Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
File: xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft (raw, json)
Hash identifier: 3KwzRcNDO+NlG00TPRcs3hP8NfTa1dd0Blv1FiCLnSk=
Subject key identifier: 42:58:E5:9A:1A:DF:F8:A0:51:30:15:0C:07:A0:E4:7E:A0:41:AF:12
Authority key identifier: C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
Certificate issuer: /CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Certificate serial: 019CAC7E5774022D97F95E655C0D15152D81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
Manifest number: 1854
Signing time: Mon 02 Mar 2026 03:01:26 +0000
Manifest this update: Mon 02 Mar 2026 03:01:26 +0000
Manifest next update: Tue 03 Mar 2026 03:01:26 +0000
Files and hashes: 1: 7qKY5-kl-qaVMoRIB3RG5oNUdf0.roa (hash: L6u//TWO0oG/8Tdr3Tg8lfsVqZiNaM1y0Ryf8hK01sg=)
2: PPXNJhyqSJSHAcVtgk0VztMlglY.roa (hash: ex9cUqmNLS12UIvKYIuoCv8mQvwQVbCS289sS1wTF3M=)
3: e6h2n9XnoiZKNpyZDuWS--kogbA.roa (hash: tWYIKN6aFchD9ZG77xZYhxaLu1YeirWOa5ux4eeE0kw=)
4: lNE8D9GJWfcd-D9egVK1TMPitC0.roa (hash: 2CmJCZprp/LCt6ibHBoiFVrP1YcZuqexjzFdiTh77oM=)
5: xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl (hash: ybz0MhDHq6s8UF8OAumVBnwSlY6oONYFbXDZxtwkElw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:57:74:02:2d:97:f9:5e:65:5c:0d:15:15:2d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Validity
Not Before: Mar 2 03:01:26 2026 GMT
Not After : Mar 3 03:01:26 2026 GMT
Subject: CN=4258e59a1adff8a05130150c07a0e47ea041af12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b6:80:f6:9e:40:41:66:be:e1:3e:9c:58:02:
d1:7c:8a:71:7f:05:5e:6d:43:6f:70:f5:ae:e4:be:
30:96:5a:50:09:21:9a:b6:4f:08:0d:70:3d:fd:60:
56:95:a1:3d:06:69:d8:76:b6:b8:36:0c:4d:27:1e:
4a:2f:9f:75:b8:56:f7:6d:05:d9:5f:cc:6a:ac:f7:
bd:6f:5b:fb:7a:7d:25:4f:55:b4:a9:29:3b:9f:55:
fa:5e:0f:d3:f1:51:7e:15:50:ea:e6:d0:8d:0d:18:
e0:57:94:ea:10:01:77:a0:f1:0f:9b:20:c9:3b:b2:
16:da:d0:3d:23:50:a6:a2:2c:e2:29:e5:da:98:fe:
fb:aa:bb:f5:39:6e:9e:cd:e5:07:e5:63:c6:72:49:
8a:84:3d:d8:6c:27:de:ce:a3:99:96:3c:3b:14:e8:
22:fe:b2:24:40:2a:be:55:d2:57:8c:00:35:82:24:
05:11:0f:ce:39:04:a3:2d:81:a6:1c:89:88:bb:27:
ac:a1:f7:1e:b9:e3:d5:5d:bf:f5:1d:7d:13:93:22:
fe:4a:0e:f2:66:69:be:96:63:7f:30:bf:27:1b:ee:
0c:86:a0:7a:eb:ef:d8:60:aa:2a:bc:07:7a:10:c2:
f4:c9:15:fa:d0:75:8c:86:da:b4:40:03:2b:f9:ca:
65:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:58:E5:9A:1A:DF:F8:A0:51:30:15:0C:07:A0:E4:7E:A0:41:AF:12
X509v3 Authority Key Identifier:
keyid:C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:67:38:7d:0c:cf:be:c5:b2:cb:bb:4c:d8:30:85:07:3f:4c:
7f:44:c1:c6:db:aa:4d:06:e9:85:f7:b5:e5:4e:55:c0:46:88:
a9:76:00:91:6e:d6:0b:52:8a:89:a5:f5:7b:ec:92:95:0d:51:
a6:4a:45:7b:bc:dc:ad:27:7a:66:b1:f5:62:c7:cf:76:8b:a3:
76:35:5b:d3:bb:c6:dc:9f:02:74:24:0a:f9:dc:1d:6a:f8:fa:
c3:8d:d9:10:92:2f:be:87:ba:cc:87:28:3b:a5:39:58:96:a2:
69:e2:14:7a:99:b4:4b:11:0e:d8:9e:01:2f:f1:a2:43:4e:c8:
7b:df:12:e0:86:c7:aa:0b:fc:bf:e3:7c:49:56:9b:33:b3:49:
ba:92:38:4b:01:b1:77:8e:1d:a2:9d:39:bb:b9:bf:7f:f8:72:
73:05:f0:2d:45:b0:1f:c3:91:0f:63:19:b4:4e:28:75:00:bd:
ba:24:e5:79:1c:10:ca:ef:04:54:6c:0b:9d:db:9f:54:84:02:
f5:cc:36:62:5e:cf:58:8c:11:7e:a1:27:05:de:0d:64:d0:92:
bb:8a:03:b5:85:39:02:7d:4a:fe:de:09:eb:e0:fa:45:69:62:
b8:c0:04:03:1b:de:0f:a7:49:26:7c:97:4f:5c:b7:c2:48:58:
93:9e:35:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:35:48 2026 by rpki-client