Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/xdXOafzPDGu44rJmfh44-5QPPSY.mft
File: xdXOafzPDGu44rJmfh44-5QPPSY.mft (raw, json)
Hash identifier: hwkk5PYAbiSiCtk18iW/TXLzL25PVMa4oLqAte2mNgE=
Subject key identifier: 49:54:24:8C:04:A5:07:E1:08:4A:23:85:08:5B:8F:0B:08:42:E8:89
Authority key identifier: C5:D5:CE:69:FC:CF:0C:6B:B8:E2:B2:66:7E:1E:38:FB:94:0F:3D:26
Certificate issuer: /CN=c5d5ce69fccf0c6bb8e2b2667e1e38fb940f3d26
Certificate serial: 019CABD979A087CD8BE3115282DBB17EEA80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xdXOafzPDGu44rJmfh44-5QPPSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/xdXOafzPDGu44rJmfh44-5QPPSY.mft
Manifest number: 0CB2
Signing time: Mon 02 Mar 2026 00:01:22 +0000
Manifest this update: Mon 02 Mar 2026 00:01:22 +0000
Manifest next update: Tue 03 Mar 2026 00:01:22 +0000
Files and hashes: 1: 1-pMzy3XW1_dYsnUwH5bbwkr_jQA.roa (hash: bK9K2skyngCiWtdJ+6ql0BuVrZBCPHHAO74b5mBhnYY=)
2: xdXOafzPDGu44rJmfh44-5QPPSY.crl (hash: 5yYlvZpFDaKGfOIUtFNCTIckIaiT5BjwTAr0DPIMpI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/xdXOafzPDGu44rJmfh44-5QPPSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/xdXOafzPDGu44rJmfh44-5QPPSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xdXOafzPDGu44rJmfh44-5QPPSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:79:a0:87:cd:8b:e3:11:52:82:db:b1:7e:ea:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5d5ce69fccf0c6bb8e2b2667e1e38fb940f3d26
Validity
Not Before: Mar 2 00:01:22 2026 GMT
Not After : Mar 3 00:01:22 2026 GMT
Subject: CN=4954248c04a507e1084a2385085b8f0b0842e889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d4:48:17:33:5c:a6:17:08:d3:df:b9:c1:5e:
1b:cd:f0:50:b5:9d:71:0c:c7:17:a3:eb:e7:36:9b:
b4:7d:a3:ac:23:79:ea:51:f1:cc:bb:ca:ec:2f:25:
25:de:20:8e:bd:af:b8:dd:30:ed:2e:8f:26:9b:41:
07:04:ff:cf:93:b4:f3:41:32:f1:f6:ed:99:cf:ed:
88:86:0f:64:c8:a1:82:51:1c:8c:5e:f3:fa:79:a3:
f9:52:53:a0:3a:e8:51:b2:3c:19:96:62:31:30:2f:
3c:09:74:a5:ea:1b:f4:33:6f:d9:67:2f:86:80:59:
af:0e:6e:36:cf:c2:39:4b:d2:dd:03:09:d0:3b:7b:
30:1f:03:06:0d:a0:62:0a:63:67:3a:32:9f:68:8b:
7d:a7:a9:19:55:10:13:2d:a2:e0:a0:27:6e:a5:94:
3f:cb:62:c8:67:fc:c6:a1:56:35:6f:02:d4:9b:22:
4a:f9:28:1d:ac:7c:c7:b0:d7:6b:6f:9e:51:66:ba:
94:1c:cb:aa:1c:26:e1:c9:4d:0c:da:d6:10:8e:b4:
a3:86:9e:11:6a:c1:d5:19:9c:75:9f:fa:31:58:2b:
ca:ca:c7:f2:cf:c1:98:d5:12:d5:9d:02:1a:9f:a5:
62:c8:2e:0e:03:ad:90:8a:29:75:cf:80:8d:a6:97:
6e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:54:24:8C:04:A5:07:E1:08:4A:23:85:08:5B:8F:0B:08:42:E8:89
X509v3 Authority Key Identifier:
keyid:C5:D5:CE:69:FC:CF:0C:6B:B8:E2:B2:66:7E:1E:38:FB:94:0F:3D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xdXOafzPDGu44rJmfh44-5QPPSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/xdXOafzPDGu44rJmfh44-5QPPSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/xdXOafzPDGu44rJmfh44-5QPPSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:29:45:9c:f3:c7:6c:18:72:61:34:80:df:17:43:a4:07:66:
22:f4:76:67:dd:28:86:10:75:76:1a:60:e8:e9:94:71:c1:55:
4c:e9:78:01:c8:31:3b:1e:4c:80:56:6a:b0:e5:2d:75:b4:65:
26:22:a4:25:17:64:3f:ef:bd:f2:2a:9e:bb:00:9c:51:63:95:
16:0a:0b:b3:0c:48:79:12:ed:c0:5c:14:ef:c8:63:0e:0c:38:
51:58:d5:73:c1:48:2a:2f:55:ba:f3:0b:28:d2:d6:5b:e7:c7:
d3:10:7c:37:67:cb:9c:c6:09:53:bf:ab:b1:60:90:b4:f9:60:
96:ad:3f:6f:11:59:a6:4a:24:d0:ac:ee:90:95:4b:c3:84:54:
9f:d7:c0:e5:7b:1c:e7:9a:95:16:b0:77:ff:7f:73:26:c0:6d:
d0:c0:fa:7f:6a:24:c9:09:f1:90:e9:0d:17:ba:17:b1:05:b6:
27:a2:0b:13:16:6e:56:25:f0:37:b6:2b:54:58:7c:22:af:df:
bc:ae:32:57:6c:85:8c:5b:22:7e:25:0a:22:c3:b8:93:de:a3:
c2:2c:0a:aa:fd:04:f6:73:db:6a:29:b0:46:84:ae:c3:14:91:
f7:78:f7:db:30:f9:3a:e4:f4:bb:3f:d2:6b:6c:8e:a7:41:d0:
bb:e0:4e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:15 2026 by rpki-client