Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
File: xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft (raw, json)
Hash identifier: YhFTyAWFE1FVRKzn1yUXLQBRaNam8d5I8wVXmLIQ2wM=
Subject key identifier: 5D:FD:F6:B4:B5:83:C4:4F:FA:89:DF:41:99:EB:D8:22:36:65:BF:2D
Authority key identifier: C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4
Certificate issuer: /CN=c5e14070210627bfca4654b42de797acd6d2c4f4
Certificate serial: 019CA869E89FEFC88BDF95BF152BFE04E820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
Manifest number: 0836
Signing time: Sun 01 Mar 2026 08:00:38 +0000
Manifest this update: Sun 01 Mar 2026 08:00:38 +0000
Manifest next update: Mon 02 Mar 2026 08:00:38 +0000
Files and hashes: 1: 2jQx973K_WHIEDeBwoceaInwrVk.asa (hash: Xu/Sv3zfgccGu+NaMsUgY/a+THDNzPx1jfH33fWcIQ0=)
2: 4N_n1cCDT7wj_iB4XrMTAQ9PivM.roa (hash: MxvavFzCXv3bNh/z3UJzQ6ZzRkLADzDg48/vugWD+cE=)
3: xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl (hash: tCTt4yr9m4U+J/RDCOlDzg9LiNxoK323WmRLwattO9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:69:e8:9f:ef:c8:8b:df:95:bf:15:2b:fe:04:e8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e14070210627bfca4654b42de797acd6d2c4f4
Validity
Not Before: Mar 1 08:00:38 2026 GMT
Not After : Mar 2 08:00:38 2026 GMT
Subject: CN=5dfdf6b4b583c44ffa89df4199ebd8223665bf2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d5:0e:c0:c0:cb:06:60:e0:22:8e:62:a7:bc:
52:a2:52:40:52:a8:41:e4:98:92:fa:c4:eb:d6:06:
01:b7:ef:7d:72:8a:e5:8a:15:ac:50:72:01:85:8b:
04:72:21:a8:fb:6f:89:6d:c0:e8:f9:a7:5c:2e:ec:
b2:12:c3:80:ed:17:c9:d8:5a:76:23:3e:1d:59:fc:
9c:bf:87:67:ee:ea:2a:a4:64:7f:fb:cf:43:f5:a6:
65:f0:77:cd:de:1e:2b:cf:5a:3e:30:2d:7b:ef:c7:
2d:ff:a7:d1:0d:1f:f7:06:5d:4b:0c:9f:1e:42:df:
f4:64:3a:1e:26:9a:f0:19:8f:be:bc:58:5b:8e:08:
76:e4:99:a9:1e:79:d3:7b:ee:43:b9:d7:0c:e5:ba:
c4:9e:60:44:48:8b:87:72:e2:ca:73:c8:eb:b6:b0:
d0:b6:c1:9a:b9:b0:e8:e1:d1:11:bd:02:9f:6c:a2:
7f:b1:83:78:0f:1a:9b:74:bb:f8:76:a3:de:35:0b:
7c:8e:da:1d:1f:34:24:e9:e9:d0:fa:df:94:79:8b:
20:0f:57:61:ba:c6:f8:2a:11:33:a3:84:48:b1:7d:
e9:2e:5b:09:f4:17:bd:17:be:f6:7d:44:03:e6:78:
78:0f:41:4a:1e:e8:26:80:a8:7f:23:ad:88:be:88:
62:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FD:F6:B4:B5:83:C4:4F:FA:89:DF:41:99:EB:D8:22:36:65:BF:2D
X509v3 Authority Key Identifier:
keyid:C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f3:c5:93:8e:03:72:47:c7:25:ff:32:e8:15:3b:98:ca:7b:
