Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
File: xLG0WKv3l97cxmHlSmhfZRg0tdE.mft (raw, json)
Hash identifier: XJWzeUebNIg3M6QEXRUZqyoGMVw8k6aSjlNstJksSAQ=
Subject key identifier: 19:42:AA:85:94:79:84:5F:B9:43:DB:5E:47:55:A8:C4:69:52:9F:25
Authority key identifier: C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
Certificate issuer: /CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Certificate serial: 019CAC47293EE18B6DAC9CEA82CB3DE5FF45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
Manifest number: 154E
Signing time: Mon 02 Mar 2026 02:01:10 +0000
Manifest this update: Mon 02 Mar 2026 02:01:10 +0000
Manifest next update: Tue 03 Mar 2026 02:01:10 +0000
Files and hashes: 1: Vu85Nu-HoLeRv_52CEznI8bQbss.roa (hash: c6ty/wCdDrBOcI9jUvVNl5APK8YZjil4x8ZlNRshHvo=)
2: hwEYkWKezFU1S6DS8A0TF6JXUos.roa (hash: dJKRSf7F67Dm6ZGKlb7G6KP8NQfxdE863RZT2JIwE9k=)
3: lo3R5w_kTel81Z1irkIbzAD6F8Q.roa (hash: PuU1Xdn3kY1LjMwZS3Qaqe5MniakxiQ+Y+f6yTPGRCQ=)
4: nb0hXlBPQhPWTuMEqZzkSxkwpXI.roa (hash: 55gzjqx5n4gyySLdEurC8vvFbXFEosab3sYhqOZ+WA8=)
5: xLG0WKv3l97cxmHlSmhfZRg0tdE.crl (hash: +KHX1/Y+d2yL4p1b6qoulfLsV65pcRrC4ZxoApqr0WM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:29:3e:e1:8b:6d:ac:9c:ea:82:cb:3d:e5:ff:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Validity
Not Before: Mar 2 02:01:10 2026 GMT
Not After : Mar 3 02:01:10 2026 GMT
Subject: CN=1942aa859479845fb943db5e4755a8c469529f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:42:c0:78:34:0e:86:fb:ae:bb:b3:e1:f3:a7:
e0:0d:a3:20:83:7a:f7:6a:7a:ef:34:4a:44:7d:c0:
79:9c:a1:f2:be:da:e5:63:5b:bd:b0:d9:2c:38:e6:
1f:f4:c9:64:18:d8:b6:dc:d8:a7:d9:b3:81:53:c7:
69:96:6d:3b:a8:d5:6f:d0:02:ec:36:14:e0:ea:8a:
5f:54:a6:f8:e9:32:f6:ce:6b:0a:cd:fa:9e:1e:01:
f6:92:69:ec:50:b8:56:e0:c7:c7:63:60:70:bd:71:
89:d8:05:05:db:14:0b:b8:2a:17:a5:90:d2:e4:ca:
1b:50:14:0c:22:46:0f:79:57:bf:d9:2c:db:35:b7:
9b:83:f6:81:9f:e8:6e:ce:06:89:07:8e:95:a7:15:
15:b5:0d:c4:cc:07:6e:3f:fd:e0:f1:29:17:bc:23:
9d:01:cc:1d:c6:7d:4e:46:76:55:6d:33:06:5d:23:
4b:06:ba:4a:63:b8:ca:91:c6:56:6f:23:84:05:6d:
4a:14:4b:83:53:b3:36:88:74:9a:dc:14:cc:e4:6f:
47:d0:39:33:32:fa:24:a1:38:30:63:ed:bc:a4:3f:
2d:03:53:45:bc:ea:ef:91:e2:02:c3:67:90:25:95:
f6:2f:c7:21:32:5d:d3:6e:cf:f6:5e:ca:53:04:1f:
71:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:42:AA:85:94:79:84:5F:B9:43:DB:5E:47:55:A8:C4:69:52:9F:25
X509v3 Authority Key Identifier:
keyid:C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:99:10:9a:20:5a:9d:af:dc:16:8b:de:41:02:4e:f0:c2:71:
6a:da:77:59:b6:f8:15:2b:ae:c2:ab:ca:d8:29:f2:ed:a8:e9:
ad:14:09:83:38:24:e2:2d:4a:9f:ff:c0:61:c0:6a:dd:0b:30:
1b:2e:7b:4f:96:4b:0d:31:13:8e:97:1e:18:fb:56:bf:ae:09:
58:a0:b9:d9:12:8b:3c:43:e5:2d:da:f5:2d:09:f4:20:9b:3a:
a6:69:c4:6c:70:f5:6b:13:0a:d7:32:59:e3:a7:cd:e4:7c:eb:
e1:bb:13:9c:d0:0c:d5:d3:5d:52:08:8d:8c:bf:ec:a2:df:5d:
4c:2e:26:59:e7:18:d6:31:c6:06:28:a4:a6:c7:92:68:96:aa:
e4:3e:c8:40:07:30:02:ca:de:98:8d:e9:ea:97:fd:be:29:b1:
9d:1e:c7:60:cf:41:2d:35:e3:af:8a:8b:28:ab:aa:43:ce:de:
53:6f:15:5a:d0:f8:66:d4:1d:3e:29:a0:ba:f4:ef:6b:38:67:
ff:69:95:db:04:e6:aa:3c:d5:43:c5:ee:d0:3b:0b:b6:c1:43:
f6:a7:8a:b2:03:ec:cf:3d:d6:0e:a0:db:11:5d:f4:ac:a0:c5:
1e:cb:3d:9f:9a:eb:32:83:4f:34:86:4a:d4:1c:36:f9:a3:7f:
41:1b:c7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:02:45 2026 by rpki-client