Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
File: X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft (raw, json)
Hash identifier: miLwxbVIZyampQK2B2SLU9AeskJvaznQzWtMJ1tfkFU=
Subject key identifier: E1:29:D2:E7:F4:57:EE:35:0B:69:E6:D5:1F:57:CA:45:BD:48:07:E6
Authority key identifier: 5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
Certificate issuer: /CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Certificate serial: 019CABD926F804AC50FB71CF328422C8CC11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 00:01:00 +0000
Manifest this update: Mon 02 Mar 2026 00:01:00 +0000
Manifest next update: Tue 03 Mar 2026 00:01:00 +0000
Files and hashes: 1: X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl (hash: iss3BPaQiEm4sHGjLfgPtx/LoyuCnKj1bmP/LFKiF8k=)
2: YboTsZW5E_LquEoNeH4f-DKai2A.roa (hash: rVnU6oaQsX3x5ymp+Ryvp8mswyZTbG+O1Im+gcRa5NQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:26:f8:04:ac:50:fb:71:cf:32:84:22:c8:cc:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Validity
Not Before: Mar 2 00:01:00 2026 GMT
Not After : Mar 3 00:01:00 2026 GMT
Subject: CN=e129d2e7f457ee350b69e6d51f57ca45bd4807e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:35:2a:3c:5d:2b:98:42:ce:f9:f4:ae:e3:b1:
c2:32:9e:f4:d7:65:87:56:38:d3:08:d1:1a:af:13:
f3:4d:cd:ce:26:ed:ed:09:7f:a5:85:23:22:d3:92:
1d:3f:0f:16:37:13:1b:e6:2a:64:2a:97:d8:cc:25:
ca:32:34:b0:75:4f:75:30:0b:ca:80:ff:f5:e4:13:
d4:63:3f:d1:e1:11:84:5a:70:37:3b:56:40:a9:0f:
e0:74:aa:56:df:1b:8b:cc:a1:e2:d0:8c:b5:5c:3a:
6b:cd:14:e7:3e:18:a7:9f:46:da:c4:01:29:71:36:
7f:0f:20:c8:88:9b:66:c8:ab:e1:f3:33:a4:16:a9:
10:01:00:fa:7f:ea:25:41:0f:f2:bd:fe:59:a2:e9:
64:0f:42:e6:ca:2c:6f:aa:c3:77:be:ff:14:18:38:
fb:56:06:f0:3a:fa:52:9d:7c:f9:f4:92:ff:5d:ba:
4c:40:23:91:15:b0:57:37:55:fc:c5:07:00:6d:f4:
90:b9:55:c7:bc:2a:25:2f:94:89:b8:80:bb:dc:ae:
13:6a:9c:ad:83:bd:8a:36:45:39:d2:c8:8c:20:01:
7b:11:bf:cb:37:52:cd:1b:b5:3b:b1:dd:e0:ba:74:
8b:e8:0b:69:04:b4:c5:9f:56:61:a6:12:22:d7:d3:
96:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:29:D2:E7:F4:57:EE:35:0B:69:E6:D5:1F:57:CA:45:BD:48:07:E6
X509v3 Authority Key Identifier:
keyid:5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:8e:0e:ec:5a:78:45:19:cf:4c:fd:51:de:49:2d:59:cb:87:
f2:4c:f6:c1:45:64:c2:02:54:90:31:4e:cd:0f:0e:13:1e:6c:
b4:a5:07:b0:45:29:36:e5:9b:3d:87:23:67:0b:74:b0:59:fb:
2b:c0:d8:eb:2b:ef:01:96:f3:b5:eb:22:3d:f5:70:64:5a:51:
55:9a:aa:5a:50:0b:d9:40:41:b6:a9:65:9b:f5:66:94:d8:07:
00:25:80:3e:b3:d1:2c:08:67:bd:ce:06:c3:79:c0:db:6b:8c:
2e:44:2f:7c:24:21:66:ab:4f:c8:93:39:85:dc:23:ca:41:41:
6a:0e:fa:b7:9b:17:03:b5:b3:9e:0d:83:25:85:32:f1:19:37:
23:0f:56:ef:20:be:2f:50:46:c9:ad:23:3a:8f:15:ce:3a:f8:
08:a9:e0:16:76:ac:cb:08:85:09:10:63:bd:c1:d5:0a:ce:16:
a9:1b:b1:ef:3b:b8:54:4d:fd:30:0d:5c:39:24:15:06:64:c3:
83:14:2b:ea:ab:ca:52:13:ac:59:08:fb:d2:39:62:f0:71:1f:
2b:bb:83:07:a8:00:da:57:20:f5:f6:d5:4c:b3:21:e1:96:e1:
6f:e6:79:ea:fd:dd:92:ce:a4:d9:73:da:9b:46:92:50:0e:e7:
c1:0e:82:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:07:52 2026 by rpki-client