b3:36:85:a2:00:0d:99:de:c1:4f:66:45:59:d4:0e:21:44:ce:
1d:57:1a:1e:0a:de:be:65:45:df:ca:be:1b:c6:39:9d:a3:65:
6f:76:a6:ad:ba:f1:d8:6a:6a:bb:3a:9b:fd:5c:46:88:09:8b:
25:e0:d6:dc:be:a9:d7:28:23:f8:46:d9:9a:c7:43:94:b7:61:
33:e8:d8:26:19:03:6e:84:8b:78:e3:02:2f:5b:f8:5b:e1:00:
5c:c6:2f:56:cb:75:98:f4:d8:bd:58:bb:b8:7e:2f:4a:ca:8d:
62:b0:f2:76:d0:1b:c7:2d:2b:f5:c1:47:a3:1c:b0:3a:60:06:
4e:d9:22:f9:29:55:d7:b7:db:25:05:2c:34:01:dd:81:aa:17:
87:e4:27:4e:5e:4c:72:3d:73:1a:a5:f6:31:5f:ca:30:69:e3:
67:4f:ce:c9:fe:3e:b9:49:49:b4:e1:e1:33:11:d7:c2:5e:fd:
6e:b2:ee:a5:75:0d:b6:f7:5f:24:02:05:bc:ef:28:35:cb:5c:
25:6a:ad:ed:89:07:c6:e7:ff:60:a4:75:16:3a:de:48:da:ac:
54:4f:3c:9e:1d:f7:b0:4a:fe:e3:51:aa:9f:50:38:1d:47:70:
00:66:7d:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyoaeif78iL35W/FSv+BOggMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZTE0MDcwMjEwNjI3YmZjYTQ2NTRiNDJkZTc5N2FjZDZk
MmM0ZjQwHhcNMjYwMzAxMDgwMDM4WhcNMjYwMzAyMDgwMDM4WjAzMTEwLwYDVQQD
Eyg1ZGZkZjZiNGI1ODNjNDRmZmE4OWRmNDE5OWViZDgyMjM2NjViZjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntUOwMDLBmDgIo5ip7xSolJAUqhB
5JiS+sTr1gYBt+99corlihWsUHIBhYsEciGo+2+JbcDo+adcLuyyEsOA7RfJ2Fp2
Iz4dWfycv4dn7uoqpGR/+89D9aZl8HfN3h4rz1o+MC1778ct/6fRDR/3Bl1LDJ8e
Qt/0ZDoeJprwGY++vFhbjgh25JmpHnnTe+5DudcM5brEnmBESIuHcuLKc8jrtrDQ
tsGaubDo4dERvQKfbKJ/sYN4DxqbdLv4dqPeNQt8jtodHzQk6enQ+t+UeYsgD1dh
usb4KhEzo4RIsX3pLlsJ9Be9F772fUQD5nh4D0FKHugmgKh/I62IvohiwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF399rS1g8RP+onfQZnr2CI2Zb8tMB8GA1UdIwQY
MBaAFMXhQHAhBie/ykZUtC3nl6zW0sT0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGVGQWNDRUdKN19LUmxTMExlZVhyTmJTeFBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80YmQ1MDAtNWQ0Zi00ODg5LTkxNDIt
M2M0ODM5YzhlODUxLzEveGVGQWNDRUdKN19LUmxTMExlZVhyTmJTeFBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS80YmQ1MDAtNWQ0Zi00ODg5LTkxNDItM2M0ODM5YzhlODUx
LzEveGVGQWNDRUdKN19LUmxTMExlZVhyTmJTeFBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATvPFk44D
ckfHJf8y6BU7mMp7szaFogANmd7BT2ZFWdQOIUTOHVcaHgrevmVF38q+G8Y5naNl
b3amrbrx2Gpquzqb/VxGiAmLJeDW3L6p1ygj+EbZmsdDlLdhM+jYJhkDboSLeOMC
L1v4W+EAXMYvVst1mPTYvVi7uH4vSsqNYrDydtAbxy0r9cFHoxywOmAGTtki+SlV
17fbJQUsNAHdgaoXh+QnTl5Mcj1zGqX2MV/KMGnjZ0/Oyf4+uUlJtOHhMxHXwl79
brLupXUNtvdfJAIFvO8oNctcJWqt7YkHxuf/YKR1FjreSNqsVE88nh33sEr+41Gq
n1A4HUdwAGZ9jQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:30:42 2026 by rpki-client