Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
File: xmpfK0aNs161Yr034fNuzqgTzKw.mft (raw, json)
Hash identifier: vCJ1uOeavSeZHW9VtO48WvEJ/tsUJB31YCRcWTKxOfs=
Subject key identifier: C9:F0:90:EB:B0:63:9C:A4:4D:09:30:0E:E5:5F:9C:B1:02:2A:FD:7E
Authority key identifier: C6:6A:5F:2B:46:8D:B3:5E:B5:62:BD:37:E1:F3:6E:CE:A8:13:CC:AC
Certificate issuer: /CN=c66a5f2b468db35eb562bd37e1f36ecea813ccac
Certificate serial: 019CAD5989E87BBEAB6A2D2258B083DAEE0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 07:00:52 +0000
Manifest this update: Mon 02 Mar 2026 07:00:52 +0000
Manifest next update: Tue 03 Mar 2026 07:00:52 +0000
Files and hashes: 1: nd2ovDlF_Zmo_XxAGJs-agTwP6k.roa (hash: wKDGlke9HUoxSKsazb91lMdI0w1rZkvOiuN/NBOarjE=)
2: xmpfK0aNs161Yr034fNuzqgTzKw.crl (hash: gEUnUt8diWlzJOy09ZEBr6etQw4QdmtUOrKAZFp4mM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:89:e8:7b:be:ab:6a:2d:22:58:b0:83:da:ee:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66a5f2b468db35eb562bd37e1f36ecea813ccac
Validity
Not Before: Mar 2 07:00:52 2026 GMT
Not After : Mar 3 07:00:52 2026 GMT
Subject: CN=c9f090ebb0639ca44d09300ee55f9cb1022afd7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:83:bd:d2:50:97:66:db:fb:76:3f:27:ac:37:
fc:95:b0:ad:f0:eb:a1:d5:13:ca:54:ec:c0:e2:d2:
14:ac:c7:b1:cd:1d:e3:a2:ac:da:7e:a2:be:02:20:
66:e1:c1:b3:df:af:15:62:e4:6e:0c:af:d6:4d:c3:
65:f3:55:7d:37:f2:a9:59:c9:4e:e8:fc:b4:45:68:
f7:78:46:14:5e:65:25:43:eb:34:1c:3a:99:61:ad:
4b:fe:f2:0e:9e:7b:d8:71:a9:34:34:86:e7:b1:23:
18:c4:b7:53:c2:8e:bd:1d:d7:80:50:95:4e:48:84:
c9:89:9b:11:bb:4b:d3:84:f4:9a:62:24:af:2d:0b:
03:fb:3c:f8:36:ca:5c:db:75:34:b6:b2:0f:00:38:
db:d2:fc:7a:17:17:2d:04:0b:c4:a5:2c:17:9e:ed:
20:26:ef:da:5c:dc:32:36:ab:ea:8c:b3:9a:a6:99:
ea:34:c5:bb:37:79:6c:6e:71:59:5f:8b:f0:b7:38:
55:f9:59:f3:bf:65:ba:39:20:05:57:d0:fa:b9:7d:
56:2e:fd:c3:e5:36:e5:48:b1:5f:85:8a:3d:6a:0d:
5a:41:c8:65:57:02:56:8a:20:27:0f:da:dd:10:53:
89:bd:e2:f6:35:7c:96:96:36:8d:33:e8:c4:1c:f9:
4d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F0:90:EB:B0:63:9C:A4:4D:09:30:0E:E5:5F:9C:B1:02:2A:FD:7E
X509v3 Authority Key Identifier:
keyid:C6:6A:5F:2B:46:8D:B3:5E:B5:62:BD:37:E1:F3:6E:CE:A8:13:CC:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b3:06:b5:ab:85:8f:23:ee:1c:0a:00:c8:c5:d3:5c:c9:f3:
ad:50:f8:e5:22:58:24:08:52:da:83:d3:88:52:c2:13:cc:a2:
ff:3b:5f:90:3c:6c:05:f9:00:14:22:14:26:a3:ef:35:9e:bb:
bf:4f:ed:e9:71:40:1b:6a:5c:9f:1a:d4:96:eb:4a:34:c9:55:
0d:78:71:ae:4e:ba:c7:a0:b0:a1:25:98:ac:e0:18:7d:d4:a7:
d5:5b:74:de:e0:0c:c3:95:ff:a5:da:dd:f7:b4:98:10:9c:ca:
ed:19:3d:20:d0:b0:25:fa:e6:94:30:f0:ac:99:5a:c9:d2:90:
4a:e5:15:11:65:af:46:0a:4a:83:8c:83:b0:9c:a0:25:ee:fe:
2e:b3:ed:cd:70:1c:4a:c2:ee:58:63:45:89:56:d7:37:b6:4b:
21:c9:ce:26:37:b4:cb:1a:92:1d:dc:94:92:58:05:58:36:a3:
c8:39:54:27:58:3a:49:1a:a7:d9:fb:0c:7c:ea:d8:53:ba:5c:
2e:c3:c6:07:f0:55:3e:08:be:fc:a4:04:e0:80:c2:e3:64:e3:
94:bf:7b:e2:a1:26:4d:a4:49:ef:2c:29:39:d2:5f:57:1f:f3:
b9:32:49:f6:1e:76:ac:1b:54:3e:fe:84:60:bd:8d:fe:db:28:
bf:1a:60:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:43:00 2026 by rpki-client