Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft
File: Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft (raw, json)
Hash identifier: WfzAddu7rQDgB9McPTYCrvk0IWnYdUFe0UV9keG6ND0=
Subject key identifier: D4:31:0B:B4:76:1A:86:0B:52:10:AF:A1:75:A4:AD:C0:8F:C1:2C:55
Authority key identifier: 5E:9E:D9:91:EE:6B:C4:BB:48:A8:B7:50:11:D0:48:19:17:E0:F3:F7
Certificate issuer: /CN=5e9ed991ee6bc4bb48a8b75011d0481917e0f3f7
Certificate serial: 019CABD9BD2BB210D811DAF947D75011D4F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 00:01:39 +0000
Manifest this update: Mon 02 Mar 2026 00:01:39 +0000
Manifest next update: Tue 03 Mar 2026 00:01:39 +0000
Files and hashes: 1: SyWTiReTZTnBDg5JyysBSj2Ylo4.roa (hash: fZ2UZHiHpOuYHZzSoYWZDivGjx4cM7k5nd9px5ySpG0=)
2: Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl (hash: pjSiOYwzbsQcsUJrdYQ/onCQTCFTG19Koy2oxpTXgUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:bd:2b:b2:10:d8:11:da:f9:47:d7:50:11:d4:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9ed991ee6bc4bb48a8b75011d0481917e0f3f7
Validity
Not Before: Mar 2 00:01:39 2026 GMT
Not After : Mar 3 00:01:39 2026 GMT
Subject: CN=d4310bb4761a860b5210afa175a4adc08fc12c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8a:9f:1e:89:59:ac:9c:6b:05:97:fa:4b:f0:
dd:57:3d:bf:cf:43:6d:b6:c7:76:cc:2d:af:f2:d1:
97:8c:00:34:a4:08:22:ba:f0:f8:e9:98:e5:14:01:
65:a5:0a:db:75:b2:dd:74:06:8a:0d:33:7e:fd:8e:
1d:28:81:54:5f:fc:71:5a:59:40:50:69:16:af:9b:
b4:b4:b8:20:92:f4:9b:0c:2e:a8:c4:11:c3:97:4f:
16:5f:46:2d:73:f5:fa:84:d7:0a:eb:75:a8:5c:af:
5f:b5:f4:a5:45:4f:40:60:26:ea:a2:2d:71:2a:7c:
e1:d4:93:ca:bc:80:76:bc:2a:53:99:10:8e:a4:13:
31:fd:cb:26:f1:ec:80:e5:8c:61:ad:a6:e3:61:85:
57:38:e8:fd:cc:a9:42:09:12:f4:b7:cb:ab:da:3b:
55:d8:c2:32:31:cb:2b:4c:c4:f2:25:44:7b:f4:13:
ae:1c:28:df:00:66:e1:8f:82:e5:3d:e2:61:70:bb:
20:2e:9f:24:2f:be:37:fd:bf:7c:14:14:52:aa:7b:
b2:60:49:55:29:2a:6a:13:6d:29:bc:91:02:6c:3b:
e3:c1:59:02:68:a5:f2:f1:3d:b8:1c:79:01:3b:b8:
6d:e7:67:3d:ba:8a:03:99:92:cd:8b:65:a9:1e:fc:
bc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:31:0B:B4:76:1A:86:0B:52:10:AF:A1:75:A4:AD:C0:8F:C1:2C:55
X509v3 Authority Key Identifier:
keyid:5E:9E:D9:91:EE:6B:C4:BB:48:A8:B7:50:11:D0:48:19:17:E0:F3:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c8:e4:7a:fc:d2:5e:be:be:4c:91:bd:98:e0:9b:c7:64:10:
3e:fe:30:22:47:77:07:22:93:2d:61:9f:11:89:62:2a:98:b9:
b5:c3:b1:77:07:a2:de:0d:97:72:59:4f:06:c2:0e:cc:6e:4e:
42:6f:f2:98:b6:d8:b0:f8:b5:69:81:20:85:c7:8b:72:68:2f:
9c:25:54:c6:5a:da:15:22:11:29:d9:3e:a6:33:1b:ab:88:21:
3b:05:20:11:de:77:62:4e:64:d2:40:a5:8a:bb:19:19:74:b8:
0e:27:0e:98:0b:1d:18:11:c9:29:d9:de:c1:da:ab:85:05:c7:
80:11:d2:38:53:21:78:45:44:be:b5:ef:05:29:ca:7b:c3:c5:
b6:8a:25:29:47:32:99:dc:5b:cf:41:d7:75:9b:fc:c6:05:c4:
53:c7:7c:55:dc:c9:de:1a:6b:94:26:38:00:4a:dd:72:ff:a2:
d7:0c:f0:b6:1e:9c:1b:9e:e8:08:af:b5:52:62:3d:60:86:e5:
f9:f7:52:70:05:f5:a8:9f:f1:b8:c4:de:d3:9b:9f:fb:72:b4:
fe:d9:09:2d:13:70:92:b8:70:5b:56:eb:82:db:ee:f2:26:bb:
0b:c6:55:56:15:5d:65:3b:d7:ed:a0:0f:c6:8d:fd:d4:28:c7:
58:0a:1c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:43:01 2026 by rpki-client