Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
File: xpWUB18xxROhM36RdZKQA35me_k.mft (raw, json)
Hash identifier: VYFSv51bL6VhKH/t6xCQ/eiB/lxkt2A8req2JWTmWsg=
Subject key identifier: 2F:CB:9D:F9:25:2C:8D:DB:4F:EB:53:23:D3:DC:7A:8E:EC:4A:0C:12
Authority key identifier: C6:95:94:07:5F:31:C5:13:A1:33:7E:91:75:92:90:03:7E:66:7B:F9
Certificate issuer: /CN=c69594075f31c513a1337e91759290037e667bf9
Certificate serial: 019CAF111C885EF2BD2AC8A9EEF7AC32ED73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
Manifest number: 04AE
Signing time: Mon 02 Mar 2026 15:01:00 +0000
Manifest this update: Mon 02 Mar 2026 15:01:00 +0000
Manifest next update: Tue 03 Mar 2026 15:01:00 +0000
Files and hashes: 1: 1JH1P29Kf09zWZrF1xe3ZZfCieI.roa (hash: DhT9OAA9PZuMRclwlwztAMTiBJcJK2NakyvCDwGRGYc=)
2: xpWUB18xxROhM36RdZKQA35me_k.crl (hash: HdzAyudGBgURIinGkSwp4JtwcbaLdnMTyWxq6ZYNVWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:11:1c:88:5e:f2:bd:2a:c8:a9:ee:f7:ac:32:ed:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69594075f31c513a1337e91759290037e667bf9
Validity
Not Before: Mar 2 15:01:00 2026 GMT
Not After : Mar 3 15:01:00 2026 GMT
Subject: CN=2fcb9df9252c8ddb4feb5323d3dc7a8eec4a0c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:61:24:8a:8d:23:83:3d:54:30:39:d8:a1:a8:
24:8f:e7:b4:b9:e7:d0:33:35:f5:8c:b4:65:19:7b:
1e:96:f0:db:1e:2c:dc:23:5d:d1:c3:46:38:d9:ab:
e6:d5:6c:0d:95:54:9c:bf:e0:a0:eb:7c:dc:91:2a:
5e:93:80:46:93:19:d7:8e:a4:88:81:67:7c:67:2c:
b4:9e:c0:47:4b:b5:11:d7:f0:26:1c:01:af:95:74:
f1:21:4a:6e:5e:ca:3b:9a:52:18:4d:8f:63:41:90:
cd:d2:70:96:6b:09:ea:4a:48:ad:3a:28:37:a9:17:
13:a8:7d:ce:5b:39:45:7d:3d:54:ea:d1:45:ad:fe:
5f:ec:2f:9c:b3:00:64:10:fd:10:f0:b4:dd:83:93:
e7:e4:9b:b4:b7:9e:52:4b:7c:0e:92:12:13:80:3b:
a3:eb:c2:12:15:0f:25:11:6c:4f:0f:d0:24:fb:b1:
24:68:db:a9:86:4a:26:71:28:83:fc:39:c7:81:af:
fa:58:a5:41:d1:cf:a0:74:34:12:5d:67:e7:d9:8a:
52:d0:43:50:ac:83:40:7f:4c:f4:27:76:f3:e0:1d:
b8:6a:f3:43:6c:7e:b3:25:d0:94:9f:af:73:74:97:
0e:2b:a5:5d:2c:a5:1b:20:33:df:f0:21:fa:fe:38:
13:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CB:9D:F9:25:2C:8D:DB:4F:EB:53:23:D3:DC:7A:8E:EC:4A:0C:12
X509v3 Authority Key Identifier:
keyid:C6:95:94:07:5F:31:C5:13:A1:33:7E:91:75:92:90:03:7E:66:7B:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:66:9a:7d:be:3d:06:1b:45:83:9b:02:ec:32:6b:38:9e:75:
90:c9:b5:3b:d3:be:8e:6a:fd:b3:31:20:08:c4:76:1c:88:a6:
86:b6:f5:de:2d:45:60:ac:79:53:dc:77:f5:15:22:3c:4c:83:
87:83:d7:fd:d2:f2:3a:7a:55:8d:a8:6b:8b:4d:fb:7f:48:b6:
f5:b8:5e:ee:1a:99:47:ea:af:c4:2b:4e:e0:df:de:8a:38:e0:
2e:ed:63:fb:9a:95:b4:5e:c7:33:f3:77:59:d4:8b:6e:44:6e:
31:d5:57:37:9e:31:91:b5:18:15:16:36:67:62:81:bb:41:df:
8b:df:31:da:80:88:04:7d:f8:55:d1:23:b3:73:dc:6b:2b:11:
73:40:9a:4b:92:26:10:f9:f1:f1:5f:1b:85:7d:df:12:b8:e0:
fd:bd:c0:df:62:f4:bf:11:fb:b9:77:81:17:9e:1d:8a:57:3d:
a8:c1:79:69:72:21:e4:03:95:bb:02:2e:1f:08:61:47:f8:c5:
af:e5:8c:15:04:40:8e:d9:22:08:e8:63:d4:7b:78:ac:a6:ef:
7e:78:6a:a2:05:5e:be:fc:1a:18:ce:8d:45:df:de:f7:70:64:
3e:a2:78:91:ba:08:ca:f8:df:c3:91:e0:57:d7:6e:94:7a:e3:
b7:41:7e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:41:10 2026 by rpki-client