Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
File: xgWHGIm53K_n7DE2rtHd_uLfvH0.mft (raw, json)
Hash identifier: EJdEsfGcU6rp85jYu0UVINEXuHKIOj9tlTsxsvmwlBQ=
Subject key identifier: BB:C2:2D:41:E8:D5:B8:6C:D8:82:E9:B2:1D:D8:E1:30:D3:37:0B:0B
Authority key identifier: C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
Certificate issuer: /CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Certificate serial: 019CAA5910F8F0C415EF8096CEF56650914C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 17:01:29 +0000
Manifest this update: Sun 01 Mar 2026 17:01:29 +0000
Manifest next update: Mon 02 Mar 2026 17:01:29 +0000
Files and hashes: 1: LS6g_qbOyr5L3M2tEJSHcqYLaGo.roa (hash: pmKUoQElX3xSvG0E8J7HtZYFqjVisgOfWkSTHkEuCRA=)
2: p_1zOjE7RDNIPM-9ijPLsTD4cC4.roa (hash: XKWGoP/7AKlCb/UQ1yCnmOl4XCSltYQxcpO0+1gE4vE=)
3: xgWHGIm53K_n7DE2rtHd_uLfvH0.crl (hash: H2To7G6EeYf1hitIbryVu52crfUdukKn0RO7I2MA238=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:10:f8:f0:c4:15:ef:80:96:ce:f5:66:50:91:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Validity
Not Before: Mar 1 17:01:29 2026 GMT
Not After : Mar 2 17:01:29 2026 GMT
Subject: CN=bbc22d41e8d5b86cd882e9b21dd8e130d3370b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9d:9f:02:3b:6d:bd:0d:73:19:04:86:07:ad:
55:94:81:0c:bf:b0:c9:31:6b:a8:ec:83:ee:02:c7:
fe:2e:b3:e7:ed:cb:70:36:1a:12:56:06:77:b7:22:
bf:6f:6d:9c:23:df:35:2d:d0:a8:83:62:83:8a:df:
c3:af:79:a9:12:a4:c8:29:2d:a8:11:f7:63:5a:27:
bd:61:ff:ec:2b:a6:fa:de:6b:b3:70:ff:39:7f:71:
2d:6c:09:97:7c:b5:fb:67:54:d0:1b:8a:c1:a9:cf:
26:17:a6:51:61:31:35:89:9f:67:c0:b9:99:04:7b:
b6:9d:e6:fb:a6:a4:8e:06:d9:da:39:bc:5a:4f:83:
79:05:21:df:89:80:dd:76:b5:ed:06:28:07:44:21:
f9:1b:f7:61:d7:a6:d1:2b:e7:a9:01:23:22:7d:bf:
f5:cd:7c:ba:6e:8d:98:fe:83:54:6c:67:0f:e1:45:
26:26:db:a8:6a:04:9c:61:0e:52:27:fe:4c:e8:a0:
26:e6:e7:6c:8b:ce:41:29:44:25:cf:92:b5:c9:70:
86:04:12:64:84:4e:d0:92:81:8d:30:e4:4b:f6:f1:
fa:b3:5e:3f:1e:92:ec:cf:b4:cd:29:6f:7c:c8:c9:
b4:93:2b:7e:cc:59:57:3c:27:4a:d4:86:ba:9d:e7:
03:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C2:2D:41:E8:D5:B8:6C:D8:82:E9:B2:1D:D8:E1:30:D3:37:0B:0B
X509v3 Authority Key Identifier:
keyid:C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:8d:50:c9:c4:1a:81:ba:ad:b4:f9:58:cf:64:ed:74:81:14:
f6:fa:2e:a7:27:d5:b5:2f:1d:29:d7:18:80:3a:92:53:e2:86:
f1:98:99:c8:12:e4:86:ba:18:4b:c4:29:08:fd:4f:84:21:c4:
90:90:34:82:13:89:33:ba:4e:22:35:28:f8:f4:a0:bb:0b:c8:
73:69:5c:71:69:14:b1:47:67:94:8a:70:bf:f2:b6:6e:0f:47:
d7:f2:2e:97:6d:e1:91:b1:69:b2:51:65:47:7c:6e:21:22:82:
bc:a1:d6:88:e9:5a:d2:14:1b:1e:01:37:87:86:77:10:8c:13:
d2:1c:7d:80:d5:86:88:ac:a2:05:b6:a1:95:05:0f:a9:a7:28:
a3:68:5e:4c:fb:77:c9:2e:c0:fb:99:68:02:b0:26:ee:e3:c9:
b3:57:5c:9a:e6:5c:f6:24:b3:9b:89:ce:76:6e:e7:dc:0b:44:
57:b6:21:9a:9c:63:2d:7a:08:01:69:bb:84:85:b9:c5:41:fd:
5a:90:6f:3b:80:25:95:cc:30:17:d0:a8:90:c2:68:b1:58:4a:
2a:e6:1c:ba:6c:7d:2c:78:e9:a5:da:c0:00:7b:15:7e:10:e3:
75:49:82:bf:a0:c7:9d:b4:7c:43:85:93:c4:fb:1c:12:f6:68:
c7:df:85:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:44 2026 by rpki-client