Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
File: xGPDRgOpRpUv8nbgol_TYfys8lE.mft (raw, json)
Hash identifier: vN1CBWqTQd5j9biPZ1TT18K3uEKLkD+RrIdx2vxiK9s=
Subject key identifier: 45:19:0B:9B:EA:B3:6D:F8:13:2E:79:CD:EF:C7:18:E7:C0:A8:65:18
Authority key identifier: C4:63:C3:46:03:A9:46:95:2F:F2:76:E0:A2:5F:D3:61:FC:AC:F2:51
Certificate issuer: /CN=c463c34603a946952ff276e0a25fd361fcacf251
Certificate serial: 019CAD9087E63AF8D7F2448287FCAFB3EB65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
Manifest number: 184B
Signing time: Mon 02 Mar 2026 08:00:56 +0000
Manifest this update: Mon 02 Mar 2026 08:00:56 +0000
Manifest next update: Tue 03 Mar 2026 08:00:56 +0000
Files and hashes: 1: 7cKCDlZbeTX28BBwTA5QO4eJ2xc.roa (hash: sIuMQVrFFVonk4niSkh2ILAH9kBI8WfPxCPrqjWAlqs=)
2: xGPDRgOpRpUv8nbgol_TYfys8lE.crl (hash: oRNXo/5DKkOXRnAd+V3H9NI25fv54Wk3qDH24q/f03g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:87:e6:3a:f8:d7:f2:44:82:87:fc:af:b3:eb:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c463c34603a946952ff276e0a25fd361fcacf251
Validity
Not Before: Mar 2 08:00:56 2026 GMT
Not After : Mar 3 08:00:56 2026 GMT
Subject: CN=45190b9beab36df8132e79cdefc718e7c0a86518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fc:c7:32:61:d3:8b:58:24:7f:c6:7f:7e:4f:
44:53:60:eb:62:51:b4:c8:d9:a5:68:35:4f:73:2e:
7b:8b:31:41:00:bf:28:ba:aa:dd:f6:4b:d2:8f:bf:
64:2e:0b:a7:20:d6:f4:df:50:66:8d:7e:50:e1:cd:
d2:7a:98:b5:d9:31:3f:9a:d9:ec:af:50:8a:6b:9e:
6b:b5:c2:be:15:14:9d:3c:39:87:f5:3f:6b:e5:a9:
97:8e:c9:80:d9:7b:d7:20:e4:56:d9:ea:6c:f9:00:
09:31:47:9a:9f:b0:c9:f0:92:fc:2d:4e:ee:e0:92:
2c:b0:65:03:4d:89:8e:88:59:cc:92:01:09:f2:7e:
b8:a7:ff:6e:db:1d:9b:63:8a:62:e5:04:cd:61:ab:
9e:10:19:94:8d:74:bc:12:29:12:32:bf:d0:f3:5a:
ff:df:21:01:75:bd:db:02:a3:c9:80:b6:2a:c2:48:
f1:df:3c:ea:ba:4a:2d:88:9e:32:e8:15:e9:a4:3c:
c0:31:20:e7:9a:2b:3c:f4:09:f7:a3:93:5c:1f:4d:
ce:6f:a1:ec:be:4f:fe:3b:30:fd:cc:6d:e8:55:b7:
74:b5:85:98:93:ef:0d:1e:fe:b4:e9:f0:4d:f3:b4:
be:71:ea:6d:f4:1d:f3:9a:83:d0:09:44:7e:1d:4e:
cb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:19:0B:9B:EA:B3:6D:F8:13:2E:79:CD:EF:C7:18:E7:C0:A8:65:18
X509v3 Authority Key Identifier:
keyid:C4:63:C3:46:03:A9:46:95:2F:F2:76:E0:A2:5F:D3:61:FC:AC:F2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:9f:26:26:6c:0e:b1:0e:6c:b8:bc:ef:20:33:a2:cf:db:7e:
50:ad:ff:b3:d4:ae:db:a9:5e:55:ae:aa:be:58:1f:f8:d8:17:
83:6e:76:a4:cd:21:ab:4e:5f:62:09:7d:e5:4b:a6:16:11:ad:
46:28:19:bb:08:c0:f7:8b:37:6d:87:4c:de:b3:b6:c4:c7:75:
c0:48:1c:1c:9c:ec:87:0d:78:10:e4:19:8c:01:b1:d1:00:a3:
f8:53:0d:c7:6e:4a:59:b4:e2:6a:5d:34:b8:11:ea:49:b7:c4:
58:53:bb:ec:f6:07:7d:42:42:e1:f8:d8:e1:cf:40:53:d1:44:
53:2f:9f:d4:48:af:82:3e:2f:0f:a8:38:aa:c0:c9:1f:f6:d4:
77:75:42:48:80:db:9f:f5:8f:ea:49:41:5c:1e:13:96:bc:17:
1c:c2:1d:0c:4b:8a:38:fd:e7:c4:b8:b1:72:a0:6f:62:58:30:
95:09:db:b9:fe:41:3f:81:92:c7:77:fc:6f:4b:1c:2c:ec:00:
4a:a3:58:b6:9c:42:c5:33:9f:ef:f7:fe:4f:48:dc:89:56:db:
56:9a:0e:90:f9:bf:d6:21:d8:09:28:86:a9:e8:a4:e5:23:9a:
d8:9e:c0:05:51:03:25:be:4a:12:40:26:c4:4a:35:43:2b:a1:
a7:8b:4c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:00:34 2026 by rpki-client