Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
File: xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft (raw, json)
Hash identifier: kp6Fu7PoARF0DbQBOb87xEP2YRb41FDAhb2q1OCPXUc=
Subject key identifier: 28:A3:31:68:98:7C:6D:B0:1F:B8:F0:EE:B5:39:4D:FD:78:77:65:9F
Authority key identifier: C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4
Certificate issuer: /CN=c5e14070210627bfca4654b42de797acd6d2c4f4
Certificate serial: 019CAA585302D181AAF2AAA835139842C508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
Manifest number: 0837
Signing time: Sun 01 Mar 2026 17:00:40 +0000
Manifest this update: Sun 01 Mar 2026 17:00:40 +0000
Manifest next update: Mon 02 Mar 2026 17:00:40 +0000
Files and hashes: 1: 2jQx973K_WHIEDeBwoceaInwrVk.asa (hash: Xu/Sv3zfgccGu+NaMsUgY/a+THDNzPx1jfH33fWcIQ0=)
2: 4N_n1cCDT7wj_iB4XrMTAQ9PivM.roa (hash: MxvavFzCXv3bNh/z3UJzQ6ZzRkLADzDg48/vugWD+cE=)
3: xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl (hash: eX8zPEvC2emHiboTl0ECZDQR11TndckZSZbU7C0OIBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:53:02:d1:81:aa:f2:aa:a8:35:13:98:42:c5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e14070210627bfca4654b42de797acd6d2c4f4
Validity
Not Before: Mar 1 17:00:40 2026 GMT
Not After : Mar 2 17:00:40 2026 GMT
Subject: CN=28a33168987c6db01fb8f0eeb5394dfd7877659f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:50:cc:0c:ee:10:99:f9:aa:40:c2:0b:20:f8:
bd:92:84:cd:a5:88:0d:32:b3:0a:b1:97:47:19:31:
77:21:5d:82:50:62:49:dc:eb:d1:f8:6a:02:e5:88:
9d:f7:2e:93:f6:6c:70:c7:43:75:86:8a:cd:02:ae:
94:7d:e3:2f:43:b2:d2:23:7e:26:bc:0b:59:8f:45:
e3:75:54:9c:e4:0a:fd:09:0a:4b:54:73:66:8b:20:
26:b7:57:99:c8:5b:10:ea:66:cf:0e:af:66:2e:c4:
79:48:fe:f1:3e:c5:40:d6:51:50:e3:f8:6e:0d:95:
1c:ed:6f:b1:e6:de:44:f7:a1:54:1a:ec:de:36:06:
62:e5:e0:ad:36:8f:22:37:fd:9d:d9:de:2c:60:74:
b3:48:2e:69:79:44:ac:4f:35:4b:50:ea:fb:03:73:
9b:35:4d:4b:8e:c7:39:2f:a2:3e:fe:b9:90:98:9c:
6d:66:65:e6:38:22:6c:e1:a6:c2:cb:f0:43:10:23:
d7:18:f7:e1:0c:c5:4a:5f:19:5a:b6:e5:64:4c:9c:
a6:ad:2b:db:f6:b9:6f:5c:d0:75:62:b1:38:d8:c3:
15:4d:1c:cc:4a:a3:9b:ba:97:f7:cf:32:5e:ce:db:
b1:4f:5e:05:e2:5d:d5:2f:1c:19:67:4e:40:af:82:
04:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A3:31:68:98:7C:6D:B0:1F:B8:F0:EE:B5:39:4D:FD:78:77:65:9F
X509v3 Authority Key Identifier:
keyid:C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:01:04:0c:50:1c:c5:b5:09:20:b8:e6:f6:18:d3:89:bf:3c:
04:b8:30:5a:a1:33:17:e8:74:d9:91:36:68:90:98:af:96:16:
4e:df:ef:47:d5:e2:4f:93:85:d5:a5:97:7b:58:1c:25:61:de:
8f:92:43:4d:3d:84:66:1c:2e:a2:ca:b3:8d:97:97:77:0f:51:
c5:61:ca:c8:6e:a5:de:e9:6f:cc:c6:c5:bf:6f:2b:0b:b6:64:
fa:7f:d5:71:a9:d3:f9:11:21:a8:f5:21:94:3b:0b:a2:17:ec:
9c:67:18:39:03:60:e4:46:c9:28:45:bc:8a:1b:24:45:bf:19:
21:f4:41:3b:dd:e1:7e:97:8e:ac:e9:ec:44:44:13:fb:cd:cf:
5c:3d:25:46:09:ef:de:9c:5f:6c:1e:04:64:e4:bd:c5:94:91:
93:c9:af:4e:91:7c:0d:b4:fc:8c:ca:52:49:34:ca:d3:a0:bb:
3d:a3:81:ca:ff:3c:7b:da:6e:62:33:b6:6a:4e:c9:f9:38:26:
58:70:43:0f:57:28:d8:ae:ec:90:2b:20:96:c5:74:c9:04:9e:
49:d0:ea:8c:a5:bf:00:4b:78:55:54:c5:e5:7d:1b:0f:ad:f8:
ec:01:cf:88:4e:34:2e:02:61:88:07:e0:9a:f1:ac:86:c4:e5:
10:7d:a2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:46:50 2026 by rpki-client