Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
File: XEt3fWoBdf67oFtItHzfCmuJ1_s.mft (raw, json)
Hash identifier: hChTiQ2PcUJDTA7FVOxvUiiy3kwE+EfPdBUWXoHHqYw=
Subject key identifier: ED:17:FD:F2:4D:B2:3E:01:E8:E1:F2:50:E5:C4:E5:7B:71:9E:63:E3
Authority key identifier: 5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
Certificate issuer: /CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Certificate serial: 019CA9EB9BBC6A8A9CB630A2FA22106AE770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 15:01:56 +0000
Manifest this update: Sun 01 Mar 2026 15:01:56 +0000
Manifest next update: Mon 02 Mar 2026 15:01:56 +0000
Files and hashes: 1: Rjq8qMoUVTv8QuPKAfl_sw6bDWA.roa (hash: Ykk34DqNXHApsE9nxxAgQ38pONoyVUESYWMP39kBFzk=)
2: XEt3fWoBdf67oFtItHzfCmuJ1_s.crl (hash: 7Xa5gpXXTju5G7+AMI87UzdHoZPNovEM6+7dNzOs9TI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:9b:bc:6a:8a:9c:b6:30:a2:fa:22:10:6a:e7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Validity
Not Before: Mar 1 15:01:56 2026 GMT
Not After : Mar 2 15:01:56 2026 GMT
Subject: CN=ed17fdf24db23e01e8e1f250e5c4e57b719e63e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:76:73:05:bc:9d:2d:b1:c3:ce:97:90:11:e2:
3f:32:90:56:4a:15:18:18:0a:0d:d2:f7:1c:06:04:
ab:4d:db:d2:58:70:33:2e:88:b6:09:9a:cc:20:aa:
db:b8:4f:91:c0:8e:83:21:85:3b:40:2b:fa:b9:5b:
16:5a:f5:5c:4a:f0:e9:eb:19:0d:79:ef:14:ac:0e:
b7:6e:0a:d5:39:f4:85:9f:94:b8:c0:39:46:69:51:
4d:b0:f0:e0:7d:a4:48:df:79:6c:6c:14:44:b9:d3:
55:e4:78:18:d7:86:7a:15:1b:75:39:21:cc:45:80:
9f:ea:6f:8d:c3:c3:c5:30:1a:ca:61:6a:13:37:20:
08:55:2b:f2:b2:0a:20:7f:39:f2:b8:67:e3:e5:74:
3e:d7:68:ae:9d:78:59:92:ca:76:7b:77:59:ef:90:
cc:fc:d4:99:58:df:76:8e:56:37:de:3b:39:fe:f7:
ec:bb:5a:e3:94:f9:96:69:78:cf:78:3c:80:95:1a:
6c:3a:35:eb:2c:f9:67:a3:65:b7:6c:72:24:6f:10:
a8:34:b1:f4:88:d6:de:83:24:4d:92:6d:85:35:af:
a7:e7:0f:c0:f1:17:78:f6:82:1d:be:59:98:6b:5d:
77:f2:42:3b:e2:72:87:49:2b:31:55:40:39:88:a4:
14:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:17:FD:F2:4D:B2:3E:01:E8:E1:F2:50:E5:C4:E5:7B:71:9E:63:E3
X509v3 Authority Key Identifier:
keyid:5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:49:26:07:1b:50:47:ba:82:b0:e8:d6:2c:0b:96:52:ff:8a:
2a:41:64:84:ad:58:2e:47:a1:80:36:05:ac:10:98:83:5f:21:
8d:3c:36:e1:fb:5f:90:d8:22:19:68:85:59:de:ed:d8:e9:d6:
b2:1d:2e:bc:47:4d:00:15:ae:21:30:dd:93:82:03:56:5c:7f:
e9:ea:84:2e:c7:d2:87:c1:01:96:8c:13:da:37:ac:bf:6a:07:
ab:79:0a:01:e7:51:f8:98:9f:c4:7a:92:82:38:53:6e:02:ed:
f2:ed:7a:d6:4a:b0:41:35:7c:1e:d2:e0:d1:40:e9:01:c3:93:
88:f3:e3:2b:93:b4:a3:df:77:df:56:bc:77:0b:28:a2:4d:03:
b8:28:e6:f7:47:d5:aa:04:e5:43:08:9d:1f:49:08:a6:32:e2:
85:cf:77:82:0a:bf:d4:93:13:9a:15:07:d4:5e:c6:8c:73:62:
4f:36:6a:8e:ce:dd:09:53:41:2d:1c:b9:dd:71:f8:fb:d0:1f:
93:48:72:68:0e:c7:57:6b:1f:d8:d3:5d:a0:37:f6:36:40:b5:
2d:fb:60:7f:79:a1:e0:2c:ec:be:d4:67:21:c1:e9:59:4b:f9:
36:e6:53:a9:97:ac:2d:fd:d2:43:32:b4:ae:99:95:e5:80:b9:
4c:67:a7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:07 2026 by rpki-client