Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
File: xIQvgmL-vSPQE9QKMU2I4lSypUI.mft (raw, json)
Hash identifier: EMVgm7WozTKvKJsMn33oYVy/8tQaecbTJ6nmjV0SXNs=
Subject key identifier: 17:FF:39:0C:7A:CB:48:12:A4:8A:22:B3:2D:1F:25:09:30:B8:A0:11
Authority key identifier: C4:84:2F:82:62:FE:BD:23:D0:13:D4:0A:31:4D:88:E2:54:B2:A5:42
Certificate issuer: /CN=c4842f8262febd23d013d40a314d88e254b2a542
Certificate serial: 019CAAC647C18765873B5F5CB708EF592477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
Manifest number: 0793
Signing time: Sun 01 Mar 2026 19:00:47 +0000
Manifest this update: Sun 01 Mar 2026 19:00:47 +0000
Manifest next update: Mon 02 Mar 2026 19:00:47 +0000
Files and hashes: 1: kOwA2VMp0-d5NZ8ZjSEsa9A6-fM.roa (hash: ZSmsV9FGmLqKWen++kiAr3q47+GvBQzYyI0Yg4ZwozI=)
2: xIQvgmL-vSPQE9QKMU2I4lSypUI.crl (hash: x8NqOk8ck3OGYUnF0AQeIP1EOSeOS+jdOKXOWP9zung=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:47:c1:87:65:87:3b:5f:5c:b7:08:ef:59:24:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4842f8262febd23d013d40a314d88e254b2a542
Validity
Not Before: Mar 1 19:00:47 2026 GMT
Not After : Mar 2 19:00:47 2026 GMT
Subject: CN=17ff390c7acb4812a48a22b32d1f250930b8a011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:07:c9:10:62:d1:0e:2e:4f:e0:24:85:6d:42:
9d:60:82:b9:f6:03:03:d2:c1:43:f6:e8:7c:9d:15:
19:d7:fc:54:c6:18:9c:b7:38:7f:99:92:18:f8:03:
73:d7:a5:8d:3e:55:28:12:0b:a4:43:24:10:3b:df:
93:29:c7:c7:e3:f7:bc:3d:39:c8:91:44:de:ac:76:
77:1e:86:2d:c3:00:a6:d8:91:ac:81:0b:c8:eb:33:
24:94:48:11:43:b8:9d:24:73:ba:7b:cd:02:8c:ed:
e6:c1:c6:80:85:7d:77:0e:ee:c3:57:8e:92:e5:db:
6f:60:bb:87:15:f9:e5:30:4e:b2:45:75:bb:dd:11:
e0:47:e4:e8:1f:70:e8:8a:c5:b8:76:28:69:27:3a:
c0:10:7a:e5:ea:7b:08:d1:59:28:d3:64:07:13:fd:
cf:35:d4:91:3c:76:00:bb:b6:97:4b:9e:8f:6b:42:
3a:a5:c0:c6:3c:78:2e:2c:3d:80:2a:e2:02:9c:4c:
0d:21:c2:5d:40:65:54:f4:76:2b:cd:b5:44:9b:b3:
56:35:34:ef:55:97:76:22:8a:08:2f:12:47:99:fe:
a2:9e:22:bb:98:39:ea:52:28:96:f7:31:11:e6:f9:
72:67:e1:72:33:dc:df:42:d6:5b:95:11:a1:d5:32:
18:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FF:39:0C:7A:CB:48:12:A4:8A:22:B3:2D:1F:25:09:30:B8:A0:11
X509v3 Authority Key Identifier:
keyid:C4:84:2F:82:62:FE:BD:23:D0:13:D4:0A:31:4D:88:E2:54:B2:A5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:4b:c3:bb:1f:d6:90:85:2b:b3:ea:01:c0:40:92:fe:e7:c8:
71:50:f1:2d:55:f2:3f:1e:ef:44:42:3e:43:16:6d:4f:a0:f9:
30:b1:e0:7c:2c:1f:eb:8b:a9:f9:54:8c:b4:f2:51:4f:da:1e:
38:e3:51:83:89:f1:82:46:6b:e9:96:9f:9b:f6:14:c8:1b:43:
ab:73:d4:34:06:63:c8:77:e2:21:28:45:a5:95:b9:da:cc:bb:
dd:3f:2e:cc:c5:71:b4:ea:c9:c4:09:d4:b7:47:bf:ff:6f:e4:
45:ad:a8:5b:3e:d8:b1:06:f4:f4:60:83:fa:04:c4:b6:38:3d:
3b:f5:cc:93:b1:53:8a:9b:14:65:d5:7a:2c:98:29:0d:1f:67:
c6:93:4a:6c:63:ed:35:af:d6:23:1b:17:c4:cc:d9:db:19:f0:
f0:67:37:04:41:d2:43:cf:72:46:fa:91:48:95:9a:3f:4b:cd:
c3:a9:42:61:4f:8c:05:d9:83:81:16:3c:19:bc:0c:e6:f3:1d:
bc:60:d8:4d:4f:c3:a4:21:b3:3c:00:a8:41:e2:cc:20:70:70:
cb:31:3e:dc:8f:78:55:42:0f:4a:08:ff:18:df:e6:13:9e:7f:
b3:43:86:54:9e:d4:7c:9f:e1:8f:26:6b:51:33:83:03:29:b5:
7e:cc:f8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:28:47 2026 by rpki-client