Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft
File: XtjeCCBk6z_rQCqHPli7aM9dSR4.mft (raw, json)
Hash identifier: Moe3rv7o/XwJRLORhjqi/66X9wHPI7+WQ3iLyxlk5/U=
Subject key identifier: C1:89:90:74:D1:DC:CC:43:38:DF:40:D7:F7:4F:A8:5E:00:06:42:72
Authority key identifier: 5E:D8:DE:08:20:64:EB:3F:EB:40:2A:87:3E:58:BB:68:CF:5D:49:1E
Certificate issuer: /CN=5ed8de082064eb3feb402a873e58bb68cf5d491e
Certificate serial: 019CACB46E15234C6BDA25BC0332BE4E2E51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft
Manifest number: 0A04
Signing time: Mon 02 Mar 2026 04:00:31 +0000
Manifest this update: Mon 02 Mar 2026 04:00:31 +0000
Manifest next update: Tue 03 Mar 2026 04:00:31 +0000
Files and hashes: 1: V6ybFfc4rzpu3NrH9kaqGbFeKqk.roa (hash: CmcBK0JbdCkq9SyfG/xpgWBN+pvjaz0MINnXMk2x50o=)
2: XtjeCCBk6z_rQCqHPli7aM9dSR4.crl (hash: b/EEB9raE0GEFTrtfYh6byaOQWGc/z+o11bXkTY3lMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:6e:15:23:4c:6b:da:25:bc:03:32:be:4e:2e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed8de082064eb3feb402a873e58bb68cf5d491e
Validity
Not Before: Mar 2 04:00:31 2026 GMT
Not After : Mar 3 04:00:31 2026 GMT
Subject: CN=c1899074d1dccc4338df40d7f74fa85e00064272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1a:32:b7:f1:83:a7:7e:ac:00:db:27:7a:7d:
d9:d8:72:fb:9f:4b:04:40:05:f9:73:8f:06:8f:34:
11:4a:2a:82:36:32:21:52:64:a1:69:0c:66:ed:af:
40:1e:ca:06:9d:85:f9:6e:5c:b4:08:79:83:a4:85:
fe:c6:1b:7c:3c:1e:90:84:ad:ff:26:8d:31:f0:ed:
cc:fb:99:6c:52:b8:5c:19:67:8b:0e:72:92:e0:9f:
65:d3:49:c1:0e:48:ab:f8:aa:de:99:9c:7f:34:4d:
d3:52:f9:14:6d:c9:06:0d:b1:af:34:4c:47:08:eb:
07:31:42:ba:e8:ee:ad:11:81:3d:da:d7:b7:e4:a7:
4f:eb:68:00:50:f2:4d:dd:5c:6d:d7:89:0b:75:72:
b3:9e:ba:97:8f:a7:c5:83:f5:27:22:af:05:44:07:
2e:a5:2b:03:79:64:5b:04:69:59:4f:29:13:73:64:
7c:19:d8:12:a4:60:23:27:e7:9d:49:fc:2a:e2:81:
b4:57:04:76:89:e0:ad:51:18:72:40:6c:98:a5:43:
69:b4:98:97:ae:f6:bd:6b:32:e7:d8:ca:f9:b6:96:
32:6d:9d:64:dd:2e:ba:8f:4e:44:00:54:2f:1a:f2:
9c:34:e3:8b:16:1b:ba:9d:5d:b0:15:89:87:0e:63:
86:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:89:90:74:D1:DC:CC:43:38:DF:40:D7:F7:4F:A8:5E:00:06:42:72
X509v3 Authority Key Identifier:
keyid:5E:D8:DE:08:20:64:EB:3F:EB:40:2A:87:3E:58:BB:68:CF:5D:49:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:6a:69:5c:e2:20:73:ec:27:1f:9e:43:68:3f:1c:9e:be:c7:
9b:d9:b8:2f:c2:d3:a0:07:9f:f5:cf:89:a6:12:cd:aa:53:55:
2f:05:1b:1d:d2:c6:ce:ed:67:ff:a7:3d:9e:3a:bf:cb:57:06:
68:6c:34:22:4a:e6:55:0f:2d:d4:d7:69:3f:ee:ad:5f:93:34:
01:4b:c5:cc:a3:bc:a3:09:61:15:3e:7e:0f:51:23:a3:a0:cf:
d8:1d:b8:5e:90:68:70:dc:c9:ca:62:4d:ed:98:74:1d:8e:34:
97:74:d3:8c:40:95:a8:63:6a:dc:ad:a0:63:f2:b8:cd:01:0d:
df:5d:94:f4:16:9d:3d:15:5e:e5:93:6b:90:24:3a:76:db:73:
8f:36:9f:e1:f2:3d:80:b7:55:0b:df:5e:da:65:51:67:20:b8:
45:5f:06:b5:13:c3:94:0d:5a:fe:03:45:15:07:6f:0b:69:a5:
1d:a8:24:8e:81:6d:ca:46:9a:cc:97:cd:f8:2b:c8:53:ba:9c:
84:df:f7:25:db:42:9b:f4:c9:12:75:58:2a:5f:78:f5:84:4f:
43:47:0c:e8:d9:30:4a:bc:07:cc:c2:e6:f4:e3:14:d6:fc:4c:
c2:ab:3e:72:72:75:a0:c9:d2:d0:4e:ec:2c:35:c5:dd:88:3f:
35:30:26:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:48:54 2026 by rpki-client