Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
File: Xx-gbV262kPeRPTksdyUkrsofJ0.mft (raw, json)
Hash identifier: EStyaSF0609Cm5WL6a1LXOK1gc96np1tNmZIpRCu/1Y=
Subject key identifier: 9B:1A:07:35:C2:08:0B:9F:6D:94:3B:73:87:FA:99:65:57:8C:75:7D
Authority key identifier: 5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D
Certificate issuer: /CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d
Certificate serial: 019CABD8ECF7D83E08534E6DEFE4920456EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
Manifest number: 17B3
Signing time: Mon 02 Mar 2026 00:00:46 +0000
Manifest this update: Mon 02 Mar 2026 00:00:46 +0000
Manifest next update: Tue 03 Mar 2026 00:00:46 +0000
Files and hashes: 1: Xx-gbV262kPeRPTksdyUkrsofJ0.crl (hash: R+MkdS0lG/3AWhhFjg2FKOv1///Ob63OKCyMDguO5B4=)
2: sR6--VSf1TJg6XBqIQJFjdqQwjk.roa (hash: +a/LmYhJ6hoUTDiKTmsqLp0iqelM6C3OOFZARtNpILA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:ec:f7:d8:3e:08:53:4e:6d:ef:e4:92:04:56:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d
Validity
Not Before: Mar 2 00:00:46 2026 GMT
Not After : Mar 3 00:00:46 2026 GMT
Subject: CN=9b1a0735c2080b9f6d943b7387fa9965578c757d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3d:3b:76:a8:52:53:23:73:ad:0a:9a:dc:38:
c8:9e:16:af:9d:68:86:87:05:fa:86:db:8b:02:69:
62:ea:ed:fa:7b:e8:d0:6c:54:2d:34:29:92:43:fe:
85:ba:5b:bf:4e:8c:8a:b8:e8:99:46:9b:ac:0c:50:
aa:bf:93:a7:03:42:b8:6e:65:2c:9e:72:a8:a1:c4:
67:c7:6c:e9:64:96:e0:ab:03:ec:86:dc:96:27:77:
5d:a1:63:b6:30:ae:e6:eb:fd:96:7f:c6:62:ca:0d:
f6:cb:e6:ab:60:a9:b7:bf:01:4e:56:d8:97:09:16:
a1:85:d8:e6:73:09:41:a8:c8:d9:94:58:a9:03:b8:
6c:f9:a2:01:2c:5d:73:ad:67:fc:a3:2c:f9:22:83:
6f:76:7e:35:4b:fa:d7:be:8e:ee:94:b9:ac:96:9b:
98:1f:33:12:71:82:fb:d1:32:d8:c8:30:04:62:05:
a6:b9:3d:66:2e:85:c5:4b:0b:98:68:98:45:58:4a:
39:f4:35:66:ab:90:b5:67:ea:f9:19:79:ef:69:5f:
0f:1d:75:43:6f:f1:b6:fd:d9:90:42:9a:b5:9b:9b:
86:b7:29:34:85:af:65:eb:e1:70:ac:f9:ec:e9:d2:
4e:81:e3:f3:9c:bd:fe:2c:52:5d:6c:1f:6e:4f:a4:
f3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1A:07:35:C2:08:0B:9F:6D:94:3B:73:87:FA:99:65:57:8C:75:7D
X509v3 Authority Key Identifier:
keyid:5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:33:79:f8:de:4a:3c:66:9b:7d:a1:78:4f:3a:c3:d1:c7:2f:
27:00:77:e0:07:9b:6c:bb:f3:1f:34:2a:6c:e6:a2:1d:4d:39:
8c:09:40:55:52:31:8e:c8:0c:5e:c6:a3:10:cd:26:f2:5b:0a:
90:64:b2:51:74:e6:00:98:09:d7:87:3b:50:15:a2:4b:11:f9:
8d:52:7b:33:6c:65:89:03:70:02:d5:87:0c:f1:17:bd:69:bc:
d5:c8:cb:50:2c:0b:c3:55:74:76:f2:85:95:55:44:dc:23:02:
4e:1f:2c:43:89:b3:b7:84:f7:41:ce:ca:b9:86:6c:0e:8a:1b:
3e:fa:93:78:fd:1b:5c:98:1b:ec:e6:4e:07:0e:53:07:48:56:
e7:c0:d8:3b:77:cc:2e:cd:97:1c:61:23:86:f9:a1:88:bf:3b:
2a:44:e5:91:61:90:da:95:3a:4f:02:bb:96:d0:c3:fc:c8:b4:
7c:7f:2c:71:6d:2b:3c:b6:1f:c3:a9:91:ac:88:f8:38:e8:a2:
b3:56:59:db:4a:fd:1c:99:ce:a2:bd:95:f9:a2:bd:56:1a:46:
d2:0e:92:c2:36:51:72:04:82:73:11:c4:d8:a9:67:71:38:e0:
7c:4f:17:79:21:99:b4:41:27:9c:ee:d9:69:56:37:6b:41:e7:
d5:21:8d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:19 2026 by rpki-client