Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
File: xFz9uYA84FcULRh_hrxPVnHX63s.mft (raw, json)
Hash identifier: RjB4UuAUaFurT+iSVYVaR9Lz7XoqAUhnOGvKpjvmaLI=
Subject key identifier: B4:59:DE:19:EE:10:C2:37:84:76:78:1E:F0:C0:70:5A:04:BD:1A:7C
Authority key identifier: C4:5C:FD:B9:80:3C:E0:57:14:2D:18:7F:86:BC:4F:56:71:D7:EB:7B
Certificate issuer: /CN=c45cfdb9803ce057142d187f86bc4f5671d7eb7b
Certificate serial: 019CAB6B129C80F1E7AA98A0BFB883503872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFz9uYA84FcULRh_hrxPVnHX63s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
Manifest number: 1840
Signing time: Sun 01 Mar 2026 22:00:46 +0000
Manifest this update: Sun 01 Mar 2026 22:00:46 +0000
Manifest next update: Mon 02 Mar 2026 22:00:46 +0000
Files and hashes: 1: xFz9uYA84FcULRh_hrxPVnHX63s.crl (hash: jhx2M7XQG1EmLCM4RIZ1BeXGvqPC4NaNBkRhb713vEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFz9uYA84FcULRh_hrxPVnHX63s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:12:9c:80:f1:e7:aa:98:a0:bf:b8:83:50:38:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45cfdb9803ce057142d187f86bc4f5671d7eb7b
Validity
Not Before: Mar 1 22:00:46 2026 GMT
Not After : Mar 2 22:00:46 2026 GMT
Subject: CN=b459de19ee10c2378476781ef0c0705a04bd1a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1f:40:34:80:e6:4a:b4:23:5b:d5:1b:db:da:
5b:bc:bf:e3:e3:f5:cc:b1:c3:52:19:0c:77:69:b1:
e4:33:b6:47:1c:17:33:a7:b3:51:3b:31:1a:16:6c:
45:38:c7:30:14:29:66:2c:cf:38:a4:5f:76:a9:bf:
cb:9c:49:ab:5b:dd:0e:fb:33:17:48:e5:e8:3c:8d:
7a:f9:ed:d5:b7:d2:4b:dc:65:f0:ae:11:ee:32:b8:
ae:6b:41:3e:35:c0:1e:2f:c7:79:87:4a:05:2b:be:
d2:e7:41:86:dc:4a:89:9d:f0:3a:1a:8d:62:06:cc:
78:63:2b:c5:40:a6:64:aa:4c:56:fb:48:0c:80:0b:
c9:0f:dc:3b:08:13:34:2f:3f:e5:79:d7:14:48:11:
13:8a:ea:b1:47:e7:50:23:3c:92:78:ea:c4:1c:95:
22:41:7d:d4:55:4d:e3:24:6c:d6:bb:a8:1f:b7:67:
9e:69:88:f1:27:8a:f2:1d:0a:c7:ca:dd:60:6d:1c:
e6:6f:7d:ec:45:d6:5b:c9:26:83:aa:6b:db:d0:95:
83:a1:5c:0f:e5:ae:9e:c3:0f:c9:f7:54:bd:56:d7:
b6:7b:97:c1:32:07:3f:89:48:f9:06:4d:0f:a8:6f:
89:1f:87:58:47:23:57:c4:1a:da:6e:2f:d0:0f:c4:
c1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:59:DE:19:EE:10:C2:37:84:76:78:1E:F0:C0:70:5A:04:BD:1A:7C
X509v3 Authority Key Identifier:
keyid:C4:5C:FD:B9:80:3C:E0:57:14:2D:18:7F:86:BC:4F:56:71:D7:EB:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFz9uYA84FcULRh_hrxPVnHX63s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:9d:91:f9:1e:44:01:82:2d:81:57:3f:36:28:88:59:51:ce:
