Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
File: xr--8nm_ne1uNlHgYo05unkpT3g.mft (raw, json)
Hash identifier: cMR5yUxxz+sS3XOU1ovrOGT/4h3UQ847td6vmg6tFW0=
Subject key identifier: CD:EF:86:5B:F4:A1:09:AB:9D:AC:DE:27:BF:B7:09:43:8E:87:70:4D
Authority key identifier: C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
Certificate issuer: /CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Certificate serial: 019CAA8F661461BF4F1D8C9D711BAD105E93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 18:00:50 +0000
Manifest this update: Sun 01 Mar 2026 18:00:50 +0000
Manifest next update: Mon 02 Mar 2026 18:00:50 +0000
Files and hashes: 1: E8RgfAnRQ_MkPzEQzExnrRGS9bk.roa (hash: Uscjfda3vNy/cunwHUUok4ph0ZEvFOV3pV/NuXcyZJ4=)
2: jQxMjcdrhmgG348-FC6ZQ2XBhWA.roa (hash: zzN6qYWykA9k6vddc6gAA5bY2rFVt0NTvTAU0BcNrqQ=)
3: xr--8nm_ne1uNlHgYo05unkpT3g.crl (hash: 8s6i79x+yyO/eGF8EEtH16BVbCk5Z893+RPBlgmQb7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:66:14:61:bf:4f:1d:8c:9d:71:1b:ad:10:5e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Validity
Not Before: Mar 1 18:00:50 2026 GMT
Not After : Mar 2 18:00:50 2026 GMT
Subject: CN=cdef865bf4a109ab9dacde27bfb709438e87704d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:55:01:2b:14:e7:65:9e:e5:a8:a4:c1:de:c9:
16:37:38:8b:e9:09:f8:eb:de:eb:a3:14:99:34:4c:
87:c8:75:68:a0:89:b8:e4:2d:a4:e8:1a:8c:78:cb:
e3:24:6f:34:50:f2:4c:a2:7f:9a:ba:47:f3:2e:13:
84:1a:61:26:f3:ca:4b:43:4e:67:47:8d:12:ea:70:
3d:b0:87:d7:10:dd:f7:e9:03:2d:d7:4d:57:37:91:
70:7a:b7:47:0c:ec:a2:7e:88:ab:bc:26:7e:c9:30:
00:fd:1a:33:6b:29:8f:33:85:ea:f8:ac:65:95:e6:
30:3c:69:45:cf:a6:fe:05:d0:2a:54:ea:6f:23:85:
71:d8:1c:a8:e4:f5:90:39:18:c9:7f:9a:90:08:4c:
2b:e9:27:65:89:33:c5:b4:aa:a7:30:12:b7:25:46:
27:5a:fd:9b:53:33:a6:95:3d:c5:2a:91:3e:e1:4f:
56:c5:52:ba:d3:4c:7f:1f:76:5e:f9:85:71:a0:56:
93:d8:29:c7:04:93:2f:20:eb:a5:61:f5:26:ee:52:
f0:94:8f:9c:50:1d:fe:3a:e2:80:58:cd:5d:f1:cb:
08:53:74:1f:f9:4b:d4:98:f9:51:3e:9b:eb:31:96:
98:46:fe:71:9c:49:4f:95:57:b4:9b:34:11:4e:0e:
8e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:EF:86:5B:F4:A1:09:AB:9D:AC:DE:27:BF:B7:09:43:8E:87:70:4D
X509v3 Authority Key Identifier:
keyid:C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:a7:a4:ca:43:8f:73:20:4e:45:8f:10:7a:fb:00:4b:f3:43:
19:59:0b:28:ac:8b:c6:1c:2e:7a:fb:b6:84:08:9a:93:35:d3:
34:db:f7:12:47:e3:80:05:9f:f7:62:f8:23:b5:df:a7:db:57:
36:f2:12:8b:13:0a:69:26:82:5c:34:58:ab:3b:9c:b3:2f:9b:
3b:9d:7e:c7:68:b1:21:c9:21:05:05:ed:c6:91:e7:12:8a:34:
7c:01:79:05:ef:2a:5f:db:40:87:bd:8f:c3:71:6f:05:74:d4:
82:d9:9c:a4:69:16:80:8f:ae:98:15:51:ed:96:14:f3:c1:3e:
33:bd:3d:11:7c:fb:c8:51:78:40:99:04:97:ba:34:5d:ca:43:
74:63:22:dc:a1:7f:81:19:22:ba:2c:23:7d:48:a0:15:8b:5a:
a5:c3:69:f5:2d:9c:a3:b2:7a:d0:3d:37:a2:0c:eb:83:59:ec:
ad:4b:a9:3c:b4:c0:7f:f7:f1:84:d2:8f:cb:d9:29:ac:1a:0f:
ce:d9:e8:41:be:40:f9:0f:d0:97:09:b6:01:c7:30:d3:5e:0f:
6d:0d:20:31:3c:6c:ce:3e:1d:22:b0:79:c0:0b:7d:76:e4:e5:
98:51:23:c0:cd:79:d5:7f:5b:c7:4c:94:a0:19:98:df:4b:f7:
0b:c3:46:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:32 2026 by rpki-client