53:2d:f6:8f:32:c1:f5:8d:da:81:aa:3a:97:a2:
62:21:f1:97:c2:44:59:6b:29:03:ea:3a:81:a9:92:
25:05:a8:cc:25:02:80:83:70:65:f3:ad:79:11:c3:
41:7a:14:16:4d:b9:0b:8e:db:d3:f0:03:b5:7a:d9:
19:1c:b0:e5:78:55:fa:15:a0:bc:20:ae:1e:da:7c:
c0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2B:33:10:D5:A3:89:36:CA:6F:8F:1E:80:1D:92:87:52:54:93:38
X509v3 Authority Key Identifier:
keyid:C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:fa:aa:2d:09:87:75:40:1f:02:ac:a1:db:aa:4b:e7:26:2c:
6d:fd:9e:a5:26:ca:93:b3:a1:f2:e4:c7:c7:0d:77:f2:75:9c:
0a:dd:d0:d9:1c:c9:f0:a9:d3:9e:43:3b:89:cb:62:12:a7:e1:
cc:ae:0e:40:83:f1:d5:8e:fd:cd:45:03:d2:11:6d:0f:8a:a0:
1a:f4:e7:ce:4f:2b:4e:04:b6:84:7b:bf:b3:6a:8f:a3:1b:68:
fc:43:8a:e5:76:43:f2:21:2e:bd:d5:04:46:8e:ff:34:b7:8e:
0b:72:34:9e:c9:92:0c:4a:da:b5:66:17:60:ce:99:25:00:b5:
8a:ce:58:61:67:cf:44:3a:bc:4e:8a:38:08:67:e5:a4:4b:81:
ae:49:e6:ba:9f:5f:ac:c6:79:3f:c6:18:e5:88:07:ce:57:49:
ef:1e:2a:e4:3d:f3:ce:d7:3c:18:79:bd:fc:c9:e7:48:90:bd:
d2:4d:3f:c8:e0:b0:09:d6:86:d4:b3:4a:ff:5b:b7:2e:7d:78:
84:33:fc:05:cb:52:e2:53:bd:43:c5:25:7c:49:05:da:41:e6:
c3:89:89:fc:cc:d0:24:40:dd:2b:ec:c1:65:e8:e2:3e:9c:e4:
3b:a0:ae:b4:c9:a6:68:09:c7:7f:b1:34:8c:25:a9:0d:52:46:
4a:8f:2e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:06:52 2026 by rpki-client