Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
File: Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft (raw, json)
Hash identifier: 15dYclME2yyA62mGGpQQSZBcC22TgiEBcArFIViDtKw=
Subject key identifier: 47:E9:39:8C:C5:59:18:2D:39:D0:73:30:33:F3:90:07:06:FE:42:BE
Authority key identifier: 5E:CE:10:F1:3C:46:80:69:26:A6:79:46:CC:6A:11:02:AA:09:03:1A
Certificate issuer: /CN=5ece10f13c46806926a67946cc6a1102aa09031a
Certificate serial: 019CAB6BE6DE386A144497693297FC13DC19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 22:01:41 +0000
Manifest this update: Sun 01 Mar 2026 22:01:41 +0000
Manifest next update: Mon 02 Mar 2026 22:01:41 +0000
Files and hashes: 1: RM6TUZSUSaasZ-dBQ85053ksR-0.roa (hash: v5GrLhG4mT6P4v3eZCOBY4Q0WYXL2CD9LeoqtKdCqz0=)
2: Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl (hash: 6IBoXaN6tAShuJ59tcYWz0WMVnRVsPNOKU78ISztOQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:e6:de:38:6a:14:44:97:69:32:97:fc:13:dc:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ece10f13c46806926a67946cc6a1102aa09031a
Validity
Not Before: Mar 1 22:01:41 2026 GMT
Not After : Mar 2 22:01:41 2026 GMT
Subject: CN=47e9398cc559182d39d0733033f3900706fe42be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:12:3b:e9:b6:6d:1d:04:84:03:a8:d6:02:41:
91:1e:8a:7d:31:00:af:4e:b3:ac:96:b7:a3:f0:32:
e1:d2:3f:38:90:e4:b6:41:6f:27:f2:82:16:2c:05:
18:d2:cb:ed:eb:3b:f5:80:5f:3b:59:dc:da:79:b6:
c2:01:ba:14:9f:e7:04:19:cd:58:63:94:36:22:50:
1a:ac:bf:d5:cd:38:e1:1b:69:02:d9:e6:21:fb:e2:
15:32:6a:d1:18:6b:79:7d:eb:db:fe:19:c4:b8:8b:
85:41:56:f4:aa:89:4f:4d:55:cf:bc:07:25:b5:56:
ab:3a:1f:5b:7d:0d:36:da:e1:63:62:35:58:10:30:
4b:05:cf:17:de:fd:0b:3d:d5:11:87:f7:b4:62:b8:
5d:b5:bc:9a:ac:ba:15:05:4a:87:d5:28:c6:5d:4d:
b2:20:10:a5:70:98:d6:09:8f:49:6c:5b:dd:06:a6:
a0:bc:0b:72:1c:d6:86:da:f2:02:9b:f7:83:40:4a:
e6:8a:b4:b7:4b:cb:62:c3:46:d6:5c:36:fe:be:06:
69:20:7d:4e:a0:27:91:6e:aa:c8:1b:68:67:02:95:
c4:db:bd:25:2d:c9:32:fc:59:18:2d:39:6f:40:8f:
3a:c4:d3:88:a6:fe:d3:02:3a:21:6d:c1:f2:4b:26:
86:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E9:39:8C:C5:59:18:2D:39:D0:73:30:33:F3:90:07:06:FE:42:BE
X509v3 Authority Key Identifier:
keyid:5E:CE:10:F1:3C:46:80:69:26:A6:79:46:CC:6A:11:02:AA:09:03:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:40:ac:eb:ff:1f:5b:25:a9:d7:f6:19:3e:f0:f4:54:7b:e5:
8f:5f:e1:a0:b5:d0:f1:b1:88:3f:c2:2b:4f:57:de:37:bf:bb:
5b:a3:7f:6e:49:a2:75:00:4f:2b:1d:b9:87:02:68:7b:d1:51:
fb:e3:fa:30:38:84:c9:01:37:a7:ad:3b:20:9e:c0:c1:80:1e:
c1:13:ff:66:8a:03:b5:db:a4:18:c2:b0:d2:36:f5:94:24:ce:
d1:ff:b1:ac:7a:a0:13:04:8b:a7:55:2a:e8:36:8a:eb:5d:ff:
7d:ea:86:f0:2b:fb:2a:93:9d:4d:de:98:76:dc:9e:26:af:9e:
06:fd:70:40:50:05:5f:35:58:7a:d1:fa:62:c4:53:76:c4:20:
41:90:b3:5e:70:54:69:a0:d0:1b:62:c1:4d:b2:2c:f5:80:4c:
e3:28:87:07:30:5a:8c:fe:e2:37:0b:78:de:ce:98:b0:3e:0c:
65:0c:64:93:66:5f:8f:ba:65:1a:9e:7d:d3:56:96:4a:3d:c4:
b2:e3:a6:49:bd:c3:16:28:57:f0:93:10:d1:60:0e:8c:db:6c:
5c:e3:29:c0:7a:b3:a1:21:0e:1d:43:e2:3b:ff:46:82:63:3a:
3c:80:08:7d:57:7d:1f:a1:d0:93:c9:ff:c5:6e:fb:97:58:84:
f5:81:2c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:43:07 2026 by rpki-client