Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
File: xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft (raw, json)
Hash identifier: e2LGWEhchyUsvL8bG/UP0yQUMssHVBMdczrOJvadm4w=
Subject key identifier: 8E:10:A8:68:B8:22:0A:FA:58:EC:77:CC:43:0B:F2:E4:55:14:46:49
Authority key identifier: C5:3F:0A:DA:EA:FB:40:C7:72:45:9E:93:93:54:F6:BE:45:3F:15:8F
Certificate issuer: /CN=c53f0adaeafb40c772459e939354f6be453f158f
Certificate serial: 019CAA2133AD7F2A7C839BE58CCD201FE9C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
Manifest number: 0459
Signing time: Sun 01 Mar 2026 16:00:28 +0000
Manifest this update: Sun 01 Mar 2026 16:00:28 +0000
Manifest next update: Mon 02 Mar 2026 16:00:28 +0000
Files and hashes: 1: je_dZ3uZwgn_oNlxsf8-FTUq220.roa (hash: ypEWzWUb+UjYyAsZX+8LRu9EB7C2RkmFTCbcPYB408Y=)
2: x33v7rF3QBlSIzExnIekzpn3DrI.roa (hash: g/UYMvAE3ypCM+rkZ1W9VYDV5Sdkmxjt7baXQZzeNL8=)
3: xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl (hash: G8jJORaEbn1bNa0XBZkBRldDJBS1XxvUiYqfR1DV1m4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:33:ad:7f:2a:7c:83:9b:e5:8c:cd:20:1f:e9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53f0adaeafb40c772459e939354f6be453f158f
Validity
Not Before: Mar 1 16:00:28 2026 GMT
Not After : Mar 2 16:00:28 2026 GMT
Subject: CN=8e10a868b8220afa58ec77cc430bf2e455144649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9c:ee:7a:25:cd:cd:22:5e:b0:f1:da:cf:2b:
63:9f:d0:41:a8:3d:0c:44:a3:ac:b5:da:75:41:2d:
da:3d:ad:0d:0d:85:c6:ef:7e:a5:0d:7d:36:a6:9f:
1a:52:a3:15:dd:39:b3:4a:3d:a6:da:f1:c0:f3:1c:
3b:38:24:c1:8c:4b:9e:22:b7:eb:ee:4e:5c:45:1b:
82:65:6f:a7:6d:bc:e2:88:cc:3d:02:8b:f9:b0:c5:
14:1a:3e:69:b5:e1:70:31:33:a9:1c:9b:be:b4:c9:
2f:99:4d:79:1f:46:9b:7c:cf:8c:da:75:56:4a:e4:
7f:9e:b8:9f:4b:6c:a9:c9:80:d9:45:86:98:f0:c7:
70:2d:70:a1:df:fe:82:ce:b2:7a:43:bb:a9:05:0d:
16:39:e9:02:78:48:cf:c7:ae:18:d4:e8:35:f2:50:
3e:64:9d:42:40:46:22:d1:6e:86:ac:d4:61:9e:80:
32:b4:6e:94:26:dd:c9:dc:a6:4c:40:5a:bf:48:8e:
aa:be:83:29:89:e2:78:3c:fc:2b:10:3c:f5:bd:ec:
97:5a:ee:d4:22:4a:88:51:56:40:91:88:90:48:19:
e8:3c:f0:e7:22:49:be:6d:5c:2b:46:9f:c9:ae:02:
d2:e6:26:3e:d7:ff:75:9e:99:67:15:61:d7:5d:7c:
98:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:10:A8:68:B8:22:0A:FA:58:EC:77:CC:43:0B:F2:E4:55:14:46:49
X509v3 Authority Key Identifier:
keyid:C5:3F:0A:DA:EA:FB:40:C7:72:45:9E:93:93:54:F6:BE:45:3F:15:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a8:a6:75:44:43:26:c4:bf:ba:a3:3c:5f:66:7c:56:6c:33:
90:01:8e:c1:a4:60:23:7d:3b:55:c3:03:d4:fb:2a:48:f2:8c:
27:25:3a:04:f2:0b:57:5b:f2:77:19:80:28:e1:60:cb:dc:67:
b8:b3:00:e1:1a:ed:a5:d2:bd:56:43:fc:80:5f:ce:13:d2:02:
a8:31:0a:f6:4a:24:d1:f6:91:aa:a7:f7:c1:f3:5f:22:10:86:
ce:e7:0c:89:d7:57:20:ca:67:ca:53:51:07:3b:18:96:42:b9:
5f:42:d9:d4:a3:d1:50:b7:ec:98:7f:4a:18:ee:73:1b:33:3d:
d9:cd:a2:27:8d:2d:4b:03:bf:93:ed:9a:84:62:83:1b:6d:b1:
c5:8c:c2:78:d7:a6:eb:06:87:7d:bf:b1:83:d7:6b:71:ea:32:
55:49:cd:f3:43:45:63:c2:80:aa:78:7b:1f:1d:ff:14:4e:49:
58:e5:62:6c:9f:48:ff:cf:51:50:3d:82:20:84:2d:ab:5f:86:
82:d8:c8:76:e0:ae:a4:59:41:83:78:3e:a3:76:e3:f5:25:a4:
a5:fd:5c:cc:e9:16:44:b1:fd:27:22:00:57:45:63:82:a5:a8:
81:15:27:4f:a0:fb:49:e4:2e:a0:3e:63:cb:9b:5b:cd:ac:a0:
ef:72:9f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:56:46 2026 by rpki-client