Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
File: xWYvmAINpON9UO07swICd08pLXo.mft (raw, json)
Hash identifier: NupNf3l6VemqtAje3+xHq6feT+46d9whOPfYMsFtRqw=
Subject key identifier: CD:E6:65:7C:8C:A8:9D:C0:23:9D:AC:A8:26:C4:77:2A:0A:C0:BD:F4
Authority key identifier: C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A
Certificate issuer: /CN=c5662f98020da4e37d50ed3bb30202774f292d7a
Certificate serial: 019CAAC61A6AB4576B806BF04F7F0AE41EC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
Manifest number: 0498
Signing time: Sun 01 Mar 2026 19:00:35 +0000
Manifest this update: Sun 01 Mar 2026 19:00:35 +0000
Manifest next update: Mon 02 Mar 2026 19:00:35 +0000
Files and hashes: 1: nzDQVgvmn8MPp9hP_YWHgwOX3jI.roa (hash: oRVvK6JSGXQQlXi5SI+dzEHrPaQ2vh5FEq0UvDnb9/g=)
2: xWYvmAINpON9UO07swICd08pLXo.crl (hash: T9Jcavxu8PmEeJO+AVlgbhDkQMQUX8jzegfeN6VUl3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:1a:6a:b4:57:6b:80:6b:f0:4f:7f:0a:e4:1e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5662f98020da4e37d50ed3bb30202774f292d7a
Validity
Not Before: Mar 1 19:00:35 2026 GMT
Not After : Mar 2 19:00:35 2026 GMT
Subject: CN=cde6657c8ca89dc0239daca826c4772a0ac0bdf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:71:e9:5d:90:fd:82:7a:fa:9c:88:f0:68:63:
6b:96:71:83:fd:21:89:06:de:a3:c8:ae:6e:76:e5:
95:77:c9:89:0e:24:17:4d:7d:8a:c4:4c:e4:3c:e9:
58:c9:5c:c4:49:c8:7a:22:6b:f6:54:7b:12:69:85:
2c:53:14:4c:33:71:4f:df:8d:b4:ad:47:77:de:d5:
87:b9:7c:05:45:11:e9:72:cf:4b:0c:95:9b:80:31:
66:7e:91:c8:cc:d5:48:7a:35:8d:e7:ba:5e:da:47:
f7:31:0c:90:b6:73:98:73:38:40:a3:78:75:be:8e:
5d:b0:cc:72:29:19:bd:27:15:c8:dc:b6:4d:77:23:
51:8b:d5:16:9e:15:0b:73:07:cb:77:6e:36:0c:5e:
f2:55:68:ef:8c:4c:00:91:20:a4:0f:2d:65:84:e7:
73:99:7a:9b:cc:cd:af:81:04:2b:0d:ee:fd:51:86:
6a:52:c4:39:3a:6b:46:c7:24:70:f1:97:45:21:fc:
65:7d:9f:d3:4d:dd:cb:2d:58:2c:64:df:9b:d2:f8:
31:1c:3f:fb:9a:7d:0a:b4:bb:41:1f:23:49:92:bd:
30:ef:36:bf:0c:51:7d:39:92:35:1b:34:e2:d1:d0:
e3:ac:58:d4:65:1d:83:d1:f5:74:6e:ff:0b:f0:34:
2c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E6:65:7C:8C:A8:9D:C0:23:9D:AC:A8:26:C4:77:2A:0A:C0:BD:F4
X509v3 Authority Key Identifier:
keyid:C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b7:cf:68:40:bd:d0:2d:29:51:d4:84:59:e0:29:11:29:dd:
76:db:30:8d:4b:f6:0d:c8:5f:6f:4e:06:b7:b7:02:15:00:be:
f9:47:f8:88:97:e7:16:04:d6:bf:87:5d:82:a8:bd:60:be:d4:
bc:13:aa:fe:5c:07:df:97:52:42:96:90:c9:08:6c:a2:e7:9e:
3d:b3:8d:aa:e4:8e:52:89:f2:36:53:9e:0b:69:95:07:57:0f:
3f:12:2d:a6:e5:84:36:69:cf:cb:e9:74:6e:23:2d:ef:31:d0:
52:f1:fa:a8:14:1e:5f:4d:68:d8:fb:17:d7:34:7b:7b:9c:17:
2a:04:d3:e8:cc:97:22:f7:ba:a4:3c:bf:17:03:e0:4d:2a:db:
5f:30:43:cd:ad:ee:7b:40:1b:e8:64:7a:fe:4a:71:77:ab:a3:
82:22:35:79:25:75:6a:47:17:06:01:d6:34:75:f5:8b:fb:48:
98:48:c4:1a:0c:a6:12:e9:37:03:46:28:54:93:b8:25:5b:7c:
0e:dc:bc:d9:06:51:10:41:b5:e9:28:c8:80:02:a4:10:4b:d1:
12:c9:09:d3:1f:68:e1:47:d2:a3:45:b9:86:e0:3f:51:51:4b:
e3:2b:60:61:d1:5b:ea:ed:a5:c8:86:ea:bc:8d:18:22:9f:41:
c3:cf:af:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:38:50 2026 by rpki-client