Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
File: xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft (raw, json)
Hash identifier: 1n6LLuDspzcWKimpv4gQHTNTAciiG6+Ke+A4JEc6qzg=
Subject key identifier: 42:4B:3C:E4:25:B9:82:61:DF:9B:AC:05:CD:9B:19:0B:EC:67:40:68
Authority key identifier: C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7
Certificate issuer: /CN=c51674fee5556728175efb56eaa8b99f3815afa7
Certificate serial: 019CAD2286D825E2E531A8537E0FD204ED3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
Manifest number: 1649
Signing time: Mon 02 Mar 2026 06:00:46 +0000
Manifest this update: Mon 02 Mar 2026 06:00:46 +0000
Manifest next update: Tue 03 Mar 2026 06:00:46 +0000
Files and hashes: 1: 5VgBPMnvg-Y4r70mw9zcqUHf-ms.roa (hash: P3U3l0akrscgsoVcKLjR90FDWEx4VR/+ukAn/96yuzo=)
2: xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl (hash: QVKSYmtYUoeLn9KzQAewrlLA1qBrNXpzYoQmKkU599E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:86:d8:25:e2:e5:31:a8:53:7e:0f:d2:04:ed:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c51674fee5556728175efb56eaa8b99f3815afa7
Validity
Not Before: Mar 2 06:00:46 2026 GMT
Not After : Mar 3 06:00:46 2026 GMT
Subject: CN=424b3ce425b98261df9bac05cd9b190bec674068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:77:fb:4a:b2:b6:af:f9:04:22:a5:41:c4:58:
8f:d4:57:c2:32:c5:b8:32:80:63:9e:94:7f:70:91:
d8:3e:da:c8:2f:56:cc:58:d8:0b:75:cb:76:ea:22:
7c:7f:f5:41:1b:8a:ed:88:09:59:06:51:e8:04:51:
ef:31:85:9d:77:3a:16:d1:1b:83:e8:2e:58:da:6c:
67:56:8b:db:19:08:7e:9b:36:4e:cc:23:3c:62:a9:
74:ba:73:f6:de:e7:50:dc:1c:b1:50:ec:62:16:0b:
3d:99:8a:f2:5a:71:8c:bd:d8:c9:c6:90:4f:3d:9f:
85:13:2d:76:e4:87:38:6b:37:7a:d2:57:57:30:79:
ea:9d:c5:cb:e8:34:c4:4c:97:a0:73:12:a2:7f:8e:
69:1d:c9:76:1e:2c:8e:94:2e:84:bd:04:87:78:7a:
5a:7e:e1:ab:f8:c0:18:31:59:3b:6d:1b:11:c0:a8:
3a:47:b5:89:55:43:21:9a:65:8d:94:43:43:8c:50:
08:29:ce:41:4f:3e:f6:94:c5:2d:c1:da:c4:5e:cf:
cd:ba:2e:1b:24:35:24:51:a1:37:d9:24:51:29:6e:
b8:73:ca:92:59:a4:44:56:de:e0:1f:01:85:5d:4e:
0f:89:22:dd:75:c5:11:87:98:a9:11:22:78:76:d2:
e9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4B:3C:E4:25:B9:82:61:DF:9B:AC:05:CD:9B:19:0B:EC:67:40:68
X509v3 Authority Key Identifier:
keyid:C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:46:5b:6c:98:d5:91:a0:96:e3:f5:7c:44:af:d6:02:a4:b8:
3b:81:53:53:dd:4b:2c:77:de:4a:06:e3:59:09:15:9e:db:e5:
ef:61:57:c8:53:76:e0:6d:69:63:62:7f:c3:5d:f0:ab:6c:3b:
6d:60:30:7d:ec:14:4f:37:79:d3:37:7d:6c:88:3a:45:e4:bd:
63:4c:a8:cd:61:7b:9e:74:c6:21:2e:24:a1:db:82:70:08:a2:
b2:73:8d:af:44:2b:da:d1:db:ee:07:d2:30:e7:2b:79:92:46:
ab:e0:02:9e:21:5a:99:30:f2:86:89:45:48:0f:98:04:e7:71:
8c:b1:62:0b:4a:81:bb:2b:f7:3b:f3:e8:c7:e0:25:22:03:be:
2f:e5:52:d7:59:06:b8:34:6c:1b:13:a9:ad:f7:59:9b:fc:aa:
fe:94:74:15:79:e2:05:89:3a:51:20:9a:d3:e0:70:a5:95:b6:
77:1f:cb:d0:06:c7:da:58:d4:42:dc:ab:1e:0f:de:7d:b7:63:
8e:3a:2a:d6:02:45:0e:e1:95:be:41:68:c0:08:90:97:c9:0f:
08:74:ea:5a:65:d4:72:65:af:00:6a:1b:4b:cc:f3:7b:32:b8:
8b:cf:51:4b:61:a2:94:bb:85:6e:48:26:c4:05:68:98:dd:b4:
08:d5:e2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:38:17 2026 by rpki-client