Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
File: xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft (raw, json)
Hash identifier: NvG7gG9kIjxIKT6Vd2UTOUkzPTFzDBjhs6YGwzYkuF0=
Subject key identifier: E0:13:25:59:1A:76:99:02:4C:C1:3F:AB:C0:62:AA:D8:86:0E:2A:08
Authority key identifier: C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
Certificate issuer: /CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40
Certificate serial: 019CAD5A40441AC3D00F9F5F13B44932FEB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 07:01:38 +0000
Manifest this update: Mon 02 Mar 2026 07:01:38 +0000
Manifest next update: Tue 03 Mar 2026 07:01:38 +0000
Files and hashes: 1: Z4BDlr57O_FweazPHma0rDQN-Eg.roa (hash: RRUvm/U5FkAyaYrRTEjgZo8457PWupRX0eiUbSuUq0U=)
2: xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl (hash: +qVHiaDfM8bGVLRtE56oIDqBLZXVLOpXsJs4LeINXSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:40:44:1a:c3:d0:0f:9f:5f:13:b4:49:32:fe:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40
Validity
Not Before: Mar 2 07:01:38 2026 GMT
Not After : Mar 3 07:01:38 2026 GMT
Subject: CN=e01325591a7699024cc13fabc062aad8860e2a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:59:c4:82:0c:88:b4:26:66:e8:65:d1:3e:bb:
d4:be:01:de:fe:a9:67:b3:fe:93:9c:2a:6a:96:2a:
cd:cf:7a:af:c7:62:40:82:e0:a4:af:66:c8:05:77:
2e:57:57:d6:c1:bf:23:62:c3:29:48:d3:e8:0d:93:
55:e6:6d:42:3f:2c:68:47:e4:eb:52:41:5d:2e:63:
c8:f0:03:cb:1b:a5:97:63:20:ad:af:df:1d:a7:6f:
b9:12:b5:44:b6:b1:a7:74:ec:fe:a6:3b:94:d8:e6:
6f:e6:93:e7:3d:cd:8e:bf:64:a1:66:4b:10:b7:c9:
d1:8c:d3:76:c0:7d:5f:b3:f7:f9:e4:f5:fa:6f:84:
e6:63:d7:84:0c:ed:2a:b9:00:e9:73:b7:34:c8:d0:
39:24:a1:bc:e3:78:63:64:0c:1c:d2:cd:dd:16:f2:
db:5c:f3:df:cf:45:22:89:da:a3:af:df:36:45:46:
ae:af:69:85:b4:57:4c:4e:da:4a:5d:8f:0b:b2:d2:
b2:b1:df:ef:e8:0f:5e:6a:5a:0f:db:8b:fc:1f:ba:
dd:46:62:bf:b0:61:58:16:a8:e1:37:92:62:c6:ff:
63:99:44:c2:7a:e3:4e:fc:43:01:3c:93:96:e8:10:
47:49:e8:f1:93:0c:04:0f:2b:fc:7e:5b:9a:fe:c3:
9c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:13:25:59:1A:76:99:02:4C:C1:3F:AB:C0:62:AA:D8:86:0E:2A:08
X509v3 Authority Key Identifier:
keyid:C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e9:d4:ce:e0:94:14:a7:fc:45:34:92:b9:15:d4:07:14:8b:
90:f5:66:2b:8d:eb:01:32:c2:5a:30:17:70:16:5d:cb:1e:8f:
13:a7:3f:0b:4b:d0:c8:9a:72:98:5a:a0:c2:cf:ac:aa:93:4c:
e7:f6:e4:6d:13:d7:d5:ce:9e:f0:58:f3:62:ff:8c:f7:d7:f3:
e2:51:e7:62:c4:d1:7e:9c:8d:f3:28:a1:fa:7c:2a:21:09:4d:
3e:ab:94:e9:54:67:d8:be:41:78:87:3b:6b:cf:49:3a:93:f2:
b8:c7:be:42:d7:7d:da:9a:ca:af:fd:93:76:3a:20:1c:37:66:
af:73:8a:81:92:0c:97:04:38:ff:d1:b5:db:b2:68:de:94:7a:
87:91:ee:27:6c:da:d2:fe:cb:7c:53:78:48:75:00:7c:63:28:
7a:48:94:a3:df:02:f0:d7:e2:46:41:f2:62:06:6d:c0:44:94:
af:82:37:4d:9a:bd:df:01:ae:02:24:bd:33:06:a5:ff:2d:f1:
27:df:64:00:30:98:22:bb:c0:e5:b1:eb:b2:76:c3:91:61:ee:
39:e7:24:df:e6:37:e6:93:c7:44:f6:2b:eb:28:59:ae:af:68:
94:8c:d8:8a:51:5c:de:c4:66:c4:e7:60:39:24:aa:53:fc:7e:
93:19:f5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:26:21 2026 by rpki-client