Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
File: xNinONTBPEpnevUSdbqEyLNtyc4.mft (raw, json)
Hash identifier: MHH/CTdRCiEyUBvjGlH6DCUG/zrybKGipyQFtVkXzVI=
Subject key identifier: 77:D6:67:8C:5D:0C:8B:7E:C3:A3:0B:E2:B7:8E:5D:7F:DE:31:10:A4
Authority key identifier: C4:D8:A7:38:D4:C1:3C:4A:67:7A:F5:12:75:BA:84:C8:B3:6D:C9:CE
Certificate issuer: /CN=c4d8a738d4c13c4a677af51275ba84c8b36dc9ce
Certificate serial: 019CACEBE170C7DD7488820303E2432A1099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
Manifest number: 17D8
Signing time: Mon 02 Mar 2026 05:01:05 +0000
Manifest this update: Mon 02 Mar 2026 05:01:05 +0000
Manifest next update: Tue 03 Mar 2026 05:01:05 +0000
Files and hashes: 1: xNinONTBPEpnevUSdbqEyLNtyc4.crl (hash: nh7cGnYLRVID5FSnQTvzN5PYcQeN9OTD14xTEVFk04s=)
2: z8ur_dlixhHr86qHsQK2VwEFLVU.roa (hash: wwiX0Abxg7HH3i+7n0HaT1GyWyASGat8jETXDQw59Ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:e1:70:c7:dd:74:88:82:03:03:e2:43:2a:10:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d8a738d4c13c4a677af51275ba84c8b36dc9ce
Validity
Not Before: Mar 2 05:01:05 2026 GMT
Not After : Mar 3 05:01:05 2026 GMT
Subject: CN=77d6678c5d0c8b7ec3a30be2b78e5d7fde3110a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:82:ca:f2:87:6d:15:0a:45:60:20:2a:9b:d3:
3f:09:ec:34:04:7b:84:04:c6:21:ea:ec:2f:ff:ec:
af:cf:6a:44:b0:3e:2e:9a:8b:65:45:b9:de:50:86:
ef:a5:ec:3f:9c:74:6b:77:f7:be:6b:e1:8e:8d:7c:
8c:70:06:ae:c0:9d:7d:e8:20:e7:be:d5:71:a5:e9:
ad:99:d2:dc:9e:35:fe:11:1c:a2:56:71:24:40:11:
a3:68:1c:51:78:03:9d:fe:2f:80:aa:96:bf:61:da:
b3:b4:2b:ef:fc:7a:29:3d:a1:73:f4:e7:35:ef:c7:
fb:01:ae:a1:5a:15:dd:c0:21:91:14:b6:ac:09:78:
e7:0f:50:e9:d4:76:ab:dc:2a:19:7e:e9:dc:da:86:
0c:5c:0f:15:d4:e8:f9:94:4d:28:bd:2e:e6:15:18:
c6:20:54:9b:3c:1d:29:0f:15:e2:55:7b:5f:8a:92:
79:b3:f6:a5:72:74:c8:5b:ce:d2:a2:36:ae:c7:32:
c4:e1:6e:fb:4e:f1:07:aa:64:1c:56:3d:d6:4c:20:
0a:b4:ee:4f:55:c5:2d:48:a3:96:f5:53:2e:0a:71:
7c:4b:46:a6:11:55:e1:54:23:67:1d:0c:a3:44:6c:
24:d8:a4:3b:a5:93:e5:85:2d:76:d6:eb:6f:07:bf:
3d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D6:67:8C:5D:0C:8B:7E:C3:A3:0B:E2:B7:8E:5D:7F:DE:31:10:A4
X509v3 Authority Key Identifier:
keyid:C4:D8:A7:38:D4:C1:3C:4A:67:7A:F5:12:75:BA:84:C8:B3:6D:C9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:32:f4:de:55:d1:96:f3:fc:af:15:2e:76:87:22:e9:d8:49:
b8:aa:70:c8:39:01:2c:62:7b:dc:70:58:0b:bd:95:92:3e:40:
c6:e9:8f:89:83:f6:91:d4:bb:c7:8d:f0:bf:f1:40:d8:89:76:
4f:b8:e3:f8:a8:14:66:5f:b1:f3:b8:66:d3:19:5d:53:56:ce:
82:8b:bd:f0:5d:5c:ff:1b:f3:23:0d:da:63:c0:76:51:d3:e1:
7a:c0:f7:3f:5b:7f:fa:f1:d3:ea:94:2a:9d:51:4d:52:b1:ec:
9a:e7:6f:01:70:8c:17:e2:c2:3b:34:3e:43:50:24:26:c2:d8:
8f:bf:22:07:6a:ac:e3:a6:38:4f:fd:ad:a1:f1:56:6d:f1:fd:
89:8f:17:20:6e:db:4e:b6:83:73:74:4f:c3:8f:4c:02:d0:27:
e3:8c:71:de:76:d7:fd:f4:00:cc:29:68:0c:c2:73:a4:e2:f6:
36:fe:ca:af:bd:a8:95:07:eb:0f:c9:d6:8b:33:40:c5:b5:08:
0a:b7:9c:7d:59:62:90:f9:dc:e1:4f:4f:6b:8e:22:0e:d5:11:
7d:ab:b6:de:b0:af:c2:3c:00:4a:33:73:0e:ba:4f:97:0c:aa:
b7:2c:f7:8e:f7:51:18:13:e2:13:b1:20:3c:e3:0f:a8:58:b1:
92:ca:8b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:28:12 2026 by rpki-client