Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
File: xfFStqDQBGJ9KF2Hmqg-WEYast8.mft (raw, json)
Hash identifier: b9eeEHlxJ14+u7CHW/LRozBUA0HoEsOrPj66oHc8fRQ=
Subject key identifier: 43:78:2F:BE:C6:C5:DE:BA:04:8C:73:93:CF:7E:38:4B:8D:40:2D:DF
Authority key identifier: C5:F1:52:B6:A0:D0:04:62:7D:28:5D:87:9A:A8:3E:58:46:1A:B2:DF
Certificate issuer: /CN=c5f152b6a0d004627d285d879aa83e58461ab2df
Certificate serial: 019CAD5A43DD11C3B7525C978524E1A64798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
Manifest number: 1468
Signing time: Mon 02 Mar 2026 07:01:39 +0000
Manifest this update: Mon 02 Mar 2026 07:01:39 +0000
Manifest next update: Tue 03 Mar 2026 07:01:39 +0000
Files and hashes: 1: IeDXwGVOfElOpoUVKW6XzrWRiBI.roa (hash: GHESyQes+1oGspk175UTydlQx1R9pgMNNVb0bk9BmB0=)
2: xfFStqDQBGJ9KF2Hmqg-WEYast8.crl (hash: Rj+KAosbHOY8V49bXIpOlgbgH7e7IRGnGPLXoXW2T+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:43:dd:11:c3:b7:52:5c:97:85:24:e1:a6:47:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f152b6a0d004627d285d879aa83e58461ab2df
Validity
Not Before: Mar 2 07:01:39 2026 GMT
Not After : Mar 3 07:01:39 2026 GMT
Subject: CN=43782fbec6c5deba048c7393cf7e384b8d402ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:fc:f7:67:7d:ab:67:d9:d3:f5:06:c9:d2:b8:
e9:5d:76:20:15:3a:71:63:36:41:91:f0:25:b7:20:
12:e4:50:b6:c1:04:70:b5:df:4a:87:fb:c9:78:1f:
6e:ea:5e:28:e5:1b:47:b5:17:ce:d8:87:3e:c5:97:
62:df:9b:cd:b5:84:ca:ec:79:d3:03:8d:08:7d:2a:
b4:28:7b:d1:02:2f:57:88:aa:05:ef:cc:b6:be:4e:
e7:74:05:e2:40:c8:f7:70:9e:7f:75:d0:59:dc:06:
00:d5:b2:e7:97:f8:49:80:a1:15:1d:0d:88:2e:58:
28:6c:f9:ed:71:3c:2b:45:09:23:58:92:ab:a3:20:
f4:00:39:df:d7:7b:a1:e9:3b:55:eb:ed:16:a5:60:
b7:e8:7b:60:88:9a:50:04:eb:c1:4f:c7:a0:41:03:
ad:c9:44:8d:e3:d0:71:b1:61:d7:56:b1:b3:9e:1e:
0f:ec:bb:07:28:96:6f:15:2f:39:f1:dd:41:59:0a:
36:af:c7:44:26:e0:73:89:bd:2b:ba:70:e1:af:a5:
36:1c:e0:36:ca:17:31:44:89:df:01:12:d7:ff:6a:
02:0b:25:2e:62:9d:56:3d:0d:cc:2a:e3:d9:b5:fe:
64:17:8f:52:71:c0:6f:c6:37:31:5b:7e:bd:52:0d:
2a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:78:2F:BE:C6:C5:DE:BA:04:8C:73:93:CF:7E:38:4B:8D:40:2D:DF
X509v3 Authority Key Identifier:
keyid:C5:F1:52:B6:A0:D0:04:62:7D:28:5D:87:9A:A8:3E:58:46:1A:B2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:8c:c5:c6:63:fa:24:2d:0c:db:dd:51:b9:87:b9:66:83:85:
c4:fe:91:89:7e:86:d7:7f:b3:55:97:93:bf:06:e3:d7:b4:1c:
78:20:34:d5:1e:2b:6d:2a:6b:e0:25:19:7d:72:59:ad:f2:2f:
61:34:de:85:d9:9b:a3:86:ad:a4:ad:73:3b:f1:f2:cd:a3:97:
8c:75:45:e9:e3:cd:78:83:60:7c:d1:ee:96:1c:f8:a4:e6:c0:
5a:46:92:87:a1:c8:0b:09:11:50:66:1a:42:da:8f:09:ed:24:
58:77:83:4a:45:4a:7e:a3:47:10:96:13:2b:6b:43:85:25:69:
4d:3f:c8:2b:4e:d3:f9:27:a4:95:a3:92:f3:e0:28:e2:a6:ad:
59:e8:88:90:7a:20:5a:fb:08:90:d3:a9:16:33:0e:94:cf:1b:
c9:f2:41:e2:00:d2:aa:c1:44:b1:d7:c5:d5:f3:21:34:c1:a4:
93:3e:df:d1:b7:35:ff:40:49:e5:e5:6b:a1:3a:1f:69:60:10:
a7:d6:53:73:e1:91:b6:19:15:6f:af:a0:96:72:a7:6e:11:21:
d6:93:60:1a:73:2b:d6:71:c2:94:bb:9a:83:10:04:f1:10:6f:
d7:56:33:fa:17:d1:7e:08:f1:56:dc:b9:6e:ac:3f:f2:f4:e4:
98:dc:c9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:39:03 2026 by rpki-client