Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
File: xt_rrIt1RREi-RT8oCTuH1QXyrs.mft (raw, json)
Hash identifier: c2TEAnZB7IVqHiuPLjgeMcjM5Jn+RJZDERoBzQdxw6U=
Subject key identifier: D2:6D:BD:E5:87:C5:AA:74:94:70:40:E7:DD:73:06:E3:04:45:7A:EE
Authority key identifier: C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
Certificate issuer: /CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Certificate serial: 019CA9B395782FEFA285E99915F7D976D063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 14:00:44 +0000
Manifest this update: Sun 01 Mar 2026 14:00:44 +0000
Manifest next update: Mon 02 Mar 2026 14:00:44 +0000
Files and hashes: 1: LXxDQYBI8a2bgUeaO6Um5RWeWus.roa (hash: eyN2GAZCoXjAEdKeBKmxr2YBtVYHGsGtrSqCUIPElRo=)
2: xt_rrIt1RREi-RT8oCTuH1QXyrs.crl (hash: XtBz5UcvGPzj5CpyEHj74sVIcOVctTfGdxI6znbEcmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:95:78:2f:ef:a2:85:e9:99:15:f7:d9:76:d0:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Validity
Not Before: Mar 1 14:00:44 2026 GMT
Not After : Mar 2 14:00:44 2026 GMT
Subject: CN=d26dbde587c5aa74947040e7dd7306e304457aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a8:6b:b1:a3:d6:87:87:f2:77:c5:b3:92:4a:
de:4f:27:a3:5a:64:1a:f8:c0:93:bf:95:e3:9a:d8:
8b:21:fb:3b:65:7f:fc:48:1b:87:fa:35:95:fa:03:
09:3e:c0:ac:b8:a6:c1:20:02:28:a0:90:bb:61:c3:
ba:ea:2b:d6:90:28:41:b2:9f:e3:f0:a2:be:8d:0a:
ef:3c:e2:59:a3:fa:cf:ec:23:47:4c:e1:47:32:d8:
b4:f8:ab:bf:96:2f:19:cc:95:45:49:52:ee:3e:a2:
bb:ff:02:14:bd:6b:a0:f7:f6:10:12:29:f8:6f:0b:
de:8d:12:79:16:01:6d:0c:58:54:00:c7:b0:c6:d4:
e6:45:05:e8:0e:48:97:5f:0a:bc:a2:cd:29:c9:94:
0e:fa:07:97:43:36:2d:be:f5:e1:16:5e:2c:fa:e9:
f4:dd:32:78:ce:b5:9c:ea:06:8d:40:ac:0d:e6:b6:
a7:d3:9d:fa:bb:02:b2:10:05:4a:ec:61:c5:80:ab:
11:45:3f:a0:59:2f:eb:8f:b6:b8:5c:1f:6d:87:9e:
09:bf:a3:cf:f2:34:e8:b6:5e:ea:f1:70:f6:23:03:
71:c3:41:d8:6d:2c:19:29:96:43:c8:75:e7:ef:9f:
7d:16:1c:8b:cf:94:f9:a5:ce:03:fe:d3:70:9c:51:
02:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6D:BD:E5:87:C5:AA:74:94:70:40:E7:DD:73:06:E3:04:45:7A:EE
X509v3 Authority Key Identifier:
keyid:C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:26:22:c8:6c:18:2a:02:ea:6e:1f:36:16:08:58:88:9a:37:
78:68:af:52:de:0c:33:53:23:d5:94:37:79:e6:17:4b:77:e9:
0c:29:96:cd:5b:7c:ba:d6:54:79:bf:27:b9:04:07:f1:a9:11:
8c:2d:da:22:77:a5:62:0f:b5:c1:f6:16:fe:15:ab:02:c2:7a:
f2:3e:93:8e:81:a5:74:68:02:1e:ac:10:20:24:8d:9e:3e:69:
a6:1f:35:36:35:07:3d:40:29:e8:eb:ee:66:e8:bc:07:b6:53:
dd:c0:bd:b6:84:92:31:54:48:e4:18:94:3b:48:23:09:61:80:
0b:e0:79:11:7a:4e:79:5c:0c:fe:20:5b:09:af:4b:7f:27:6f:
d6:50:e3:51:22:f7:e8:c7:d9:14:d4:dd:44:3b:91:a5:37:f7:
7d:86:23:92:02:39:e1:7d:68:d0:77:c0:af:5b:04:c2:f4:22:
0b:02:82:3b:4f:0d:8d:c2:80:2c:58:73:9f:74:e3:b3:a3:79:
8d:26:59:2a:0d:78:55:61:21:bd:ad:e7:41:dc:24:f4:7e:9e:
76:6c:73:66:5e:d0:e6:73:69:78:50:95:45:b1:41:3a:b2:21:
14:a5:db:68:99:52:ce:05:d0:72:72:75:d4:97:b6:f0:c1:3c:
7e:5d:f0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:46:20 2026 by rpki-client