Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
File: _XTetBhEJvpiIlthIMNnBvc3uOI.mft (raw, json)
Hash identifier: DIiC2h/POTWxllAwCVz0IHAWaWFGNEMt+YGntx5kFWQ=
Subject key identifier: 2E:7A:26:FA:16:D5:88:2D:98:DF:0F:62:8F:48:3B:34:79:48:45:A0
Authority key identifier: FD:74:DE:B4:18:44:26:FA:62:22:5B:61:20:C3:67:06:F7:37:B8:E2
Certificate issuer: /CN=fd74deb4184426fa62225b6120c36706f737b8e2
Certificate serial: 019CABA24E85BC5FC3FDE99FCF052A791850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 23:01:06 +0000
Manifest this update: Sun 01 Mar 2026 23:01:06 +0000
Manifest next update: Mon 02 Mar 2026 23:01:06 +0000
Files and hashes: 1: 4H3kqbZKgvCRJ41TW2E8J1NDC88.roa (hash: ah0Wo037A9MM/sUCKBiJ/BqofxWUcKYL1Cq5STwAUy8=)
2: _XTetBhEJvpiIlthIMNnBvc3uOI.crl (hash: 5qYsglOtSaww1+NO9fM3wr8ehl1Ao06w7K/D20WR6T4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:4e:85:bc:5f:c3:fd:e9:9f:cf:05:2a:79:18:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd74deb4184426fa62225b6120c36706f737b8e2
Validity
Not Before: Mar 1 23:01:06 2026 GMT
Not After : Mar 2 23:01:06 2026 GMT
Subject: CN=2e7a26fa16d5882d98df0f628f483b34794845a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ec:8d:a8:36:62:68:e4:4f:e9:c5:61:72:cd:
1a:3b:60:e8:ea:0e:1a:53:31:09:95:bb:c0:8f:c3:
2c:17:87:f0:e5:81:66:fd:1b:ce:23:02:b3:10:aa:
0e:23:e7:2d:0f:b3:c4:ee:5b:6d:68:31:d8:35:90:
6e:eb:a0:2b:f3:25:95:3b:24:84:78:00:db:bd:4f:
9c:a5:fd:64:53:f4:81:36:53:7e:c0:94:b6:8e:d6:
9b:1a:eb:00:9e:4a:33:8c:7f:6d:b4:78:52:6e:e6:
c9:71:b6:e9:65:ed:19:eb:9e:5c:10:33:15:df:81:
08:6f:76:81:7b:d2:4e:d6:e0:f0:5f:70:33:9b:28:
3f:a8:c4:d5:62:fd:83:e2:1d:a9:54:5a:04:80:76:
42:b2:29:5d:07:f8:2f:28:d0:16:ab:95:9b:a3:dd:
9e:f5:90:67:70:e2:90:b9:1c:85:44:43:2f:57:45:
03:d7:e5:d6:9f:d2:60:3e:0f:98:b0:4d:0c:67:13:
8f:01:dd:b3:ce:c8:c6:21:e0:d9:e5:aa:13:d8:75:
58:56:e8:91:6c:89:2f:4d:cf:2e:b0:bd:bb:45:68:
25:55:8e:b3:16:fa:9f:b5:79:09:d7:43:51:44:95:
9d:62:32:4c:38:6e:74:f3:a9:c8:08:d4:55:1b:72:
a2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7A:26:FA:16:D5:88:2D:98:DF:0F:62:8F:48:3B:34:79:48:45:A0
X509v3 Authority Key Identifier:
keyid:FD:74:DE:B4:18:44:26:FA:62:22:5B:61:20:C3:67:06:F7:37:B8:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:22:41:de:47:ec:94:f9:76:ec:2d:ff:30:62:70:16:c4:96:
37:84:2c:8d:0b:88:71:a3:a8:d8:c3:68:91:1d:31:f4:89:66:
93:ef:f2:7e:44:0b:82:55:ba:86:a8:f5:21:14:28:33:45:6a:
04:f3:4b:cf:ab:c0:c2:36:b9:90:51:31:ad:ba:5f:f2:f5:85:
92:56:8b:2a:18:53:c4:64:a4:b9:c1:54:d0:4c:1e:37:0c:28:
eb:ee:b6:c7:0d:a7:fc:3b:70:50:e9:2d:e3:3a:db:81:01:ce:
23:1a:6c:70:f6:e5:29:90:3e:43:de:c3:6c:ba:29:38:ae:a0:
ba:75:9c:18:32:f4:19:ec:2b:bc:c4:5a:36:8c:0e:50:c4:42:
3e:46:be:80:d3:d0:6b:bb:03:ae:d4:52:93:ee:c3:1a:0b:44:
a3:4b:b2:ce:70:e3:28:94:4e:59:d7:fc:a5:f6:4b:b1:03:4e:
a4:ba:5a:a6:59:07:5d:aa:2a:9b:ac:75:e9:24:28:5d:46:b6:
7e:f7:b1:10:17:b8:e7:a6:e4:5b:a4:23:d4:ad:ae:ee:37:ba:
40:61:44:7f:c4:d1:83:33:3a:d0:53:60:bd:5b:cf:cc:f5:79:
2e:52:19:22:42:f8:6f:14:0b:40:74:61:14:96:e0:46:5d:51:
02:c2:42:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:39 2026 by rpki-client