Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
File: xCKHxoRY-YDKm3w21h9q9YZGSyg.mft (raw, json)
Hash identifier: +Ox8qZzZsLfsDd276e12cgbtbUZKnHBHczWFXlfMzEM=
Subject key identifier: A5:C2:BC:F1:E9:06:0B:21:C5:0B:5B:33:AC:58:F6:7F:80:CA:58:50
Authority key identifier: C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28
Certificate issuer: /CN=c42287c68458f980ca9b7c36d61f6af586464b28
Certificate serial: 019CAC46FEB084066B6FA632E5E50D9407F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 02:00:59 +0000
Manifest this update: Mon 02 Mar 2026 02:00:59 +0000
Manifest next update: Tue 03 Mar 2026 02:00:59 +0000
Files and hashes: 1: KK6V4tkkGOTlna1jDdLR34C1144.roa (hash: VJsTur/NQjIjrIZYxVHk28VDPEOKoZ9mo1/7vuIP+oc=)
2: xCKHxoRY-YDKm3w21h9q9YZGSyg.crl (hash: Bp7qhXk//0ZGfzUPMYFZ6uQDW+mqT9v1wUnhzkltW6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:fe:b0:84:06:6b:6f:a6:32:e5:e5:0d:94:07:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42287c68458f980ca9b7c36d61f6af586464b28
Validity
Not Before: Mar 2 02:00:59 2026 GMT
Not After : Mar 3 02:00:59 2026 GMT
Subject: CN=a5c2bcf1e9060b21c50b5b33ac58f67f80ca5850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:76:18:bb:71:d7:5a:c1:ea:1b:20:0d:0c:99:
f0:f9:d3:41:37:f7:8d:33:5e:75:38:7b:15:5e:22:
36:c4:a6:8a:c2:1f:fa:64:af:6b:48:81:e1:c4:d2:
0a:04:65:e2:89:7f:67:78:49:2c:86:35:3f:31:ad:
83:be:14:a9:56:a9:98:e5:39:a2:0a:ce:9d:6a:5d:
2c:c0:34:7e:87:0d:a0:42:6b:7c:48:5c:ba:fc:e1:
4b:38:9f:c2:a4:0d:af:a8:f7:49:c1:cd:35:d7:5f:
04:26:b3:8f:c1:27:50:d9:65:78:d0:ff:34:d4:44:
f7:03:08:91:a2:0b:64:9f:8b:5f:4d:87:29:b2:29:
0c:a3:02:83:35:77:96:d4:05:36:ab:2e:f4:44:b5:
2f:56:90:a7:fb:1f:85:61:fd:c9:dc:fd:65:ba:85:
86:73:98:ca:e4:eb:30:3b:87:bb:9f:fa:c7:4a:f4:
e2:bb:b5:57:da:24:12:df:f5:00:a6:ba:d5:c4:0f:
60:72:65:2b:37:69:f6:1d:84:60:8d:de:a7:a8:57:
90:0d:7b:7c:17:9c:ee:ae:42:69:fc:ac:66:ec:4e:
61:5a:a7:b5:5e:d0:91:34:91:50:c1:cb:8b:d6:b5:
46:82:ac:9c:e6:6e:3e:95:ea:6b:8e:59:69:8b:44:
48:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C2:BC:F1:E9:06:0B:21:C5:0B:5B:33:AC:58:F6:7F:80:CA:58:50
X509v3 Authority Key Identifier:
keyid:C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:47:09:ac:dc:64:59:b8:71:dd:36:08:b1:97:8b:68:a4:97:
bb:9f:fc:ab:c0:5e:9e:78:52:ee:f2:94:68:cd:b8:0d:71:3d:
07:9a:7b:b9:5c:e3:c8:f3:dc:11:bc:4d:81:87:a0:a7:72:d5:
d2:f7:3c:4a:ee:59:a6:15:20:a1:7b:52:70:76:98:0a:2d:81:
23:f1:fd:1e:e8:00:4c:b7:8d:07:2a:f3:40:f7:e9:9b:19:aa:
22:9c:12:62:72:b7:f7:49:15:9c:68:0a:99:d8:82:25:46:74:
4a:b5:22:d0:df:72:a6:93:7d:fd:7a:f6:f0:72:d3:3e:a6:3d:
63:e1:0a:7e:02:7c:2d:54:ac:ed:53:0f:78:a3:ad:43:97:f1:
ca:43:5b:14:5b:1e:7b:45:68:f3:50:ea:7f:18:ac:97:06:9e:
61:e4:10:39:5c:d0:9c:57:2f:8d:fa:30:fb:5a:e6:ff:c1:39:
14:34:39:00:d8:b8:6d:bc:1c:2b:e5:23:ea:ca:42:33:b9:61:
3d:43:87:5f:de:e4:7f:b9:8c:d0:f3:5f:f1:b3:c2:e7:af:14:
fa:cd:13:3f:07:f5:25:4e:5e:69:15:9e:31:60:a1:ea:f8:12:
fa:85:5e:4b:74:58:c5:f0:76:03:79:c7:b5:5c:a6:bc:b3:4c:
43:a3:7b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:14 2026 by rpki-client