Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
File: xeFyhy63vvCWXfE7D8XWXnU3Chk.mft (raw, json)
Hash identifier: jEiNEDTJ63anEMf1nw33QDVDfjMjUxemI9ipIZF0hH4=
Subject key identifier: 5D:F4:01:72:89:98:A8:CD:7E:80:66:E1:BC:9C:82:F7:B6:47:64:A3
Authority key identifier: C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
Certificate issuer: /CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Certificate serial: 019CAAC6217E6CFDE354F988794FF3258486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 19:00:37 +0000
Manifest this update: Sun 01 Mar 2026 19:00:37 +0000
Manifest next update: Mon 02 Mar 2026 19:00:37 +0000
Files and hashes: 1: BQKL8EXCPvyOQg1ICU181HzsTLY.roa (hash: MQTZW+TVECgfYFhuLaoeF6hUd6ELHRAnYHxRk4WvfLE=)
2: FxY1RAn7Uc02QNfQHdB91asNvfo.roa (hash: XFxgE3CskWpWNCg7s6TQKuMZYsJq+2wXqoHIuIsrGSk=)
3: mvSatyfuo61e-RTaG2TAjXDZEec.roa (hash: Wd+3k5bQsb75PtYForkA7tIC7S5S2MMNM7YiFG0yOOs=)
4: xeFyhy63vvCWXfE7D8XWXnU3Chk.crl (hash: OelL4tM7Urkn3AUtQGL9Z4jzzYWczFVr6WznzRqGj+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:21:7e:6c:fd:e3:54:f9:88:79:4f:f3:25:84:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Validity
Not Before: Mar 1 19:00:37 2026 GMT
Not After : Mar 2 19:00:37 2026 GMT
Subject: CN=5df401728998a8cd7e8066e1bc9c82f7b64764a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:27:2d:07:b8:b5:e5:76:23:60:4c:4c:38:7b:
14:7b:c5:34:0e:85:92:50:4a:d2:aa:07:e0:74:5e:
d0:b7:61:72:90:6c:a2:ce:1e:9e:e4:69:43:b9:36:
24:f5:29:c5:fb:81:3d:23:a0:9e:70:1f:eb:c0:e4:
c7:90:72:fc:30:1f:b3:65:7e:77:0e:78:1b:35:1b:
41:59:df:ff:97:e1:41:74:26:cb:ef:13:3c:37:c2:
e9:97:f4:0d:e2:1b:45:9f:ed:53:92:d6:69:96:3d:
9b:86:ea:87:3e:25:5f:49:7c:98:67:a4:9c:99:37:
2c:f0:85:c7:a7:2a:df:16:0d:14:44:42:b2:5e:10:
e9:ad:97:2a:e4:f3:f8:87:d9:fa:13:d9:fe:bf:b9:
0b:60:60:26:07:26:5e:8a:44:e1:0d:80:84:30:98:
77:d4:f3:dd:a8:d0:a4:05:80:08:cd:80:d8:31:bb:
d9:d1:ad:da:dd:59:6e:84:e6:e9:4c:c5:a4:21:1f:
8a:95:6a:7a:07:55:48:c9:a4:f0:d8:9a:84:f4:ac:
46:7d:11:9c:cc:00:1f:1c:b4:e7:64:47:03:18:df:
ff:0a:62:78:69:32:3a:9e:54:c7:88:d4:c0:8e:20:
5c:29:48:47:a7:77:47:a0:8b:62:4c:f5:63:53:ab:
a6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F4:01:72:89:98:A8:CD:7E:80:66:E1:BC:9C:82:F7:B6:47:64:A3
X509v3 Authority Key Identifier:
keyid:C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:71:5b:51:81:62:0e:f7:59:86:2d:39:35:5e:05:12:37:10:
78:dc:a0:d1:e6:2c:96:d4:a0:b2:5b:c6:d3:76:b1:d3:d0:d3:
e7:ff:ad:0e:4f:48:e5:e0:ac:8e:ad:02:89:db:2e:94:af:4d:
60:4e:8e:96:f9:23:99:a9:91:a4:a4:51:a7:76:26:4e:10:c8:
3d:0f:47:85:1a:0d:98:cd:5c:07:bc:08:0e:d6:f5:f6:ef:70:
1f:11:fc:81:1b:6f:bc:ce:a0:02:cb:4f:16:64:92:ec:d6:a7:
cc:30:b1:6e:0e:20:d3:4d:d7:cc:cb:57:1b:1f:24:e0:8e:f7:
83:47:5e:eb:25:dd:97:df:3f:13:68:b2:33:48:e7:ec:f6:0f:
92:f4:03:aa:15:0e:25:9a:14:f4:2c:78:9e:8c:3f:de:0d:a3:
c6:40:70:20:e7:54:29:b6:93:0f:d4:52:ac:a8:80:6c:98:aa:
68:78:d7:b9:b7:ab:58:0e:1d:e7:a9:ca:89:f9:14:61:27:1d:
e7:9c:27:2c:9a:05:e5:2d:5d:2c:56:7c:47:dd:06:02:91:f2:
91:a8:5e:42:7a:da:cf:b6:d5:8a:94:7e:cb:48:11:da:81:16:
f8:b8:d1:31:83:5d:ba:b7:6f:31:ed:69:67:83:e3:35:36:52:
1f:40:cf:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:33 2026 by rpki-client