Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
File: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft (raw, json)
Hash identifier: O0FN2dafSQhx2NTNH37GCui6yIADZndTxVf3iEX0J/w=
Subject key identifier: B3:29:E8:EE:8F:AC:FC:15:38:03:D3:50:BE:95:93:22:98:9F:74:15
Authority key identifier: 5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
Certificate issuer: /CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Certificate serial: 019CAA589DB812F88BD28121448B003F183A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
Manifest number: 0E2B
Signing time: Sun 01 Mar 2026 17:00:59 +0000
Manifest this update: Sun 01 Mar 2026 17:00:59 +0000
Manifest next update: Mon 02 Mar 2026 17:00:59 +0000
Files and hashes: 1: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl (hash: ohnmXEUHrgAV4ewHkCrHePBWlfZb+1v3GwcMyeH15UQ=)
2: qvDZMPgKFD7gi5Q44AZYhiZ--Ig.roa (hash: cmgO04c2D3BrRGS4WvX7cY6GozgnK7NT0TwhEs+74Kg=)
3: uKoRxEv3mOldDEo6fDHAk9yg0S8.roa (hash: 4hEUcG83yfbcyvkKT/jDeEV25ZBIHXMO6CdGZ2yW5wU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:9d:b8:12:f8:8b:d2:81:21:44:8b:00:3f:18:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Validity
Not Before: Mar 1 17:00:59 2026 GMT
Not After : Mar 2 17:00:59 2026 GMT
Subject: CN=b329e8ee8facfc153803d350be959322989f7415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:51:4d:f7:0f:c1:24:cb:46:25:6c:ac:73:da:
60:ed:f1:86:a3:b1:18:25:93:a6:5b:f5:b4:46:7d:
1d:30:80:7b:cf:44:e8:d9:e5:57:4d:87:03:73:6b:
28:a0:41:34:28:e6:de:b9:81:86:7d:a8:62:dd:91:
c1:26:6f:27:aa:e7:d7:ef:44:14:01:ae:91:9e:54:
f2:a1:3a:67:de:40:14:ff:48:aa:09:be:be:d0:73:
fd:bd:95:f0:3d:a5:df:b7:46:14:fd:20:72:9c:cf:
da:26:69:14:3c:99:ac:0a:34:1e:0d:50:21:a1:96:
90:e1:18:86:51:cd:91:67:77:a6:9d:bc:a9:20:e4:
2c:d8:44:96:13:d8:90:22:3f:03:b5:92:d9:53:23:
88:c9:b3:9c:15:d2:df:b6:cd:94:37:ea:27:96:86:
52:af:da:05:19:7e:02:d8:c6:0d:ec:be:cb:55:df:
b7:e3:57:af:c6:c5:ac:36:a6:f6:e7:6b:8e:10:f0:
80:43:23:7c:30:c3:61:b3:94:85:95:9a:e9:ad:c5:
4b:23:78:67:c5:d2:06:82:5d:6b:28:59:41:8c:e5:
43:d5:8e:06:1d:da:fa:1e:c7:58:72:a1:1c:19:f7:
10:bf:4e:c6:58:08:e6:27:cf:dc:32:a3:ca:0f:20:
e6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:29:E8:EE:8F:AC:FC:15:38:03:D3:50:BE:95:93:22:98:9F:74:15
X509v3 Authority Key Identifier:
keyid:5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:a6:57:72:48:f3:e2:67:08:68:18:20:d0:d7:4d:81:52:69:
7d:4c:5f:e4:ad:ec:85:26:19:ba:3d:cc:c3:ba:75:5c:57:2d:
98:39:69:81:2b:62:42:f7:90:a4:a1:63:57:eb:f5:f2:f3:f3:
73:0e:c4:38:ad:78:78:73:b2:79:a5:79:21:01:a9:b0:04:cb:
89:90:f1:46:72:24:21:81:fc:f6:d8:dc:4b:a6:c7:83:1b:96:
af:de:25:41:6a:04:c3:bc:a2:9f:d0:12:4c:db:0e:cc:f9:06:
1e:3d:62:65:94:b6:4c:3e:00:2f:b8:98:2a:f0:88:7b:e5:1d:
c8:05:d6:dc:7e:3d:fb:2c:93:fd:11:45:b8:1d:b8:59:aa:e5:
a8:68:1f:fe:4f:c4:0d:66:8c:c5:ac:cf:37:2b:ef:3b:34:7f:
48:43:92:19:b1:05:ca:31:39:3d:da:98:09:06:89:dc:bb:a9:
9b:79:dc:0a:d3:96:1f:25:ef:74:bf:e1:69:e2:2e:f8:3b:63:
95:36:8e:29:ec:e5:ca:bc:75:81:e1:d7:1d:92:20:e7:eb:cb:
74:cd:61:a8:65:61:87:00:30:71:f2:9e:cd:10:97:0b:37:98:
f5:5d:32:be:6a:cf:ba:9a:82:df:c4:65:0e:7b:93:3a:d2:c6:
3e:4e:20:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:35:46 2026 by rpki-client