Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
File: xaH7W7wvqFcePV-MrkGWqNfpbDU.mft (raw, json)
Hash identifier: OEq7kePZbeMOKPes6xe6MEvrXNFniD4ehYYnMFrbsmU=
Subject key identifier: B1:E2:38:90:DE:A1:B9:2F:D9:25:D7:51:9F:1C:36:CA:76:83:0C:75
Authority key identifier: C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35
Certificate issuer: /CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35
Certificate serial: 019CAE6C27697E6137F7149BF5176E19828B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 12:00:49 +0000
Manifest this update: Mon 02 Mar 2026 12:00:49 +0000
Manifest next update: Tue 03 Mar 2026 12:00:49 +0000
Files and hashes: 1: jbS8RSSk1qPuBMHXiz0NFlG5gaU.roa (hash: ffpPuQq0nfWr1B/H6xQP1tfUAtvyoDxPWUAq5WEIXy0=)
2: xaH7W7wvqFcePV-MrkGWqNfpbDU.crl (hash: gtpnjt4BNhRyJtFdMg0b7J/5bP4dbyY1f4B//klzARY=)
3: xo3E7B75wnW1W3d1HJPhSZevYZA.roa (hash: PthsrXu6VgY7H1QeefirkpT9auw29AQ4kvdF+HY+Frc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:27:69:7e:61:37:f7:14:9b:f5:17:6e:19:82:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35
Validity
Not Before: Mar 2 12:00:49 2026 GMT
Not After : Mar 3 12:00:49 2026 GMT
Subject: CN=b1e23890dea1b92fd925d7519f1c36ca76830c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:16:2d:ba:89:17:3f:5f:24:14:bb:97:61:99:
30:34:6a:dc:84:76:07:fd:eb:3d:92:42:bc:e5:58:
df:52:ad:70:d8:a8:c9:a9:a5:2c:3a:96:75:c1:a2:
29:42:fb:89:4f:db:01:f9:72:a8:1d:69:2a:dd:7c:
ea:0b:be:92:d2:a9:7d:32:c5:d9:68:9b:a7:0c:72:
92:5e:8a:25:60:17:9d:d8:a1:0a:11:b1:1f:cb:fa:
bc:a5:02:db:4d:2c:ab:26:45:d6:0d:10:7d:ae:5f:
9d:f2:3d:b5:b7:5e:a9:4c:f5:00:70:d5:f8:d5:a8:
8f:50:1c:e0:09:ec:eb:39:18:59:6b:9b:e7:01:32:
66:fe:6f:da:90:b9:9a:c2:63:90:27:bd:f9:a7:9d:
bd:23:4d:5b:71:ba:55:b4:8a:34:cf:c6:39:5c:ef:
a1:f6:b6:90:26:8c:80:c8:7e:45:33:de:cd:d0:3b:
b7:8d:2a:5c:af:db:45:d4:dc:de:99:db:57:f7:8d:
bf:48:6e:8e:43:1f:32:73:37:2b:70:28:bd:42:2b:
3d:26:ca:a3:35:61:3c:f5:ae:db:1e:3e:af:ed:9a:
65:e3:2c:29:91:b6:dc:e5:a6:a0:59:ab:4f:57:1b:
da:38:19:e4:f7:b6:02:82:4f:1c:6d:91:07:16:e2:
db:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E2:38:90:DE:A1:B9:2F:D9:25:D7:51:9F:1C:36:CA:76:83:0C:75
X509v3 Authority Key Identifier:
keyid:C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:cb:1b:11:bf:b5:49:e8:7a:91:ba:af:ba:a7:82:13:1c:25:
66:0c:c4:80:50:22:f7:fd:e2:dc:6d:2b:0e:7d:ba:56:83:26:
0c:9e:dd:ff:e5:3d:a9:9a:32:f3:e9:a5:8a:59:66:7c:05:56:
0f:0b:20:1a:fe:b7:46:e0:4a:71:44:24:22:d5:a1:af:2b:22:
d3:bb:09:94:06:d9:ec:e7:36:d4:12:61:30:82:34:13:d6:7e:
52:96:df:a4:d9:9e:dd:f7:63:44:95:5d:9c:cb:63:7e:57:d5:
31:04:3e:95:12:63:90:48:77:6e:a8:80:15:9b:33:4a:bf:57:
70:9a:e4:e7:5e:1e:d7:18:8a:e1:bd:dd:5f:e8:38:21:ac:e4:
e7:bc:e8:dd:ee:4d:79:6e:67:b8:20:f2:2b:6b:2d:8c:ad:80:
2f:5c:0a:fd:3b:a7:7b:55:6e:38:fc:8c:ad:27:af:13:1d:b0:
9a:66:4f:62:9b:ab:98:92:06:df:01:95:29:95:8a:ba:3e:af:
c6:c6:d0:a3:83:f0:0c:91:0d:9e:34:44:57:58:94:86:8b:1b:
9e:73:de:ac:93:e7:f3:dd:82:86:aa:9b:fd:cb:28:31:65:5e:
96:fb:ac:5b:65:af:4a:6a:e9:36:de:67:30:49:0a:d6:98:c2:
d8:ee:d5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:57:14 2026 by rpki-client