Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
File: XW8uSaMejfnFqgiq8kC1yDK5y5M.mft (raw, json)
Hash identifier: /gM5tdnAhHNv10mzzMO3PUa+EX8nE9ffoHfG+R6hhP8=
Subject key identifier: 31:B0:04:74:DA:B8:A6:91:26:AA:A3:98:7E:4F:B8:42:D2:0D:49:5A
Authority key identifier: 5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
Certificate issuer: /CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Certificate serial: 019CAA8FE32FD2DCAF11DB1F5E1C042B0C21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 18:01:22 +0000
Manifest this update: Sun 01 Mar 2026 18:01:22 +0000
Manifest next update: Mon 02 Mar 2026 18:01:22 +0000
Files and hashes: 1: 017yR2AH3nhtreOuYgsNpqkrBt0.roa (hash: jH8rFvA13JhY4szX2F6JGpx37/sl3RxTDMuhAZiU224=)
2: OOfgMgyirAjAQpzlSeWvWZ7kZIQ.roa (hash: wpPBvbubRrWqOyJudWgmsWq2Hw2lni+AI3RKu2B28mg=)
3: XW8uSaMejfnFqgiq8kC1yDK5y5M.crl (hash: VXxYpVdx+l3Cw3LjfUn0lL6xpokUuifkYVWYQMTRMw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:e3:2f:d2:dc:af:11:db:1f:5e:1c:04:2b:0c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Validity
Not Before: Mar 1 18:01:22 2026 GMT
Not After : Mar 2 18:01:22 2026 GMT
Subject: CN=31b00474dab8a69126aaa3987e4fb842d20d495a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:25:f2:64:03:71:b9:07:8d:0d:7c:c2:7c:83:
f7:cb:96:e4:55:60:58:55:d9:71:00:d9:3c:7b:9f:
d5:3e:ec:b0:ee:56:78:d6:c9:17:52:72:72:06:07:
b0:4a:bb:35:95:91:de:66:1c:4a:1e:15:c8:ac:83:
bc:8d:a9:b6:f5:4e:b0:43:8f:be:f6:54:4b:b8:a5:
aa:be:04:8f:51:c9:f2:35:06:bb:d4:59:2f:c9:5c:
b6:c7:7a:a3:22:7b:17:9f:10:79:e0:37:7b:3d:25:
58:6e:84:7d:36:31:c8:e8:a8:08:13:fb:44:e2:0d:
88:2d:86:7f:ec:15:fe:6d:c7:34:f4:33:50:88:f9:
98:66:df:0f:c0:00:ef:99:a3:a1:56:cc:a9:9b:e7:
50:4e:8e:1c:f9:b2:84:46:76:b8:8a:b4:8b:bb:55:
b7:57:54:ff:bb:ae:25:70:ba:0f:77:b1:9e:a0:4c:
ea:07:e9:39:2b:40:7e:5f:a2:80:ac:ca:cc:7e:fb:
8d:52:5c:a6:55:6c:dc:80:4d:39:57:59:dc:33:77:
3b:de:68:fb:43:ca:29:a6:20:41:66:94:cc:05:b7:
66:e4:2e:a7:41:8e:bb:98:a0:b2:8d:ba:12:c4:3f:
28:1e:4e:7f:56:d1:e7:8a:25:ff:cf:36:82:1e:c6:
6c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B0:04:74:DA:B8:A6:91:26:AA:A3:98:7E:4F:B8:42:D2:0D:49:5A
X509v3 Authority Key Identifier:
keyid:5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:dc:d8:77:cc:f8:3b:d8:5c:56:51:2f:f7:ea:ba:ea:36:f3:
ad:79:bd:4f:93:61:6b:7c:cb:53:da:b8:67:13:dd:50:74:6e:
bb:32:73:10:05:3c:d0:b7:4b:2a:a1:9f:df:14:59:10:c8:42:
64:13:5c:12:b1:50:0e:71:1a:9a:f9:14:1c:10:d3:b2:b3:aa:
af:38:ce:8b:a9:12:9c:ce:f9:cf:57:20:bb:c3:53:36:f4:0c:
67:dc:64:cf:74:dc:ca:cf:4a:66:a4:12:47:ea:a8:d0:c3:81:
f1:85:e9:97:ef:b9:c2:2d:d8:bf:e3:36:8f:ea:c1:c0:fc:49:
ad:41:1c:7e:b7:9a:ef:42:db:fc:8b:64:9f:c3:86:44:ea:9c:
90:d7:1b:ea:b8:43:76:72:b8:19:f2:30:9e:e9:c8:de:ea:92:
11:1e:5f:4a:9e:d5:00:d1:61:ea:f4:b3:f8:7e:93:a9:7e:12:
93:ce:de:f1:cd:e3:c7:a4:e4:8e:e5:7b:96:3c:d6:b8:7e:5f:
60:1d:22:60:83:c0:fc:62:72:2a:bf:4f:dd:6f:56:56:e4:e5:
f6:1d:5d:de:37:18:d5:30:97:5a:6b:ee:85:af:4f:16:2b:2b:
3d:b0:e7:9c:6e:55:88:8c:7a:a8:ed:d3:e1:a3:bf:a0:d3:8a:
bf:91:9b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:45 2026 by rpki-client