Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
File: x2sILxfCC126JFzqbk5unGCZzvc.mft (raw, json)
Hash identifier: ewXu2HRF2XOFvOXElLnE8z64g4qyjjA6BergaduugRA=
Subject key identifier: 26:F4:09:98:0C:CD:EF:75:2D:CA:ED:D7:0E:D2:7F:56:74:BC:AE:12
Authority key identifier: C7:6B:08:2F:17:C2:0B:5D:BA:24:5C:EA:6E:4E:6E:9C:60:99:CE:F7
Certificate issuer: /CN=c76b082f17c20b5dba245cea6e4e6e9c6099cef7
Certificate serial: 019CAAC5FA1A816D55B83D7CDBB7D9ECCB64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
Manifest number: 0B23
Signing time: Sun 01 Mar 2026 19:00:27 +0000
Manifest this update: Sun 01 Mar 2026 19:00:27 +0000
Manifest next update: Mon 02 Mar 2026 19:00:27 +0000
Files and hashes: 1: cnFiZY7qwJbMwSvpZZiZsqKr_Do.roa (hash: 48IPezm1nI8pkv7kwBfhTKNFTjJ1YkJ3TGASpAZ4rvY=)
2: x2sILxfCC126JFzqbk5unGCZzvc.crl (hash: rv4GYl76Prl+D0A24EXskIfNBFiTBR6r8JWMwFiCDaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c5:fa:1a:81:6d:55:b8:3d:7c:db:b7:d9:ec:cb:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76b082f17c20b5dba245cea6e4e6e9c6099cef7
Validity
Not Before: Mar 1 19:00:27 2026 GMT
Not After : Mar 2 19:00:27 2026 GMT
Subject: CN=26f409980ccdef752dcaedd70ed27f5674bcae12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ce:f9:c1:10:1f:8c:91:24:a2:ae:ae:17:7b:
78:a6:63:21:9b:7d:5f:fe:fe:1b:d9:e5:0d:71:73:
63:bb:d4:54:1e:53:6a:d4:1a:9e:7b:97:36:7b:1f:
27:bf:40:64:58:d8:f7:0b:f7:a1:3c:8c:ae:4f:5f:
a9:b2:ec:48:fd:f0:dd:34:6c:e9:ad:0f:dc:e3:18:
a0:ff:73:4d:93:a5:03:02:a3:2a:ea:af:24:57:23:
f0:1c:32:3b:fa:5d:c7:99:67:1c:d3:82:2b:ed:d8:
ac:54:72:9e:2e:e8:a9:25:bc:2e:94:68:aa:3b:3b:
bc:21:87:ae:b1:2e:39:20:94:4a:72:a1:66:90:dd:
6a:b5:f9:09:a3:d3:d5:a3:0a:a0:82:26:c1:84:4d:
25:8c:b5:b2:61:be:3e:88:8a:5c:d2:39:d4:fe:d2:
c5:64:27:72:b0:a2:75:f2:5c:ed:d9:9e:46:9f:7f:
cf:f2:2b:b7:ac:88:87:48:3b:70:c0:d4:b6:9a:c7:
51:bb:be:ee:c4:88:48:a0:10:6f:42:a9:26:06:26:
43:0f:c4:05:ea:60:e5:9a:ee:7a:a0:7c:15:c8:88:
6d:ff:b4:27:63:3e:37:5a:cd:b3:67:23:db:a2:e9:
47:2f:ef:68:c5:7b:8a:22:c3:42:73:05:e5:dc:fc:
33:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F4:09:98:0C:CD:EF:75:2D:CA:ED:D7:0E:D2:7F:56:74:BC:AE:12
X509v3 Authority Key Identifier:
keyid:C7:6B:08:2F:17:C2:0B:5D:BA:24:5C:EA:6E:4E:6E:9C:60:99:CE:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:67:a0:a1:4e:ae:0d:d0:44:93:2e:99:05:d1:76:68:2f:10:
54:08:a0:7a:81:59:8d:52:7d:97:3d:6f:a6:f6:21:2e:31:cc:
73:20:7b:85:7c:d2:82:46:6d:3b:9f:97:87:fa:32:42:07:65:
9e:eb:14:bc:b0:6b:f1:d7:a6:33:3e:a9:1e:8b:b8:67:ca:db:
47:8f:4d:4b:28:ea:b8:3f:08:64:cb:b5:0b:7e:20:53:f8:55:
11:5f:4d:87:3b:61:21:ee:25:ea:9e:87:71:a6:99:b6:ca:64:
5c:01:27:31:aa:d5:21:20:e6:15:fa:11:6a:86:3f:70:8c:27:
3a:f7:3c:54:05:12:48:97:ce:b5:fc:4c:e4:41:a0:1b:8e:f1:
db:94:e7:dc:59:a0:99:df:46:0e:49:a3:9f:d9:b7:a6:3a:17:
13:1d:60:86:3b:a2:a8:c0:42:eb:4b:1a:c0:d5:c2:63:de:6e:
20:b8:59:82:44:fa:fa:80:32:76:39:17:9a:fa:e4:dc:c6:e0:
33:09:05:ea:15:29:0c:20:e6:1f:c0:a3:e0:02:d4:f7:93:21:
fd:42:3a:11:6b:1a:25:53:11:08:30:0d:f6:0a:23:3a:d8:8f:
5b:cb:03:81:22:d4:5d:28:b7:e2:81:61:4a:da:33:50:4b:c8:
d3:77:60:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:56:20 2026 by rpki-client