Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
File: xqbiL04jll9sSgJcbJLvwLZi55M.mft (raw, json)
Hash identifier: c9OXrPbJJB5eXgkItCK9IRHXAPgx/Re/3JVQ//SyhwQ=
Subject key identifier: B9:A4:C7:22:1E:CF:43:90:E5:A5:FF:D9:3D:A4:8F:4A:EF:29:60:3D
Authority key identifier: C6:A6:E2:2F:4E:23:96:5F:6C:4A:02:5C:6C:92:EF:C0:B6:62:E7:93
Certificate issuer: /CN=c6a6e22f4e23965f6c4a025c6c92efc0b662e793
Certificate serial: 019CAA8F6487AC6A8FC47B241138A6760836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 18:00:49 +0000
Manifest this update: Sun 01 Mar 2026 18:00:49 +0000
Manifest next update: Mon 02 Mar 2026 18:00:49 +0000
Files and hashes: 1: TV3P0s4uwtaFIK2WOUaoBJ-Xjrs.roa (hash: 9BkM0T1n4z97DADL7bwyZNwxFvKQwjhmNhhGnIrdjHw=)
2: xqbiL04jll9sSgJcbJLvwLZi55M.crl (hash: 3+jNV//OnqLZ9kVNWjNTJKMdzXXzu2yvgrT5Kyq1EMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:64:87:ac:6a:8f:c4:7b:24:11:38:a6:76:08:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a6e22f4e23965f6c4a025c6c92efc0b662e793
Validity
Not Before: Mar 1 18:00:49 2026 GMT
Not After : Mar 2 18:00:49 2026 GMT
Subject: CN=b9a4c7221ecf4390e5a5ffd93da48f4aef29603d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e5:2f:d3:34:7a:e1:88:74:1d:b7:17:9f:fb:
28:b1:e4:af:13:c2:75:fe:2a:dc:39:41:09:c6:0a:
70:15:dc:16:d6:73:8a:8b:d1:c9:f9:c3:bb:42:6c:
01:d2:be:f0:45:36:2a:b8:ed:b8:85:cd:7f:45:bb:
26:88:f9:3a:00:ac:5b:13:14:35:64:44:d5:f9:d2:
6d:ce:71:cf:08:03:06:3c:d8:f3:9c:f4:d1:01:26:
7a:99:34:be:60:13:57:72:13:ea:c1:77:f8:84:2c:
b0:bb:23:b5:5b:64:cd:d3:83:6f:05:bc:31:1e:5c:
3e:e2:e4:5c:e9:00:d1:a6:28:09:77:6c:28:55:11:
18:aa:f3:b0:53:db:8a:5d:34:66:44:4c:1c:7a:3f:
d0:56:c3:88:ad:b2:d7:30:fe:e1:c8:3b:df:10:07:
93:33:92:9d:11:b3:8a:44:a6:a3:e7:c4:b3:6c:ab:
01:9c:6e:83:18:01:55:fd:02:d1:56:84:06:d7:dc:
b2:8f:da:0a:86:f4:90:c2:38:f6:77:0c:db:cb:46:
5c:67:78:46:5e:17:95:c7:04:58:17:4e:53:e0:ea:
f7:a6:50:fe:b0:fb:ac:87:9e:2c:99:b3:9c:57:cc:
04:b5:37:fb:cf:af:d6:55:57:12:74:3a:19:f5:de:
f1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A4:C7:22:1E:CF:43:90:E5:A5:FF:D9:3D:A4:8F:4A:EF:29:60:3D
X509v3 Authority Key Identifier:
keyid:C6:A6:E2:2F:4E:23:96:5F:6C:4A:02:5C:6C:92:EF:C0:B6:62:E7:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:43:3e:b1:43:4f:a5:47:1f:28:03:54:14:bb:e3:8b:0d:90:
e3:5f:09:06:19:ab:8b:d3:92:c3:38:5d:40:69:6c:05:7f:74:
9f:40:ac:04:77:d8:34:2e:d7:55:78:83:0a:ca:45:d6:6a:97:
b0:f8:3b:4e:58:b9:d7:82:d0:a9:a4:d5:ee:b6:11:b7:b0:f6:
15:6f:74:11:54:a8:bb:56:75:e1:f3:27:04:8e:af:97:9c:8f:
c0:de:2b:49:41:a0:1e:88:ec:c2:94:72:55:b3:97:6c:1b:b8:
13:d5:0d:14:8f:c0:47:5c:1e:5b:10:8d:48:e9:ff:7a:06:f4:
28:bb:19:ec:c6:25:68:32:bf:9f:2b:c0:73:49:72:3d:8d:79:
d5:a8:95:54:5e:91:a4:b1:c4:b2:37:ae:8f:de:fc:37:dd:32:
6d:f8:ce:f2:39:85:e7:b9:ba:db:d7:8f:d6:ae:a7:48:99:d3:
0b:80:3a:8f:b7:2f:b0:1f:35:68:2c:8f:3a:b1:75:62:3e:f5:
af:d8:e7:96:ad:00:6f:b0:81:bd:c1:a3:8f:08:55:01:80:16:
5d:c9:c8:a2:db:4f:77:d1:4e:2e:e7:72:25:ec:71:3e:c5:7a:
be:a4:a3:ee:6f:e4:87:32:5b:8b:f2:8a:a8:f1:98:2e:65:1d:
10:ae:01:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:45 2026 by rpki-client