Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
File: xX5Yw0bntBVVDBOurdLPkO3QeJU.mft (raw, json)
Hash identifier: jqRcn/bxJJffGBZFBA+V76lImN25JWmiaUmB3ycfI8s=
Subject key identifier: 8F:C6:A8:7D:D2:A7:06:E0:C5:74:DC:B8:AB:8A:78:84:19:7D:CE:89
Authority key identifier: C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
Certificate issuer: /CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Certificate serial: 019CA946466735D9123D2E10C3745C2DE7A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 12:01:20 +0000
Manifest this update: Sun 01 Mar 2026 12:01:20 +0000
Manifest next update: Mon 02 Mar 2026 12:01:20 +0000
Files and hashes: 1: 1kAOPGpT_yO1V9aiYjzOs8fosJ4.roa (hash: uKDlJs0NDCjfdYnB+MfIB/jlA65konDisvJIGcTDJUU=)
2: 9j1B5LLZDXYRtu0JrlF53YNgDew.roa (hash: enCaw1pzt1wj9vxuJHJ4PKIp1awPrJly1Aljj7nxS5c=)
3: xX5Yw0bntBVVDBOurdLPkO3QeJU.crl (hash: sgwcU0ZfMQ7v2jlcmGf2QPZK2M+jdvaSM0ra+8v57Ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:46:46:67:35:d9:12:3d:2e:10:c3:74:5c:2d:e7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Validity
Not Before: Mar 1 12:01:20 2026 GMT
Not After : Mar 2 12:01:20 2026 GMT
Subject: CN=8fc6a87dd2a706e0c574dcb8ab8a7884197dce89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:32:5c:4e:11:b6:09:28:1e:fc:eb:24:8e:e1:
89:da:88:75:91:79:e2:63:ab:ff:e1:33:f9:a9:c7:
2f:98:1e:5c:68:00:0d:ff:f6:e2:de:8e:6a:db:76:
8e:e6:eb:84:68:19:ef:95:3f:da:50:0c:54:3e:9d:
15:18:8f:84:1f:7c:1c:c3:35:a5:66:15:af:62:d9:
a5:a6:72:59:8d:0f:8d:36:9a:ad:c8:ca:7c:b8:6a:
ea:b7:8a:03:9f:4b:c0:5b:6e:a4:c5:d9:dc:c0:5d:
b5:fd:4f:4d:7d:85:44:f7:2f:bf:67:6e:95:f9:7c:
d7:bb:4a:18:6a:95:c9:e7:7e:c7:51:22:fb:e5:a5:
c2:8c:62:d0:0f:f7:31:f0:92:f1:6b:f8:68:32:87:
df:2c:0b:3a:6f:55:ab:97:d8:45:b0:9c:8f:71:23:
83:8b:96:c1:51:f0:a1:e9:e2:f5:a5:00:ad:52:b2:
df:06:14:a9:8c:f9:b3:44:84:1d:c6:ed:c5:d8:3d:
f1:2d:13:ef:f7:3a:47:3f:cc:90:b3:79:06:55:ea:
fa:0e:f3:75:78:1b:a6:05:0f:f7:74:18:1f:71:76:
1a:cb:84:5d:9b:f1:3b:98:bc:d5:91:fb:37:4f:c3:
fa:07:00:25:92:b6:08:17:65:59:c6:65:a9:2a:6e:
73:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C6:A8:7D:D2:A7:06:E0:C5:74:DC:B8:AB:8A:78:84:19:7D:CE:89
X509v3 Authority Key Identifier:
keyid:C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d3:d5:97:85:27:71:29:1d:4a:9a:79:32:f8:ea:e5:6e:22:
98:73:18:60:73:b1:e1:68:80:64:bd:b3:bb:1f:be:f4:4e:67:
66:78:1b:32:23:98:a9:5a:2f:14:0a:f7:9b:cb:89:5b:e0:76:
7e:c2:47:2b:9e:ff:11:9d:68:37:91:d1:8c:f5:e3:ee:78:96:
fb:69:2c:3e:b5:77:f9:d5:09:16:f4:1b:f3:49:59:40:43:18:
20:5d:0d:94:b0:42:91:94:71:e1:cc:a3:e1:e8:f8:a3:d0:4c:
ce:f0:36:b7:7c:fc:d3:60:2e:dc:16:34:06:47:21:38:19:d0:
89:2e:ec:a0:8f:c1:91:75:c9:a7:ce:66:81:79:0d:13:90:e2:
e2:d2:a7:76:f2:e0:01:9d:36:d9:1d:70:31:41:9d:63:04:05:
d7:e1:5b:2b:a0:f2:ab:2f:8e:08:98:bb:4f:83:63:da:70:0d:
38:f9:37:5a:a1:eb:cc:37:26:20:5e:7a:cb:f5:ca:c6:a9:2d:
de:37:d3:dd:b6:e2:8a:86:45:3b:33:dd:02:b8:c1:d9:53:49:
fe:41:33:6f:f6:18:93:76:3f:6a:e5:ad:28:b7:fd:e5:98:6a:
f9:86:ce:3b:03:7a:11:37:ee:66:5b:6c:33:c5:d8:e0:7f:8f:
15:fe:b3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:45 2026 by rpki-client