Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
File: XatFagUdSpN4i-9PrA0HvcDJ8M8.mft (raw, json)
Hash identifier: PrW/E5ALn5KRArIJXjJ+dBUtBgcyiXKh9bytAhjUty4=
Subject key identifier: 2E:63:00:85:93:60:0B:AB:2E:9F:81:5E:0D:10:3A:8E:80:4B:DB:26
Authority key identifier: 5D:AB:45:6A:05:1D:4A:93:78:8B:EF:4F:AC:0D:07:BD:C0:C9:F0:CF
Certificate issuer: /CN=5dab456a051d4a93788bef4fac0d07bdc0c9f0cf
Certificate serial: 019CABD9B463539EB9D5748F0CA86431DE9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
Manifest number: 1850
Signing time: Mon 02 Mar 2026 00:01:37 +0000
Manifest this update: Mon 02 Mar 2026 00:01:37 +0000
Manifest next update: Tue 03 Mar 2026 00:01:37 +0000
Files and hashes: 1: CbUjr1UvlkF8n-aSwRMeoAKRr08.roa (hash: uLotTSOrlblRssB3pzAzK8VGcBOkdwWIKgpcVkQ5HL8=)
2: XatFagUdSpN4i-9PrA0HvcDJ8M8.crl (hash: dxjwyeIKMUBOQlI2H3m1C65fPpnHutR77fskBibZ0CA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:b4:63:53:9e:b9:d5:74:8f:0c:a8:64:31:de:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dab456a051d4a93788bef4fac0d07bdc0c9f0cf
Validity
Not Before: Mar 2 00:01:37 2026 GMT
Not After : Mar 3 00:01:37 2026 GMT
Subject: CN=2e63008593600bab2e9f815e0d103a8e804bdb26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1f:05:6e:d7:5f:f9:c6:7d:88:a3:1d:b3:da:
40:01:3e:6e:c7:0d:f7:36:28:77:91:23:5b:68:1a:
51:3e:4e:59:dc:b2:25:cd:f4:6b:e5:62:cd:5c:a3:
e8:a6:72:9f:13:d0:c6:9d:46:70:68:36:df:ab:a4:
41:69:d0:1b:18:22:33:2d:b6:79:df:24:11:0b:29:
9c:cb:4f:6b:6a:fe:40:35:5a:5f:d1:9f:89:03:81:
13:24:8d:3a:3c:a8:47:bf:58:e3:d4:20:d3:4d:21:
bb:9a:ff:e3:88:c7:b4:f0:46:4a:92:c6:f9:a1:1b:
1b:ec:72:79:c6:4f:c0:b8:1f:04:74:77:1b:03:94:
94:6d:b8:51:ee:d0:19:d3:51:b9:7e:fc:f4:21:02:
5f:ef:9b:6c:1a:4d:76:8f:89:a8:bc:91:17:b6:f2:
87:07:f1:3e:54:b9:87:8f:2b:67:ab:56:4c:04:6f:
b4:33:72:1d:f8:64:1e:ba:ce:ef:cf:94:ba:69:54:
32:35:7c:16:dc:d6:84:8f:04:60:25:83:7b:50:0f:
cf:85:7b:42:60:ef:18:bd:0c:7f:ec:3f:2f:32:88:
6a:86:de:48:fc:d4:0b:ba:71:f9:c1:98:9f:a7:46:
70:37:e0:8d:a7:f4:97:89:3f:2c:fe:2e:b6:4f:79:
7b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:63:00:85:93:60:0B:AB:2E:9F:81:5E:0D:10:3A:8E:80:4B:DB:26
X509v3 Authority Key Identifier:
keyid:5D:AB:45:6A:05:1D:4A:93:78:8B:EF:4F:AC:0D:07:BD:C0:C9:F0:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:13:5d:f4:28:4f:2c:8c:81:5f:bf:16:61:59:7e:c2:03:28:
04:6c:4c:f5:84:e8:1e:42:0d:c5:68:d1:0c:b2:1e:d8:c5:39:
b5:37:42:07:82:3d:f8:e7:f6:80:b9:32:fc:62:cf:11:d7:3b:
cd:86:3a:af:90:a7:47:e1:74:07:2a:16:9a:d9:0d:8c:c1:8f:
08:80:77:1b:b1:88:51:41:3c:84:54:4d:da:c5:f8:98:8d:0c:
88:ad:5b:81:4a:54:66:27:f9:05:2a:ef:7a:7b:af:83:65:ce:
be:62:4a:57:18:8b:0c:c6:d1:b0:2b:f4:91:f0:57:68:9b:72:
76:15:97:ba:48:8e:e5:90:5b:49:1e:28:00:bf:4b:41:48:48:
07:d4:9f:3a:0d:73:03:62:a0:1a:5b:c2:c6:93:de:6d:fd:3e:
92:14:8b:17:04:50:f3:31:fd:e8:f9:32:5f:6c:3d:5d:8e:47:
8d:8d:fb:6e:06:3c:cc:04:10:54:95:d7:2d:85:22:a8:da:6c:
ab:6e:1f:c0:6f:0a:b2:67:48:d3:fe:7b:b5:79:ec:6f:12:cb:
7c:96:56:8f:86:a9:d0:27:d0:58:3e:0c:4d:07:d9:16:56:17:
b0:64:32:d6:be:7f:98:92:39:ec:4b:b8:76:10:59:d1:d9:3f:
7c:26:75:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:52 2026 by rpki-client