Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
File: XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft (raw, json)
Hash identifier: Yta7R00pos7aHnRbY4un9Jp8HxZ+4C1KpzFBBIbKn3o=
Subject key identifier: 67:35:7E:2D:42:15:0F:B7:75:4E:09:0A:90:9A:2B:D2:43:FD:EE:4E
Authority key identifier: 5D:65:6B:20:13:E8:51:51:6B:94:2F:A9:07:06:C7:20:90:DC:DD:EF
Certificate issuer: /CN=5d656b2013e851516b942fa90706c72090dcddef
Certificate serial: 019CABD9BC79E4F3DC363D0333339342D4C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 00:01:39 +0000
Manifest this update: Mon 02 Mar 2026 00:01:39 +0000
Manifest next update: Tue 03 Mar 2026 00:01:39 +0000
Files and hashes: 1: QlZ3EwceRly-CQVyh76fsical88.roa (hash: GhqviNkjdeBBcrA1tzvOBRebTTX9kM0EqFFhCTAnsnQ=)
2: XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl (hash: 9eCenEUiIDivVvV1AqYisQS3hiOHXVui3muhsT/1AGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:bc:79:e4:f3:dc:36:3d:03:33:33:93:42:d4:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d656b2013e851516b942fa90706c72090dcddef
Validity
Not Before: Mar 2 00:01:39 2026 GMT
Not After : Mar 3 00:01:39 2026 GMT
Subject: CN=67357e2d42150fb7754e090a909a2bd243fdee4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:37:82:b1:87:ca:5c:66:21:28:dc:3a:df:98:
ca:1f:ca:09:6b:87:b5:94:2b:11:c8:4e:cf:03:eb:
81:3b:01:be:b1:63:39:ef:d1:c8:17:39:95:81:47:
aa:46:35:d1:7f:74:d3:19:17:2a:0c:6c:6e:00:97:
88:86:24:ef:a4:9c:24:4d:ed:d6:ec:50:02:66:98:
cb:6d:f0:15:7b:7d:d3:7c:3f:96:4c:3c:e9:7c:11:
70:20:aa:ab:95:a4:f5:f8:68:5f:32:90:5d:50:c8:
94:8c:9f:55:11:17:00:7a:db:e2:8a:6e:a8:9b:b0:
d4:6b:56:7c:fb:b5:12:57:fe:d8:c7:43:cb:df:b5:
ee:d1:5f:35:e6:cb:59:a9:2d:7d:8c:d8:ac:43:d4:
1c:6f:46:79:ee:61:cf:3d:6e:3b:19:aa:c4:97:b5:
e8:4a:7e:dc:5c:72:b4:94:89:b9:c3:e4:14:6b:82:
07:86:e1:fe:c1:4a:8a:d9:5d:1e:90:ef:ec:b5:b2:
7d:0c:aa:bc:31:7b:3c:41:a3:93:b2:d8:2a:f1:06:
d8:57:40:9c:78:e3:43:07:a9:7e:f1:ea:56:94:62:
fb:f3:91:68:39:09:fc:d2:95:00:ee:d1:a6:67:be:
2f:e9:7d:e1:f4:87:f0:8d:ad:d5:1f:0d:70:e7:16:
d0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:35:7E:2D:42:15:0F:B7:75:4E:09:0A:90:9A:2B:D2:43:FD:EE:4E
X509v3 Authority Key Identifier:
keyid:5D:65:6B:20:13:E8:51:51:6B:94:2F:A9:07:06:C7:20:90:DC:DD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:3d:23:4b:02:25:e1:8e:12:e1:59:3e:5e:09:27:78:a8:5c:
e4:e0:4e:50:e0:d2:8a:74:2c:23:ff:3e:96:59:7d:cf:3c:89:
8b:d0:d5:fb:e5:80:05:95:77:c7:aa:c8:24:8b:20:14:92:a9:
55:a3:cc:63:0a:f5:b9:7b:d7:6c:a2:43:8b:8a:4d:01:c0:42:
fe:b8:39:ff:ab:07:34:68:cd:c1:68:ed:dc:8e:ff:82:83:24:
b0:d7:15:77:18:ac:9f:8c:df:34:6b:e9:c3:95:d8:c1:df:11:
a5:f2:2d:6a:2a:7a:b8:36:1d:e0:5e:34:31:75:11:98:81:b3:
8f:7e:cf:af:32:67:c5:f6:d7:d7:82:14:b1:e3:71:2a:a9:eb:
ed:67:6d:97:aa:42:6f:b7:e9:b3:66:23:bf:77:3c:e3:f2:c7:
f2:d7:6f:08:de:59:ea:d2:88:8e:6c:c2:f8:17:a7:bd:8a:e4:
56:a2:70:29:95:a4:90:04:14:6a:b4:ab:b5:96:59:00:98:92:
4f:2f:4a:13:6c:cb:f8:71:9d:c5:51:40:c4:c0:3d:e4:17:c6:
a2:4f:18:ef:6d:da:72:e5:20:ee:8b:c5:4e:78:45:7c:d1:28:
35:ce:d3:ab:ae:88:42:91:96:68:af:99:f5:c8:07:d6:69:b8:
f3:7a:d2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:15:56 2026 by rpki-client