53:ac:e3:3c:da:aa:90:da:53:f0:47:d0:09:51:91:0c:97:97:
ec:f2:de:db:be:2b:c8:01:e7:da:f9:ee:55:76:c9:de:71:a2:
8c:e3:6b:0a:42:b0:83:52:36:ea:4b:d4:99:27:81:49:1f:0e:
8e:5f:58:d2:0c:e9:cf:13:89:fa:dc:44:25:63:a1:bf:39:79:
7c:d0:cc:02:f6:2b:e6:96:cc:17:71:6b:81:72:92:f5:21:c8:
bb:60:e3:ea:84:1f:0e:7f:cf:0c:bf:87:52:ee:03:6d:65:b8:
4a:12:bc:da:da:11:df:12:4c:5b:a3:90:6c:91:7a:3c:b0:d4:
78:c6:20:75:5a:76:26:fc:cd:08:26:76:68:ac:73:3d:20:03:
00:4d:b6:22:06:48:9d:53:31:e0:32:ba:51:db:de:49:ec:ac:
2c:a1:b6:7c:d5:11:ad:9d:fe:bf:a9:79:67:93:ef:90:9d:d2:
0f:93:57:aa:ab:6d:15:54:0f:26:39:d0:41:4f:0e:85:27:99:
73:5c:06:ee:ad:dc:69:8c:b7:32:ed:83:07:65:5c:5d:e5:89:
0d:4c:31:a9:c5:2b:ae:da:de:a3:f2:8d:78:0c:57:06:85:2b:
69:59:d2:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyraxKcgPHnqpigv7iDUDhyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NWNmZGI5ODAzY2UwNTcxNDJkMTg3Zjg2YmM0ZjU2NzFk
N2ViN2IwHhcNMjYwMzAxMjIwMDQ2WhcNMjYwMzAyMjIwMDQ2WjAzMTEwLwYDVQQD
EyhiNDU5ZGUxOWVlMTBjMjM3ODQ3Njc4MWVmMGMwNzA1YTA0YmQxYTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0R9ANIDmSrQjW9Ub29pbvL/j4/XM
scNSGQx3abHkM7ZHHBczp7NROzEaFmxFOMcwFClmLM84pF92qb/LnEmrW90O+zMX
SOXoPI16+e3Vt9JL3GXwrhHuMriua0E+NcAeL8d5h0oFK77S50GG3EqJnfA6Go1i
Bsx4YyvFQKZkqkxW+0gMgAvJD9w7CBM0Lz/ledcUSBETiuqxR+dQIzySeOrEHJUi
QX3UVU3jJGzWu6gft2eeaYjxJ4ryHQrHyt1gbRzmb33sRdZbySaDqmvb0JWDoVwP
5a6eww/J91S9Vte2e5fBMgc/iUj5Bk0PqG+JH4dYRyNXxBrabi/QD8TBtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLRZ3hnuEMI3hHZ4HvDAcFoEvRp8MB8GA1UdIwQY
MBaAFMRc/bmAPOBXFC0Yf4a8T1Zx1+t7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEZ6OXVZQTg0RmNVTFJoX2hyeFBWbkhYNjNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9iMjU0YmQtMTQ1Yy00MDE5LTg4YTQt
ZDVhMTc3MTc4ZjRhLzEveEZ6OXVZQTg0RmNVTFJoX2hyeFBWbkhYNjNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9iMjU0YmQtMTQ1Yy00MDE5LTg4YTQtZDVhMTc3MTc4ZjRh
LzEveEZ6OXVZQTg0RmNVTFJoX2hyeFBWbkhYNjNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACJ2R+R5E
AYItgVc/NiiIWVHOU6zjPNqqkNpT8EfQCVGRDJeX7PLe274ryAHn2vnuVXbJ3nGi
jONrCkKwg1I26kvUmSeBSR8Ojl9Y0gzpzxOJ+txEJWOhvzl5fNDMAvYr5pbMF3Fr
gXKS9SHIu2Dj6oQfDn/PDL+HUu4DbWW4ShK82toR3xJMW6OQbJF6PLDUeMYgdVp2
JvzNCCZ2aKxzPSADAE22IgZInVMx4DK6UdveSeysLKG2fNURrZ3+v6l5Z5PvkJ3S
D5NXqqttFVQPJjnQQU8OhSeZc1wG7q3caYy3Mu2DB2VcXeWJDUwxqcUrrtreo/KN
eAxXBoUraVnSkQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:14:14 2026 by rpki-client