Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
File: XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft (raw, json)
Hash identifier: FWehZ+dSIqDNQmNwX6xfE4esWT7UqRwDKbPpFUCiEAo=
Subject key identifier: 13:D4:14:97:8D:DD:9A:C2:87:B0:6B:9C:C4:4C:9C:39:2D:2B:5E:03
Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
Certificate issuer: /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Certificate serial: 019CAA21520B9174D940DBDFF762C5FE860A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
Manifest number: 0BDC
Signing time: Sun 01 Mar 2026 16:00:36 +0000
Manifest this update: Sun 01 Mar 2026 16:00:36 +0000
Manifest next update: Mon 02 Mar 2026 16:00:36 +0000
Files and hashes: 1: EmJaWy9ErTq18djeUNfT6TYwXlA.roa (hash: 4n7tztgrwrUxD6WI3OMeFvCbZPJYYWR7ZCZusKoAv2Y=)
2: I-K9nqaL8isdaQPATdz15jV472A.roa (hash: IzWVmalHZuVa9srOGb7K8LfnsGA4gkEh+RLBEqMh0oM=)
3: RcwVn60BAjXaSKd54kN8HvE9mEI.roa (hash: HMzOnWY8MpFn7ebVHAu3c09I2xVaAKGb1gijWHIVX6I=)
4: VMEOZBTbdat5Ej2FDGSSyvWxON4.roa (hash: il5PH5NsJiNfZtmLceTZARbKmqNBVyPmTfnq15PGTB8=)
5: XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl (hash: +uV9vVKe1xwsxBYIZ+ZImAivJad1AvLBfBJovfVwGMo=)
6: lIxTSYsNmmcqNIHLrqXgnkuovB4.roa (hash: KyCy7f0RC+Gah0kPcXWSGeJFDqftrveXwrbOBQUq7gE=)
7: n6hUs8ScD2JiUwNfl89-e_tCc6w.roa (hash: /7fv2sWCDJbqb4l7iyEbmK73ArodpdBZ+jyH4nyo2WE=)
8: roenOOlAGA0_OFjwrFwDRIQ0Y_Y.roa (hash: HW4LBYiaQzfwjk4eYDYDeite6KGRHXlfiOHLKtkmNeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:52:0b:91:74:d9:40:db:df:f7:62:c5:fe:86:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Validity
Not Before: Mar 1 16:00:36 2026 GMT
Not After : Mar 2 16:00:36 2026 GMT
Subject: CN=13d414978ddd9ac287b06b9cc44c9c392d2b5e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c1:8b:7a:92:94:ee:10:52:09:df:3d:4a:74:
68:a9:70:4a:9c:c5:f0:3e:c4:85:de:4e:78:f0:3d:
17:a9:70:95:e8:19:b1:14:c8:2c:30:86:60:d0:d2:
50:a6:c6:3d:c4:ad:20:69:8a:c2:e1:0b:85:f4:08:
c2:2a:60:d4:26:e5:96:17:4b:c6:19:c6:4e:11:04:
16:a0:58:c2:07:a4:d8:63:72:f1:0f:25:99:74:19:
02:ed:fd:5f:80:3f:d9:67:fc:4e:0b:5f:cd:6d:64:
7d:b9:d3:29:23:bf:83:90:f4:bd:0b:7c:56:df:c3:
8d:98:8b:48:2d:07:c6:cb:02:f4:15:cc:d5:cd:2d:
b6:d8:6a:62:5d:cf:a5:dd:51:db:4a:13:12:80:da:
e1:d0:a7:9d:91:c7:90:16:70:d7:39:45:90:0d:e2:
5c:10:ce:cf:90:09:65:b5:0c:6b:20:71:bc:a3:65:
ce:81:17:e8:46:b3:cb:85:ec:48:63:9a:58:bc:ff:
38:ef:50:16:a9:e2:d0:b6:ea:31:70:93:3f:ba:e2:
38:97:ed:6d:b1:8a:cf:a8:4a:4f:3a:51:7c:94:08:
ae:13:d3:86:30:de:f8:33:d6:5c:1e:04:da:ca:96:
e5:29:82:91:3c:53:b8:a7:93:ee:a0:81:6a:ee:17:
04:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D4:14:97:8D:DD:9A:C2:87:B0:6B:9C:C4:4C:9C:39:2D:2B:5E:03
X509v3 Authority Key Identifier:
keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:2a:53:2c:be:f0:bd:85:f5:39:74:15:e0:f4:10:6a:ae:be:
dd:95:c8:44:07:cf:5d:0f:e2:79:9d:c7:59:83:53:45:47:d0:
91:b1:07:d5:9e:bd:33:42:99:c1:b3:0e:a6:14:54:26:07:47:
76:b7:66:dc:e7:ef:7c:29:7b:a2:c9:36:96:4d:36:83:fb:86:
c9:92:1b:2d:d4:92:bc:6a:c6:33:10:e9:c9:93:f0:c6:2a:1b:
69:59:b6:a4:be:e9:fa:58:96:54:40:f5:9b:9f:2b:5b:95:77:
08:fd:7d:ce:09:d6:5a:60:ea:d2:1e:f6:4a:aa:f4:aa:c2:be:
9e:53:1b:17:26:48:16:79:6b:03:1e:fb:b4:68:ad:dd:a8:f7:
38:47:1d:0a:1b:c2:8f:32:28:21:01:a6:3d:ca:de:47:9b:76:
c2:c8:db:fc:8c:25:66:4b:00:4d:e4:95:81:d2:4a:fd:f9:08:
d4:89:bd:35:58:92:ee:f0:c8:a0:88:ab:c4:7c:8f:ca:f7:50:
ec:69:84:b0:87:cb:13:66:4a:f1:0a:29:3b:b1:b4:7c:b9:fc:
b1:a9:02:8e:d3:12:fa:c5:7b:38:3f:f4:07:d0:66:fa:7e:32:
cb:17:d2:75:b1:5d:3f:36:9b:ae:23:c7:c4:a8:54:0d:6b:29:
4c:98:a1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:20:18 2026 by rpki-client