Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
File: xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft (raw, json)
Hash identifier: dQwpwZy3Fhh+GFVPugCNUrB+Jhz4/s5033dGW7RTGZE=
Subject key identifier: 0B:E5:47:69:83:11:B5:31:8A:A9:86:7E:90:05:D5:EE:40:55:E1:A5
Authority key identifier: C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D
Certificate issuer: /CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d
Certificate serial: 019CACB4D02943641AED08DDB9E5BFB5E5F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
Manifest number: 042C
Signing time: Mon 02 Mar 2026 04:00:56 +0000
Manifest this update: Mon 02 Mar 2026 04:00:56 +0000
Manifest next update: Tue 03 Mar 2026 04:00:56 +0000
Files and hashes: 1: KzL1NrpF1fIv1UZ-w1843U42opY.roa (hash: e/MBTifLcIfwIpz3DnQOZZoxAp3TFvcIxij/7Ilh7dM=)
2: xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl (hash: ntE99Kf7d/T9OOiyp5uwK+qz31+BSZUT1lnBUpOPdD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:d0:29:43:64:1a:ed:08:dd:b9:e5:bf:b5:e5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d
Validity
Not Before: Mar 2 04:00:56 2026 GMT
Not After : Mar 3 04:00:56 2026 GMT
Subject: CN=0be547698311b5318aa9867e9005d5ee4055e1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fe:78:19:1f:22:fe:a0:db:af:9a:38:33:bb:
90:22:56:0c:1e:0b:3f:ca:fe:bc:87:23:f2:5a:74:
46:09:11:f7:f8:a1:96:56:b8:2e:69:33:bb:63:2b:
14:a1:e2:84:bd:e7:2a:ea:b9:2c:50:88:f7:a3:f4:
06:61:ac:30:e4:91:12:6d:7c:54:85:a0:6c:d9:8e:
f0:a2:07:16:37:95:02:ea:40:7e:b9:e8:5c:59:69:
e0:81:7a:62:71:af:a9:a4:a8:c2:0d:8b:a0:d7:9c:
80:7d:b6:a7:93:eb:cb:46:22:8c:41:0d:74:3c:e2:
74:4c:2f:27:3e:31:1d:50:9e:03:68:cd:91:14:d7:
28:8b:d4:a9:88:bf:8c:0d:63:a6:5e:4a:9e:3a:0e:
0e:98:04:61:7b:48:97:f2:ba:f7:8b:bf:c5:af:4f:
37:5e:89:86:20:d1:f6:5f:60:e1:30:a4:bf:2f:27:
a7:ed:ab:72:b7:7a:f4:f3:35:49:70:75:99:33:cb:
59:52:43:3f:df:5c:5f:b9:6e:c5:3e:2b:44:d3:86:
4e:67:4d:96:b3:02:60:6b:f9:46:64:9d:36:55:d5:
4a:b5:d9:7d:7b:95:54:5b:af:62:52:20:87:f7:5a:
e9:81:46:fe:c2:59:24:f8:bf:17:d2:17:9f:de:65:
f1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E5:47:69:83:11:B5:31:8A:A9:86:7E:90:05:D5:EE:40:55:E1:A5
X509v3 Authority Key Identifier:
keyid:C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:33:7c:32:2c:c0:a3:38:f4:41:66:c4:96:7c:75:1e:ab:ab:
0c:0b:1f:f4:34:cc:e1:01:95:b2:24:52:75:7f:e5:90:c6:98:
c9:98:b1:05:62:a8:f4:44:2a:71:f1:4d:a3:75:1f:b9:d9:cc:
d1:87:f7:25:8d:56:b6:db:38:9a:3c:17:c0:dc:5a:13:27:3e:
45:44:f0:96:b0:d7:58:fb:d4:a5:76:6a:ba:e5:92:41:f8:a5:
6f:59:ff:dc:af:c7:23:e8:17:65:30:30:0a:69:5d:56:b5:a3:
4b:53:5c:5e:d1:c6:f0:3e:73:39:30:2f:16:f5:8e:59:92:45:
5a:ee:45:0d:1d:90:c5:78:03:d9:77:c2:63:89:92:bc:3c:0f:
03:43:82:de:ea:60:26:0f:5f:ec:9e:8e:1e:06:e3:da:f8:a1:
6b:24:6c:10:ac:e0:2d:3e:1a:ef:9d:29:85:f4:c9:6b:29:65:
a2:26:30:4b:ec:13:6e:f2:b9:d3:7f:51:7f:21:d0:d3:5b:09:
f1:65:19:70:38:ad:82:d8:7e:0a:45:f2:5e:d4:79:c7:99:85:
6d:b2:b1:70:74:d1:01:f9:4e:f9:41:ca:ac:82:83:11:2b:88:
10:0f:4d:18:67:9a:89:63:3b:dc:09:d5:98:c7:3a:0c:fb:de:
01:1c:8b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:04:07 2026 by rpki-client