Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft
File: xpHzRaUDy4yKneQn6IEu__IbIrU.mft (raw, json)
Hash identifier: hL5OADI7JF5onqk04fADubk3myCl/EWUbMD2R3eAOFU=
Subject key identifier: 99:C0:5D:21:1F:E8:9E:C5:68:CB:01:45:1F:66:55:B1:5B:CA:B0:E4
Authority key identifier: C6:91:F3:45:A5:03:CB:8C:8A:9D:E4:27:E8:81:2E:FF:F2:1B:22:B5
Certificate issuer: /CN=c691f345a503cb8c8a9de427e8812efff21b22b5
Certificate serial: 019CABD9A1651E7D7AE2F2C0D14A3A7EC1B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft
Manifest number: 068E
Signing time: Mon 02 Mar 2026 00:01:32 +0000
Manifest this update: Mon 02 Mar 2026 00:01:32 +0000
Manifest next update: Tue 03 Mar 2026 00:01:32 +0000
Files and hashes: 1: 839re63sqp9J0YrYByZUfzIQurk.roa (hash: 98lbLdsyBHzdkZ4Kud1LUGcup776YisCahQcrBlEZ/A=)
2: AFxWP5v-LMiOayi2dIPfo8g0sew.roa (hash: oQfa2Ax5iDTsjYw9BSN32EY9FTl8mwhb+e6fN/Zrk+A=)
3: rRVCY9deulKKnDF9lQIosJo2pBo.roa (hash: z9eK7nmNMxVcT62wFywjBLXRE4xnhMoPZGziMsFutWo=)
4: xpHzRaUDy4yKneQn6IEu__IbIrU.crl (hash: oP1fFiZ9y5IaW4Vx6BlwdIA/92sKBN+RpFMwwh6S5oQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:a1:65:1e:7d:7a:e2:f2:c0:d1:4a:3a:7e:c1:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c691f345a503cb8c8a9de427e8812efff21b22b5
Validity
Not Before: Mar 2 00:01:32 2026 GMT
Not After : Mar 3 00:01:32 2026 GMT
Subject: CN=99c05d211fe89ec568cb01451f6655b15bcab0e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:62:f5:53:45:94:cb:d1:b0:5d:2b:fa:ac:a4:
f7:5e:7c:70:6a:48:26:ce:71:bc:e5:08:0d:5b:1f:
d6:6e:14:a6:ce:fd:3f:1f:e7:b8:77:70:45:a5:3c:
9a:fc:05:df:7d:4d:84:37:55:52:ee:e3:d4:08:70:
79:c9:e0:90:5d:b1:1b:4d:28:dc:cc:99:fb:d5:5a:
a3:a2:3b:22:ca:02:b4:a2:bf:fb:f3:5a:aa:d2:87:
ab:83:79:9c:d8:26:05:e0:e0:b4:31:59:c9:75:eb:
50:1b:c0:97:c5:4d:3a:5b:d3:d2:ce:41:55:94:34:
ad:32:58:8a:bf:6a:ce:b7:11:6e:74:05:09:b5:d7:
26:d0:11:a3:5d:77:9d:91:54:54:3a:04:0e:01:44:
fd:21:01:d5:c4:99:5b:e8:0f:81:c4:94:9c:3d:f9:
be:85:1d:5e:88:1b:26:e7:5e:c7:bc:c2:50:75:f2:
88:52:f7:d5:37:e9:b9:2e:db:2e:7e:61:59:3e:fe:
b8:8a:3e:98:79:ac:e8:15:21:b9:7b:54:1a:5d:06:
45:23:37:31:9e:6f:bf:d4:64:e5:25:0c:6f:2c:85:
f9:78:64:70:e8:b1:56:66:07:f2:61:73:b9:60:64:
30:a7:84:31:dd:03:d9:ee:8e:dd:60:1c:4d:b4:11:
f0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C0:5D:21:1F:E8:9E:C5:68:CB:01:45:1F:66:55:B1:5B:CA:B0:E4
X509v3 Authority Key Identifier:
keyid:C6:91:F3:45:A5:03:CB:8C:8A:9D:E4:27:E8:81:2E:FF:F2:1B:22:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:cf:7e:c6:17:7f:0e:63:83:4b:24:45:a3:bb:a7:ad:33:83:
fd:b8:15:04:c2:d5:f8:94:f3:61:88:7d:6a:de:1f:ec:1a:3c:
de:6f:ed:6d:68:da:26:6e:72:6c:19:a8:7d:74:3a:fd:9b:28:
13:e5:57:95:00:de:68:29:7f:25:53:c9:69:f2:7b:5d:13:79:
f2:ca:1e:3d:e0:dc:56:3b:53:37:ad:21:f9:26:fd:56:76:4a:
59:0f:d1:29:c5:f5:dd:73:c2:70:dd:3e:c8:18:2d:49:3c:e3:
78:ef:7d:38:66:65:83:11:17:4b:e2:6a:6c:00:2e:58:e7:33:
eb:fb:42:61:99:49:61:46:16:76:e6:db:52:59:e7:03:77:28:
6e:a2:63:4a:d5:55:d4:84:33:7c:af:dc:b5:f0:4c:7e:d3:33:
8a:dc:8c:93:b2:45:bb:94:d5:a3:c8:ff:04:e5:49:a6:2c:5e:
6e:45:41:30:e7:17:fe:ac:3e:69:24:59:0f:1f:24:17:e0:7e:
fe:27:8a:ea:69:a5:65:ed:5b:c0:08:ff:50:10:4b:08:a1:78:
45:b9:8d:71:d7:3a:26:d7:76:77:83:ca:8e:71:51:32:cb:f4:
fd:0d:81:fd:f0:1b:eb:a7:eb:97:e0:ea:7c:52:82:e6:2a:a3:
f8:5d:eb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:26:09 2026 by rpki-client