Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
File: x-2m5S-HeWCp4PvJPmg_5khKawQ.mft (raw, json)
Hash identifier: HAIXfpjMx/FSELzvUxsYakE0b8wyFku2CElHshembfA=
Subject key identifier: AB:E6:85:BB:A7:3E:3E:BD:B6:CD:B0:59:0E:C0:E2:DE:1D:76:1E:68
Authority key identifier: C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04
Certificate issuer: /CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04
Certificate serial: 019CAF112CD9DC0D411F430EEE88FD9045B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 15:01:03 +0000
Manifest this update: Mon 02 Mar 2026 15:01:03 +0000
Manifest next update: Tue 03 Mar 2026 15:01:03 +0000
Files and hashes: 1: XZNXCKIqVDgpPc7kS3zYiOP2yVE.roa (hash: rxN9jO9dfAmhC4tVQzEusEgOoOYY+A90wdSvN0MmV5g=)
2: x-2m5S-HeWCp4PvJPmg_5khKawQ.crl (hash: TF86mcTbWT8Qu+jFBt/CkWMHI+jmWBEENSFwEzl8MZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:11:2c:d9:dc:0d:41:1f:43:0e:ee:88:fd:90:45:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04
Validity
Not Before: Mar 2 15:01:03 2026 GMT
Not After : Mar 3 15:01:03 2026 GMT
Subject: CN=abe685bba73e3ebdb6cdb0590ec0e2de1d761e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cf:1d:05:92:38:bb:3a:a7:17:50:bb:2b:d0:
4b:f8:6c:cd:32:27:46:6a:00:07:b3:98:03:e8:a0:
95:b3:e7:60:ce:60:56:33:86:57:6f:2b:a6:b5:07:
13:e6:1d:a9:f2:3b:01:12:0f:fb:58:ca:a2:6d:44:
f1:1a:f2:d5:14:07:c7:73:45:cd:ac:b1:1e:50:c3:
0c:9d:e1:d6:6a:88:ac:04:07:5e:b0:d4:2e:f7:3a:
19:53:fc:c4:d9:67:5d:99:98:e4:2e:55:a4:08:c1:
03:5b:b8:ba:83:46:ba:a0:7b:46:47:a8:74:c3:3a:
b2:42:7b:0a:2c:59:13:4a:a0:a6:64:91:2d:ba:11:
e6:fb:29:37:30:18:10:db:64:b0:ec:76:c7:6c:ca:
de:ee:f3:80:e9:57:1c:4e:67:7b:61:b3:35:15:22:
f0:83:b9:92:db:38:8e:71:ba:bd:a8:b4:b8:53:89:
a9:92:11:af:fc:71:ca:0f:5d:94:66:28:b5:03:b9:
9f:cc:b7:05:4a:a8:88:7a:7c:ec:02:23:c0:3d:ec:
05:5a:67:db:84:9b:f5:95:3d:c6:4a:cb:d1:3a:40:
e7:66:57:14:44:fb:d1:50:c7:4d:e7:e1:5c:63:d4:
d2:56:b4:5f:f3:c7:eb:88:09:51:70:45:a2:1c:68:
cd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E6:85:BB:A7:3E:3E:BD:B6:CD:B0:59:0E:C0:E2:DE:1D:76:1E:68
X509v3 Authority Key Identifier:
keyid:C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:23:c8:3e:32:70:3c:ce:5e:8f:a2:11:7b:0a:89:70:fb:3d:
6e:52:20:9f:aa:c1:48:41:ff:ee:13:8a:00:4a:60:da:7e:bc:
e7:a2:34:1e:e5:01:52:f5:93:27:c6:7f:88:b1:e5:82:b2:67:
bc:30:5f:1b:68:6f:fb:3e:8f:84:ba:b1:78:a0:64:35:ce:16:
1d:00:23:ba:28:8b:7a:03:a8:31:c2:3a:87:4d:cb:ee:a2:83:
7d:44:8b:21:01:0d:ec:43:b0:af:af:ae:a2:f5:b1:80:d0:c7:
4e:cb:1b:c8:28:a5:24:e4:1a:70:6e:76:a5:29:5f:b0:b7:4e:
96:d7:32:06:c3:8c:e8:ff:bf:25:c2:0b:2c:ed:df:8d:a6:26:
de:e5:a7:81:65:46:e0:ce:c8:b5:56:62:98:86:79:6f:41:a0:
9e:5e:1b:80:af:7b:bd:68:05:5d:39:5a:ab:ba:e9:b6:78:c5:
c2:07:70:8a:55:41:a0:73:be:da:67:02:b2:61:6f:2e:f5:bc:
41:ce:8b:6e:75:a4:cf:07:7f:19:1d:8a:17:a6:e5:87:58:ad:
d0:ab:bf:95:19:cc:38:1e:81:d2:a3:fc:5b:8b:28:e5:7e:11:
eb:29:ca:a8:c0:84:cc:7d:fc:62:02:1e:a6:1a:87:ff:2f:35:
b9:7c:4d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:57:11 2026 by rpki-client