Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
File: xPvoQiQycn04dLFWS66sioBVey0.mft (raw, json)
Hash identifier: HyhgUwT9FBsrcaOTCoS1TLJayo49zPdfaj7xqmMg8Xg=
Subject key identifier: DA:4B:EE:83:70:5A:84:A3:43:9D:91:BF:90:C5:C5:61:DE:A3:30:73
Authority key identifier: C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
Certificate issuer: /CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Certificate serial: 019CACEBEE7AFD69610500327E94355C2FDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
Manifest number: 1856
Signing time: Mon 02 Mar 2026 05:01:08 +0000
Manifest this update: Mon 02 Mar 2026 05:01:08 +0000
Manifest next update: Tue 03 Mar 2026 05:01:08 +0000
Files and hashes: 1: LS5MCCO9caJteSNm3UxfcHvxWuY.roa (hash: x6EZSVRR5fQkZJq/8+MpkayOyy+ArponPDKCWMu+oZw=)
2: rj-0V1J38VZQrRPfHd8xSzQLmRI.roa (hash: hduanHT2uT8V/UIO7xHWzu4Y55+PQEhZP0n2Pd1XDes=)
3: xPvoQiQycn04dLFWS66sioBVey0.crl (hash: NfdoxNGwYzkVLdPqt/VLmkMtDrbAdAzfW2Z1IlB0dus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:ee:7a:fd:69:61:05:00:32:7e:94:35:5c:2f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Validity
Not Before: Mar 2 05:01:08 2026 GMT
Not After : Mar 3 05:01:08 2026 GMT
Subject: CN=da4bee83705a84a3439d91bf90c5c561dea33073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:42:bf:b9:98:75:50:ce:f9:a8:2b:81:9b:dc:
39:86:57:2f:bd:91:e4:cd:3f:5f:1f:99:69:5f:a0:
83:f4:65:d4:53:ff:37:5a:8f:15:d0:8b:4f:63:79:
0f:6b:0d:17:f1:52:37:2f:3c:67:98:65:3c:97:d0:
3c:47:ce:72:21:2a:40:2e:f2:3e:a4:82:31:61:60:
97:bc:61:46:26:ed:47:ed:4b:cb:55:dd:4e:88:84:
87:64:41:75:02:fc:eb:4a:52:ad:44:bb:ab:1b:9d:
44:4a:e2:a8:cb:32:68:b1:a5:5c:c0:9a:18:2c:f0:
93:86:83:2b:2a:9a:8c:44:cf:33:84:39:e7:55:17:
c7:d4:32:0f:3d:76:63:9b:4e:a2:7f:12:61:5c:ef:
fa:e9:d2:f9:f4:cb:6f:c7:05:90:11:da:aa:01:52:
32:c8:9d:d1:aa:31:e2:24:bd:17:78:05:ea:da:61:
5a:bb:6c:7e:ac:52:03:8d:27:f1:99:ee:d6:6d:f7:
97:d5:6f:9d:ac:e2:ba:b2:b8:d8:9a:00:5b:f1:0f:
7b:54:61:74:20:ae:56:c5:f3:65:ed:2f:c3:cd:53:
c0:2f:eb:51:b8:ab:16:4d:ea:3b:c2:10:8c:ee:5e:
8a:42:a6:cf:28:fd:d1:d4:21:e7:69:f7:48:bf:22:
58:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4B:EE:83:70:5A:84:A3:43:9D:91:BF:90:C5:C5:61:DE:A3:30:73
X509v3 Authority Key Identifier:
keyid:C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d4:fe:06:db:5c:7d:8d:e3:2e:f0:c9:30:89:85:df:57:da:
6b:96:11:a3:04:98:ba:0d:5e:74:b5:af:0e:96:fe:13:cf:a9:
d9:88:d1:77:d1:75:ef:55:d3:c1:1a:11:50:dd:e3:45:fa:f9:
76:2a:b8:dd:ea:0f:e9:22:fb:dd:4f:fe:9f:bf:96:17:16:df:
e1:89:eb:65:f5:e4:2e:29:79:43:ec:30:9a:2c:11:a0:33:dd:
0f:89:b9:d0:d5:d6:de:01:86:5d:2c:6a:db:62:70:34:28:21:
d5:53:18:11:50:17:e3:e8:38:94:b1:df:fe:56:dd:d3:38:8e:
d6:e0:e3:64:ba:55:4f:10:40:6b:75:2d:0e:f3:81:4f:99:ca:
f3:20:d5:b5:c5:3a:37:6a:86:f5:13:97:c8:e6:a7:f1:24:7e:
4e:ac:54:c8:1b:e7:1c:a9:d7:ba:68:68:0f:06:d8:61:c2:06:
2a:20:78:36:c2:7d:b9:53:03:2a:b0:3e:1d:87:3a:5f:12:ae:
5c:98:ec:1b:2a:90:2a:02:be:d1:44:0a:58:5a:c8:e0:76:30:
03:74:4a:e3:fb:20:be:fd:77:26:d0:50:14:c8:b9:41:62:70:
58:f3:22:ff:b3:1d:6d:ad:a3:a9:d7:03:c8:c8:7d:89:15:5b:
87:6b:27:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:11:09 2026 by rpki-client