Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
File: Xh1AYP1QHrrpPtRNprennmZwWy8.mft (raw, json)
Hash identifier: 6kL4haddkfeAIRVIQM0XsGBwyfKaS3/ZKOChD03ENTY=
Subject key identifier: BD:33:7A:4F:8E:70:20:4B:AC:14:FB:B6:54:37:3F:87:0B:87:1F:D4
Authority key identifier: 5E:1D:40:60:FD:50:1E:BA:E9:3E:D4:4D:A6:B7:A7:9E:66:70:5B:2F
Certificate issuer: /CN=5e1d4060fd501ebae93ed44da6b7a79e66705b2f
Certificate serial: 019CAD5A18BA69A79897EE650F7B4BEFADBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 07:01:28 +0000
Manifest this update: Mon 02 Mar 2026 07:01:28 +0000
Manifest next update: Tue 03 Mar 2026 07:01:28 +0000
Files and hashes: 1: JQHrdWqlz2UqGKCLzlTiY4SvfH4.roa (hash: bwaVBJc44mNBjusS1vQzeOwmOeBHHl10XyVb8yiVdpw=)
2: Xh1AYP1QHrrpPtRNprennmZwWy8.crl (hash: qsjpC/jUFkrOJLx5uiEQaa/YRlK1QQwPIRO9UuTK5nA=)
3: ZjTRqjLbUrNz2NUC-0NUb8hGxVI.roa (hash: lNRVW6GevA3klBK1hehDwbl+8Dt78Jzm0k/Uol69mug=)
4: euXoJUWr3F0_dXowhJbULwFHFkA.roa (hash: cczTixdHtcVBoqBRLYhdFy/dK3Tmrb19hmQ27lh4fQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:18:ba:69:a7:98:97:ee:65:0f:7b:4b:ef:ad:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e1d4060fd501ebae93ed44da6b7a79e66705b2f
Validity
Not Before: Mar 2 07:01:28 2026 GMT
Not After : Mar 3 07:01:28 2026 GMT
Subject: CN=bd337a4f8e70204bac14fbb654373f870b871fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c8:00:d5:12:15:1e:bb:c7:04:11:43:ea:7b:
8e:b9:b5:6f:a2:65:5f:15:16:f7:79:5b:30:7e:b1:
ef:d0:07:5f:fc:ae:b8:d7:07:c6:88:a0:5d:20:9f:
7e:5e:35:f3:f5:2a:5a:91:8d:b4:f0:45:b2:a2:9e:
dd:e1:d5:cb:e5:22:84:dc:f4:4c:78:b3:86:57:44:
13:a4:cd:db:01:f5:9d:ac:e6:c4:e3:40:21:82:bb:
86:d2:6a:63:56:23:3c:ce:c2:0d:1d:21:fd:be:e7:
c5:d7:81:e1:95:67:42:44:7f:06:cc:22:11:07:62:
b7:20:91:81:be:57:0d:61:b9:e7:44:c1:7d:67:38:
1d:d0:46:2e:35:b6:c3:55:4b:53:5b:55:a6:74:58:
8b:e1:33:54:a1:7e:9f:b8:08:40:69:42:b4:c6:f4:
15:e1:96:8d:1f:b1:17:b3:c9:16:66:4e:5c:ff:4d:
e2:f2:af:a2:c8:14:37:86:94:a3:84:88:07:89:03:
d5:65:25:95:82:f2:06:35:76:51:77:11:77:8e:ed:
bf:51:58:f0:5c:69:38:bb:cd:67:70:22:de:1a:87:
8a:26:ae:72:7c:3c:6b:62:17:c8:fd:69:d3:d3:15:
bd:c5:ff:17:5e:3c:b1:3a:4e:ea:55:37:46:ba:27:
dd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:33:7A:4F:8E:70:20:4B:AC:14:FB:B6:54:37:3F:87:0B:87:1F:D4
X509v3 Authority Key Identifier:
keyid:5E:1D:40:60:FD:50:1E:BA:E9:3E:D4:4D:A6:B7:A7:9E:66:70:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:70:e7:82:49:4e:e1:fc:22:19:b9:67:7f:b5:38:d6:94:b3:
82:6b:8e:45:32:4d:bc:86:8e:7f:54:7c:50:c4:97:cc:e9:10:
57:14:ea:cc:1d:dd:81:1d:73:36:0c:85:eb:c3:7d:02:3a:17:
39:b2:df:55:58:1c:1c:28:23:4f:47:82:a6:97:00:fc:e1:29:
fd:86:33:bd:7a:fd:18:bd:14:39:df:e8:8a:30:cc:22:9c:22:
88:ad:f9:5b:58:a9:0a:ae:e8:bf:fd:63:10:65:85:e6:d3:22:
d5:57:15:77:78:9d:d7:9b:12:57:a7:5b:99:87:7a:68:10:7c:
85:48:50:ba:4c:06:a2:00:ec:2d:8e:97:b1:3b:a7:bf:88:a1:
e6:db:37:e4:b0:26:16:df:50:e5:c4:35:5a:c9:e0:61:ad:05:
62:fa:f4:e7:44:e3:59:30:5d:7e:80:a9:8f:85:c8:07:1b:f0:
1f:0d:f5:3d:53:e2:ce:55:08:5d:08:0e:a4:fa:11:66:b7:86:
b5:44:cf:01:3d:53:5e:0e:d2:8f:5e:d6:2f:80:98:43:f1:f4:
68:8c:6e:44:84:88:c8:57:70:de:df:4d:a9:ac:6d:69:c8:d4:
80:de:56:cb:93:c2:0e:23:93:21:c4:2a:4f:25:84:de:d3:61:
1d:1f:eb:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:37:09 2026 by rpki-client