Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
File: X1mAEy0ZPicO0e_grShJ_oqw12w.mft (raw, json)
Hash identifier: FHzYEy2y/ZusjDdN53iK15gjyNZ8WMXhO0E7Poww6Jo=
Subject key identifier: 78:90:B7:1E:42:17:DB:D3:C0:DF:E3:1D:6A:29:07:61:B1:F9:8B:94
Authority key identifier: 5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
Certificate issuer: /CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Certificate serial: 019CABD9428B61C7B82B4DE81DD42464CB43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
Manifest number: 184D
Signing time: Mon 02 Mar 2026 00:01:08 +0000
Manifest this update: Mon 02 Mar 2026 00:01:08 +0000
Manifest next update: Tue 03 Mar 2026 00:01:08 +0000
Files and hashes: 1: 6-Ew-si9J0hf6ZarrCVeQjfqjE4.roa (hash: ljHxNRtveUXCickR/eyPdSx4OKRRH+YbhLZnTAcXkXg=)
2: I2tNxhGFF35MT6ATAQ34a1mldMA.roa (hash: aCwLuTKx+lT5TRi4XqsraXtHCM8YuZl8sxF9wyX0Vvo=)
3: JCTQgcUELCWna8Z80DBMEn0zGk0.roa (hash: aQm1A8aMpcGmR9Y0OhWPfstPmLBs4VFn6LiSckCGnCs=)
4: X1mAEy0ZPicO0e_grShJ_oqw12w.crl (hash: lH8PvtPVxHhyDoEknh+3F+ONbu+NqWYQEDMkZ7KCWrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:42:8b:61:c7:b8:2b:4d:e8:1d:d4:24:64:cb:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Validity
Not Before: Mar 2 00:01:08 2026 GMT
Not After : Mar 3 00:01:08 2026 GMT
Subject: CN=7890b71e4217dbd3c0dfe31d6a290761b1f98b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a3:e1:cc:90:1d:cb:8d:2b:d6:4c:c7:a4:e4:
6f:85:f1:a8:2f:ec:58:f5:7b:72:39:f6:ac:7a:73:
4c:ee:30:a8:ad:a8:51:7e:95:62:5d:31:25:5e:cc:
31:6d:31:ff:78:ca:50:15:01:9d:0a:a4:2e:32:ee:
5d:6b:d3:95:9c:fd:5f:4e:30:13:df:de:f0:d1:dd:
4d:6e:2a:d3:41:79:e0:82:ac:d7:90:2a:07:30:5b:
6d:71:6a:87:60:06:c6:5b:b4:1a:ea:00:c8:89:c2:
57:32:39:89:0b:f4:7c:98:1e:80:ed:61:f4:f7:86:
15:04:1d:39:b7:00:cc:18:88:de:8d:19:91:64:3c:
85:1d:45:b8:de:74:d1:ef:b7:d7:69:7b:a1:6f:4a:
ed:db:25:94:49:bc:46:cf:8e:8a:03:c6:5a:84:c2:
1c:39:dd:2b:8c:16:76:3e:71:19:e5:b6:33:f7:4d:
02:5a:2f:7f:64:73:06:0b:f8:cc:e5:90:49:1d:a8:
0d:20:fb:fc:1f:b0:05:dd:f9:e0:18:62:97:91:69:
8c:b4:21:5d:7f:b3:ea:9e:0d:4d:d2:21:f2:9b:d1:
23:4d:77:31:46:e0:23:42:3b:73:9e:08:97:18:bd:
29:8f:5e:82:dc:17:6f:af:c0:70:ee:dc:9e:ba:54:
23:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:90:B7:1E:42:17:DB:D3:C0:DF:E3:1D:6A:29:07:61:B1:F9:8B:94
X509v3 Authority Key Identifier:
keyid:5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:77:b1:da:76:59:5c:86:2d:b6:c9:b0:14:85:cb:2f:0f:12:
d2:4b:5b:90:a4:72:b1:db:d7:26:d8:8d:89:8d:44:67:0e:37:
cc:db:d5:08:cf:9c:e2:85:11:b8:d9:d7:53:fb:f8:94:94:7b:
69:c8:4a:51:b5:c7:4a:58:c3:e4:d5:cf:a9:a7:49:10:15:d5:
10:5c:c0:d6:2a:42:17:a3:93:a1:a0:0f:5b:bd:e6:c3:98:41:
ae:d7:b9:27:58:c8:06:5e:0f:c3:af:c4:f8:dd:ba:31:56:83:
2b:38:77:01:2f:eb:cf:72:57:79:54:34:1a:64:e1:30:b1:44:
40:4c:ba:53:d7:88:42:ee:a4:18:8b:1d:d9:77:8a:7f:a4:38:
76:92:03:1b:1f:e9:08:22:2b:67:4f:2b:ae:98:a8:ac:df:f0:
a8:6e:87:32:04:71:b5:5f:da:2a:87:41:ed:98:e8:a3:17:ea:
bb:48:21:02:b7:16:d9:db:e7:aa:a7:69:b2:ea:ee:d7:b2:b7:
2c:49:b9:35:20:a1:7b:4e:75:66:16:24:e9:1a:64:7a:d0:e0:
71:cb:1c:84:70:36:71:f0:8b:4b:8c:95:9d:3b:5a:d1:15:9f:
9d:3a:b2:77:d3:f8:2c:c4:48:20:df:eb:d2:ea:2a:20:09:75:
8a:b8:3e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:17:46 2026 by rpki-client