Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
File: Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft (raw, json)
Hash identifier: hQhrLPN6Qy/59Dm5mEdMsAaKRIY1tVaNd/cY2SMh94s=
Subject key identifier: A3:B0:C1:03:B2:1E:E4:8E:54:14:AB:B8:E8:58:2A:9F:18:77:E5:A8
Authority key identifier: 5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74
Certificate issuer: /CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374
Certificate serial: 019CAB3444BB68E69A55B45E3AE7465AC48D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 21:00:55 +0000
Manifest this update: Sun 01 Mar 2026 21:00:55 +0000
Manifest next update: Mon 02 Mar 2026 21:00:55 +0000
Files and hashes: 1: GqSD-huFyN5KnbmOJE2G9Ex44l8.roa (hash: 3Qs/JfYQSZ6IzynE4ipg87qcZBEyHL3uWN4yF6V7P0w=)
2: VS_M4cAagWUGuW9fqRkh-RrWxeM.roa (hash: hZcQF43INC8Yz5JTh0PAiO/K0ZNFR1rzI3rKsJwe74E=)
3: Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl (hash: zM6fSbrniGodN2olaIEv76Qjn+93sZ4rSlxtG26GZss=)
4: rwfC2i-yhf4UtPPyaXqIB4OR2c8.roa (hash: 7pkGwTQxoCILPcgqkjDlu2UDM7lXD5BJiZpj+8CPoC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:44:bb:68:e6:9a:55:b4:5e:3a:e7:46:5a:c4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374
Validity
Not Before: Mar 1 21:00:55 2026 GMT
Not After : Mar 2 21:00:55 2026 GMT
Subject: CN=a3b0c103b21ee48e5414abb8e8582a9f1877e5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c4:3b:32:f6:0a:37:8f:54:d4:81:12:74:b9:
18:48:60:91:e7:51:fb:e8:1a:3d:3e:a6:25:34:c6:
ed:3a:a8:d5:6b:3a:4f:66:08:45:98:d1:18:41:97:
6b:bb:aa:f0:c0:0f:7b:0a:39:8a:39:4f:7c:ec:b8:
1e:9a:1b:1f:f8:18:eb:a0:39:c9:52:25:15:8e:1a:
7e:4e:14:58:55:b7:7a:71:8b:98:cd:a3:ef:1d:ea:
09:53:7d:4e:c8:80:29:d8:86:1a:5e:46:cc:92:af:
4a:d5:11:19:7c:78:f7:7a:5e:c1:57:f2:2d:0a:ff:
b8:e2:bd:8c:9a:2f:c8:36:83:1b:9f:79:c9:58:a6:
0a:2a:6e:cc:41:36:f0:4e:30:f6:e9:9e:49:ba:71:
e6:ef:29:74:84:e9:1c:d6:f0:3c:e8:90:10:8e:fa:
1e:1b:bd:0b:c2:38:99:e4:6e:b0:7c:ec:26:a5:e2:
42:be:c8:32:e8:8e:7e:c6:ac:52:51:14:62:8a:3d:
34:5e:d6:34:cc:9f:2d:c7:f5:26:cd:31:b8:ce:09:
32:32:38:2f:38:10:21:25:18:f8:36:09:ea:6a:a6:
4b:8c:8e:50:84:b0:3e:41:00:c0:af:b9:c8:87:eb:
84:77:26:f2:f4:29:97:b0:8b:d7:90:47:98:80:89:
7e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B0:C1:03:B2:1E:E4:8E:54:14:AB:B8:E8:58:2A:9F:18:77:E5:A8
X509v3 Authority Key Identifier:
keyid:5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:a4:95:be:54:68:1f:05:d8:20:c4:b0:30:72:22:82:63:94:
44:3d:52:78:c9:60:8a:03:2d:a4:d0:be:4a:ed:89:a5:69:7d:
fd:19:5c:63:cc:be:f6:c6:60:94:c6:e0:d2:9d:80:bc:7e:04:
12:8b:79:99:ee:1e:33:d6:9a:50:86:4c:d0:d1:39:53:85:75:
fd:80:8e:ee:8a:ee:7a:fe:8b:c0:13:c7:fb:36:af:77:2c:19:
05:59:7d:9d:89:b9:a7:f1:ef:87:69:24:b2:41:3d:b7:c2:28:
1a:4c:b2:38:6e:49:bc:5b:20:81:dc:d0:9f:28:67:aa:c2:c8:
6a:e5:a6:ec:87:65:e1:a1:b3:18:0e:f2:68:d2:31:61:f9:43:
8c:db:3d:3b:fd:a0:b3:65:83:1b:6a:dd:3c:60:b0:70:b9:31:
3a:f1:7d:cf:6a:18:ff:4b:44:f1:84:9f:38:de:49:d5:89:36:
87:01:d9:e9:85:18:9c:b9:7c:2f:3f:d4:9e:4f:77:0d:1c:a8:
2f:e2:c1:22:23:aa:a1:85:22:91:2f:ca:f1:a4:51:d6:3b:3d:
17:ec:98:f2:56:c7:91:6d:c7:b8:ae:a8:01:fe:ef:fe:59:92:
5d:7f:56:dd:92:3e:98:e9:b4:fc:42:78:82:fd:da:09:bd:6b:
aa:83:5e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:24 2026 by rpki-client