Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
File: xFP14jBCC8SnDQph3jtH3NoajQ4.mft (raw, json)
Hash identifier: JPMScr7ZLjevOEKIVBp4OCyxeuSbhgCpo2mABlu/2gc=
Subject key identifier: 12:D4:D8:E1:77:C6:F4:C9:6D:C6:16:FE:2C:84:78:8F:9F:C2:14:9A
Authority key identifier: C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
Certificate issuer: /CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Certificate serial: 019CAAC6450841501814D4C421645F0F9B42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
Manifest number: 1778
Signing time: Sun 01 Mar 2026 19:00:46 +0000
Manifest this update: Sun 01 Mar 2026 19:00:46 +0000
Manifest next update: Mon 02 Mar 2026 19:00:46 +0000
Files and hashes: 1: pN_P1IlTK7N9Tsyo-7qDne3seo8.roa (hash: 4JuBbaWoHsvx0AsZc9fY1wPJc+hsLORDmTae2tdrxYs=)
2: vCRnh4F_lljPYv3DYF0shQI8Bbo.roa (hash: qW582UkFyFw7De0dFAxA/OIbguYJh97E6vsR4Z29UJE=)
3: xFP14jBCC8SnDQph3jtH3NoajQ4.crl (hash: ISltZEJaQ6P8n0z7fkC/f6zklt2628J2es9LoB3M1FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:45:08:41:50:18:14:d4:c4:21:64:5f:0f:9b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Validity
Not Before: Mar 1 19:00:46 2026 GMT
Not After : Mar 2 19:00:46 2026 GMT
Subject: CN=12d4d8e177c6f4c96dc616fe2c84788f9fc2149a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:25:93:e7:e0:ef:fb:ad:01:a3:c3:58:74:e9:
cc:56:7d:93:30:f8:50:b6:b0:15:ce:5f:8b:54:29:
32:2a:4c:ad:bf:b8:6d:ca:55:2a:57:43:3f:c8:14:
2a:55:9b:18:53:74:f8:a6:48:b7:84:5e:71:cc:d7:
6a:5c:e7:34:96:e2:1c:eb:50:dd:1c:d7:72:95:c7:
86:f5:cb:6e:a1:d5:3c:5c:70:d0:57:3a:f5:b3:02:
30:46:20:5d:0b:3b:d2:c3:dc:75:36:58:89:7c:56:
af:a4:f2:b4:f9:ec:e4:e5:52:3a:68:ad:cd:af:36:
d9:2b:7b:b1:3b:fb:5d:93:5e:5c:4c:30:d8:f4:52:
ae:e5:64:d8:dc:61:3b:83:bc:ea:eb:38:76:e2:e1:
a4:c4:ca:a6:b2:ab:dd:03:30:03:b4:c8:d0:c9:9f:
33:34:1f:85:c6:b8:67:fa:f5:b1:5d:67:05:d5:06:
5d:b9:21:a2:2f:94:ce:17:3b:8b:99:35:62:48:a6:
f1:9c:e6:a6:83:f7:98:cc:46:b2:24:d8:19:ab:87:
6f:43:f9:a1:65:4a:8f:0b:99:5a:4b:cf:64:bc:fa:
d2:06:75:c5:2e:43:85:6e:45:a8:ce:ae:af:cb:c7:
8f:a1:e0:79:74:eb:12:6b:4b:a2:a8:8d:cc:f1:c9:
a0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D4:D8:E1:77:C6:F4:C9:6D:C6:16:FE:2C:84:78:8F:9F:C2:14:9A
X509v3 Authority Key Identifier:
keyid:C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:8b:30:57:f5:fc:5c:81:4c:23:9c:c3:e1:3c:59:05:c0:ab:
7c:62:41:73:3a:d1:09:ef:be:8a:fe:be:b7:19:c8:46:5d:e2:
54:1f:ce:05:21:64:b4:a1:14:f1:57:e7:32:bb:1a:16:00:d6:
4c:65:c9:73:2f:c7:b5:b8:69:3a:f9:98:88:f0:1e:40:e0:0c:
85:cf:cc:41:1d:dd:c5:d6:5d:fb:91:52:a8:de:41:62:d1:d6:
af:d4:af:e5:0f:7a:37:75:ab:c6:72:91:47:07:39:7a:e0:22:
81:a3:fc:4b:d0:3b:a8:8a:25:67:82:e5:1a:02:ae:a3:86:47:
cb:49:c8:a2:1a:a1:94:72:4e:61:0c:8b:e0:00:92:37:cc:d7:
c8:a5:ed:49:2e:a7:c0:8f:af:57:23:a6:f6:e0:20:77:3e:fb:
a2:fd:bf:cc:2f:ba:9a:f6:c3:c1:69:18:b3:0a:2f:23:5f:f5:
e5:ef:39:c6:de:7a:a7:ea:d1:44:1f:89:11:ed:f4:54:2d:aa:
2d:f2:00:e1:24:51:3d:ef:b2:87:ed:91:24:99:0e:38:8f:42:
9c:8a:e1:0f:12:d9:57:2e:6e:2f:78:51:83:06:ca:45:39:4a:
57:c7:1f:1f:02:54:5a:6d:1c:a1:5e:71:a3:7a:e9:8e:84:68:
a6:e7:7e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:47 2026 by rpki-client