Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft
File: xZttw7wi9sNqA5hVU0stQauxJCM.mft (raw, json)
Hash identifier: 7ZX2I25a1RFxNSuwXtH3EgLeojsQiX845ZsPGT6fQ8M=
Subject key identifier: A1:BA:F5:42:F4:AB:A1:7A:72:25:95:46:AB:70:37:A0:9D:A4:9A:5A
Authority key identifier: C5:9B:6D:C3:BC:22:F6:C3:6A:03:98:55:53:4B:2D:41:AB:B1:24:23
Certificate issuer: /CN=c59b6dc3bc22f6c36a039855534b2d41abb12423
Certificate serial: 019CAA587EB38259EA5FD14E387FE5017757
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZttw7wi9sNqA5hVU0stQauxJCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 17:00:52 +0000
Manifest this update: Sun 01 Mar 2026 17:00:52 +0000
Manifest next update: Mon 02 Mar 2026 17:00:52 +0000
Files and hashes: 1: XddFO1_V4vw4BFewS5a4h464RsI.roa (hash: 6STZFqkc7/OsVyHseLRUMCPEN6uwIoKNwxdIv1/YIe8=)
2: xZttw7wi9sNqA5hVU0stQauxJCM.crl (hash: 3Qq7QyZ9xj3fQGHivvVXPabDGbTd1IHhsvuKaO7ZkVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZttw7wi9sNqA5hVU0stQauxJCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:7e:b3:82:59:ea:5f:d1:4e:38:7f:e5:01:77:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59b6dc3bc22f6c36a039855534b2d41abb12423
Validity
Not Before: Mar 1 17:00:52 2026 GMT
Not After : Mar 2 17:00:52 2026 GMT
Subject: CN=a1baf542f4aba17a72259546ab7037a09da49a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:af:35:b0:30:b7:b2:25:11:84:05:50:26:6e:
e6:97:17:42:c6:04:33:dc:2f:0d:74:78:99:8f:25:
53:df:33:92:1c:28:23:77:09:3c:17:65:ce:79:1b:
50:6b:17:a9:cd:f4:04:41:e2:60:db:64:e2:35:52:
d3:f3:03:f4:b9:23:ee:bd:b9:f1:73:9e:c1:3b:00:
d9:e3:c2:c3:fd:64:3a:de:24:05:25:32:c7:dd:29:
fa:86:bc:c0:5e:5d:83:84:a0:65:a9:af:0c:0d:20:
95:db:7a:24:29:36:ef:9e:17:55:19:9b:70:d7:61:
77:e9:69:d2:96:6d:ef:ef:3b:29:6a:99:e0:e7:b0:
1e:a9:9b:8d:ab:ce:86:81:43:d2:96:6d:55:16:75:
7c:4a:3a:83:1c:94:f9:d5:ee:5e:70:fc:84:ee:22:
a5:85:a8:39:20:24:cf:c9:b9:e9:9b:a7:3e:c4:71:
07:32:95:74:d4:83:5f:0d:ac:4d:c9:7d:93:7b:b1:
54:07:9c:b6:91:6e:a5:5a:97:f5:3e:ca:d3:24:c7:
53:a6:ca:88:3a:47:f6:59:58:3d:e5:11:55:20:ac:
de:ea:8b:3f:1a:2a:fb:b6:50:c7:e4:1f:29:77:0e:
5b:42:70:84:f6:c1:3d:1a:39:a2:f7:e5:1b:ad:92:
c6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BA:F5:42:F4:AB:A1:7A:72:25:95:46:AB:70:37:A0:9D:A4:9A:5A
X509v3 Authority Key Identifier:
keyid:C5:9B:6D:C3:BC:22:F6:C3:6A:03:98:55:53:4B:2D:41:AB:B1:24:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZttw7wi9sNqA5hVU0stQauxJCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:86:a1:56:7a:ee:7d:9a:c2:5e:ef:29:71:20:c1:29:7e:a3:
36:41:4a:89:56:63:d8:6f:ca:94:f5:78:f2:08:55:86:c0:af:
48:db:2b:b4:9c:ec:2f:07:1c:98:c6:15:e5:fe:bf:a7:5c:04:
70:ac:a6:36:b9:bd:e7:c9:1b:ea:40:fe:29:dc:68:ff:2d:b4:
3b:15:f1:b4:57:bc:8f:21:1f:30:c9:ee:51:17:9a:3b:2a:1c:
2a:3c:7c:eb:26:f1:4b:2f:3d:b1:81:bd:2c:71:80:dc:02:ba:
f5:ff:61:09:33:1f:69:cd:71:49:4a:1d:4a:0f:18:ab:9e:f8:
6e:ea:7b:d1:19:7e:09:43:fd:38:98:ce:5d:d3:b3:59:41:93:
64:fb:5e:e7:ec:37:05:79:dd:ec:e6:da:c4:6b:e4:e3:06:52:
37:b5:79:b9:13:76:e6:af:dd:ac:5f:ce:17:cc:38:d9:56:e4:
c5:32:42:84:b0:46:43:35:c7:69:18:0c:c6:b3:42:d0:48:fd:
35:36:42:95:fb:da:44:f1:82:2b:e4:a8:33:98:88:cd:6a:68:
c6:62:fd:ab:71:12:db:86:5d:97:a5:ac:b0:28:09:62:97:4f:
5a:ba:0f:13:dc:e4:46:07:2f:58:5e:0b:03:2e:59:76:80:83:
28:b5:d1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:46:13 2026 by rpki-client