Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
File: XxaylLGmR79tZ2g7UWFEl-dR8h8.mft (raw, json)
Hash identifier: AVykPv/Sfz+bYsm/l5ujzvIQLsLHs40qy1/6rPW2hT4=
Subject key identifier: D9:C7:B0:E7:FA:2E:0D:9F:DC:2B:45:9F:81:65:99:CF:C9:1F:D8:77
Authority key identifier: 5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
Certificate issuer: /CN=5f16b294b1a647bf6d67683b51614497e751f21f
Certificate serial: 019CAAFD04BF9D0B273E5AB4E5866C28C818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 20:00:34 +0000
Manifest this update: Sun 01 Mar 2026 20:00:34 +0000
Manifest next update: Mon 02 Mar 2026 20:00:34 +0000
Files and hashes: 1: NKg93JWQUnBu80RX13MwmqJxvVc.roa (hash: nG4jnHVVr/B/zg5snhsHaHEVH2wq5BQYMoc/wJLZKCM=)
2: XxaylLGmR79tZ2g7UWFEl-dR8h8.crl (hash: 7wnVU/oj0rE5I7FVoUTbDHRaFxJKnTuAfvPffL698Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:04:bf:9d:0b:27:3e:5a:b4:e5:86:6c:28:c8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f16b294b1a647bf6d67683b51614497e751f21f
Validity
Not Before: Mar 1 20:00:34 2026 GMT
Not After : Mar 2 20:00:34 2026 GMT
Subject: CN=d9c7b0e7fa2e0d9fdc2b459f816599cfc91fd877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:29:86:8f:d4:8e:cf:82:1b:e9:8c:93:77:c1:
41:09:b2:0c:81:32:41:a1:9a:36:3e:8a:f0:f6:c9:
a7:6a:ab:67:64:19:da:c4:26:0b:ff:8b:52:e4:f4:
a2:0f:91:c1:6b:3a:6e:02:1f:c8:f8:ca:0d:7b:3b:
bf:31:89:2d:2c:60:9a:8d:23:a8:d2:2a:56:2f:19:
99:5c:6b:cb:1f:c7:eb:42:45:6d:90:56:b9:c4:e8:
14:ee:8a:6a:e8:c7:0c:b9:2a:96:35:de:c2:ab:79:
e3:18:12:a4:92:64:bf:17:f2:5a:70:2e:a0:37:50:
98:61:d1:27:02:43:18:eb:79:a2:6a:f2:59:83:52:
b2:fe:9c:ea:75:a5:49:25:75:4e:e6:2d:af:78:79:
97:9f:90:c1:9c:1c:61:dc:5f:29:86:f2:88:84:69:
26:19:af:30:a1:58:f6:b4:7b:3a:a2:6d:cd:2c:8e:
78:f3:e6:5e:2e:7d:06:08:57:e8:04:39:fb:23:96:
40:ea:c2:66:5b:c9:0d:0c:a9:c6:a2:a3:62:5e:56:
9e:ff:be:f9:d1:95:28:fa:6a:94:55:65:60:41:4e:
da:ea:70:ac:b4:d1:25:15:2f:93:ac:83:24:14:fb:
8a:31:e3:89:b7:22:03:ca:c7:e8:45:9e:e5:d8:96:
83:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C7:B0:E7:FA:2E:0D:9F:DC:2B:45:9F:81:65:99:CF:C9:1F:D8:77
X509v3 Authority Key Identifier:
keyid:5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f5:cf:cd:3d:74:3d:fb:7d:7f:99:27:98:2f:c8:a6:18:73:
21:17:1e:96:15:4f:27:8b:fd:04:0f:2f:33:b1:c3:ea:a0:51:
c5:a6:6e:f0:21:ef:98:90:65:63:c5:1f:a4:f3:c0:38:3d:05:
6f:bd:04:6d:dc:3a:d8:1f:dd:db:21:3b:2a:e1:8f:e7:0b:3d:
66:99:ed:a8:de:b7:e3:57:56:8f:9b:a7:2c:57:1c:b9:d9:66:
ad:92:0f:f8:5a:c8:65:00:12:e4:cd:cb:74:4b:e3:6b:e8:b7:
17:7b:e7:64:15:39:37:e5:05:e4:85:56:88:77:94:a0:24:f4:
2b:e9:ff:d1:e2:03:0b:93:57:0f:45:ae:27:9c:3c:26:46:9e:
a9:d9:df:72:59:a5:6d:76:f9:84:c3:47:9d:90:7e:ad:22:bb:
7b:34:46:38:42:36:d4:da:12:22:6a:fb:a1:3c:67:ac:cc:07:
28:fb:de:f7:bc:7b:aa:94:5f:02:7b:a5:34:d2:2f:41:fe:51:
6c:4f:ad:13:d2:e9:71:b5:96:19:59:ce:2e:c2:2e:cd:c6:6b:
53:08:ac:fb:a0:ce:19:52:03:9d:85:bc:75:71:05:aa:56:e8:
79:80:08:27:4c:8d:1c:d1:e4:bf:41:b7:d1:71:e4:f5:a5:5d:
29:2a:2b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:26:54 2026 by rpki-client