Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
File: xBRUZfBpanDV8D7h1d7K_UHcY4U.mft (raw, json)
Hash identifier: i6AgC0HSQ4tW7sigkZLGOvNs2liJhvnNAyLWFqN/UOw=
Subject key identifier: 37:8E:65:06:EA:13:04:15:72:27:27:45:23:E7:41:40:E8:0A:44:08
Authority key identifier: C4:14:54:65:F0:69:6A:70:D5:F0:3E:E1:D5:DE:CA:FD:41:DC:63:85
Certificate issuer: /CN=c4145465f0696a70d5f03ee1d5decafd41dc6385
Certificate serial: 019CAE6BEE55765059B1349436A8426B62D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 12:00:34 +0000
Manifest this update: Mon 02 Mar 2026 12:00:34 +0000
Manifest next update: Tue 03 Mar 2026 12:00:34 +0000
Files and hashes: 1: biJ04bmigw6iVpUiIdYRLfiKayE.roa (hash: //R/p5jeoEyHzrVxssR2SpOIbWo1BamvM90LorlHczo=)
2: xBRUZfBpanDV8D7h1d7K_UHcY4U.crl (hash: OkUnImOADfpaod8oWtEDrVHJrHEQZh5MjVVMr6jSV40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6b:ee:55:76:50:59:b1:34:94:36:a8:42:6b:62:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4145465f0696a70d5f03ee1d5decafd41dc6385
Validity
Not Before: Mar 2 12:00:34 2026 GMT
Not After : Mar 3 12:00:34 2026 GMT
Subject: CN=378e6506ea1304157227274523e74140e80a4408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:16:11:62:f8:aa:e5:ad:2b:65:c4:eb:9e:ba:
ce:32:1c:68:fe:be:30:bb:60:63:40:53:9a:b9:d5:
b6:9c:91:d3:d7:b9:40:2d:c5:f7:c3:1b:1d:31:c1:
f2:72:57:b1:40:04:73:e1:37:0d:d9:3b:45:dd:df:
25:41:dd:aa:03:c1:2b:bc:b3:6e:c1:dd:74:44:7d:
80:83:d1:4b:43:55:54:d9:35:70:bd:f7:6d:6b:6f:
6d:39:9e:d7:c1:b1:56:3a:91:d2:43:d6:8b:a0:fb:
c8:6b:57:09:d8:1e:53:c7:c1:dc:2e:b2:b6:12:9a:
68:64:6e:f6:75:0c:12:28:ce:c8:6a:f8:76:0c:37:
f0:40:38:7e:68:6a:b2:d8:85:75:60:3c:f0:ae:2a:
80:90:db:53:e8:a7:07:54:65:02:a8:66:5c:37:7f:
4b:5f:af:ca:7c:12:c8:82:4a:f1:6b:f4:f5:21:23:
7c:b0:85:58:07:8b:44:c5:a7:b0:aa:42:e0:6f:d8:
62:49:3b:4f:d5:dc:2c:d3:94:99:82:c7:58:d9:62:
83:f9:d5:52:f4:b9:e7:71:02:32:17:da:67:8c:aa:
60:95:b9:49:61:2e:78:ff:f9:d5:d9:a4:5a:08:7a:
4d:e6:54:af:fe:93:4d:fa:8c:23:82:a6:95:8f:37:
25:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8E:65:06:EA:13:04:15:72:27:27:45:23:E7:41:40:E8:0A:44:08
X509v3 Authority Key Identifier:
keyid:C4:14:54:65:F0:69:6A:70:D5:F0:3E:E1:D5:DE:CA:FD:41:DC:63:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:71:29:28:c3:e6:fb:82:90:7e:c0:f6:5e:30:7f:3d:3e:52:
86:7d:d6:db:67:ac:91:15:77:ef:d3:49:94:3d:1d:ff:79:a8:
7a:67:84:6d:0f:a0:8b:95:f0:47:82:24:ae:66:a3:84:37:db:
1d:27:b5:15:40:92:19:85:e0:8b:28:1b:a8:12:72:00:02:13:
c9:32:40:3c:96:91:42:e7:24:32:cc:e9:f9:43:9b:e8:38:0c:
0e:10:aa:0a:20:79:06:9b:6a:6b:92:4f:3e:ce:cb:aa:a5:a3:
ca:30:9e:46:cb:a0:3b:7b:c7:74:da:8a:4d:86:76:2b:0f:58:
dc:00:f7:59:a0:31:93:e3:c8:51:c1:88:db:96:eb:da:7d:05:
cb:82:b0:e2:a1:44:b1:9d:d0:79:0f:5d:eb:95:91:71:0c:da:
07:a0:70:35:fa:46:97:c0:80:db:56:11:2a:50:23:4e:ad:7c:
b4:bd:10:bc:a1:1c:04:25:ab:da:49:87:2a:71:db:3f:95:1b:
f7:e2:b9:ce:49:b3:42:20:a3:fa:8e:79:d0:8b:24:a7:b5:2b:
d1:26:df:67:89:16:9c:39:1b:7c:1f:b8:03:d2:df:ef:e6:a7:
9c:7f:9b:9c:2d:c0:b1:9a:81:74:4f:7c:bb:40:6c:36:e6:39:
41:77:03:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:41:23 2026 by rpki-client