Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
File: xfFStqDQBGJ9KF2Hmqg-WEYast8.mft (raw, json)
Hash identifier: OoEg9VzVGAUsQPY16SCCxywCC7tpPNXYJKZnF6qbGsE=
Subject key identifier: 14:C7:89:04:A5:19:DE:32:3B:91:B4:E5:F6:D3:DF:32:22:DB:D2:80
Authority key identifier: C5:F1:52:B6:A0:D0:04:62:7D:28:5D:87:9A:A8:3E:58:46:1A:B2:DF
Certificate issuer: /CN=c5f152b6a0d004627d285d879aa83e58461ab2df
Certificate serial: 019D2A05034A9B800194E88C6C782E401F24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
Manifest number: 14AC
Signing time: Thu 26 Mar 2026 12:01:04 +0000
Manifest this update: Thu 26 Mar 2026 12:01:04 +0000
Manifest next update: Fri 27 Mar 2026 12:01:04 +0000
Files and hashes: 1: NwvDc-yJwXeNivsjoY0gJyIcmR4.roa (hash: FEVqQwQ9gr8Xh59AeGfQNtLNsq4t+I6eMLo4jtBSrFY=)
2: xfFStqDQBGJ9KF2Hmqg-WEYast8.crl (hash: vkXR33LIVTjoCrp+l36g7tLy5V0r2EWP4ubkHqKSE2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:05:03:4a:9b:80:01:94:e8:8c:6c:78:2e:40:1f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f152b6a0d004627d285d879aa83e58461ab2df
Validity
Not Before: Mar 26 12:01:04 2026 GMT
Not After : Mar 27 12:01:04 2026 GMT
Subject: CN=14c78904a519de323b91b4e5f6d3df3222dbd280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:05:8c:46:97:e1:1c:d5:13:83:e1:c6:40:8c:
21:1d:c8:e2:7e:1b:f4:55:a9:50:d0:d2:ce:3d:4b:
99:5e:ff:77:a0:3d:58:eb:58:67:cc:2b:b0:80:18:
ac:51:8c:33:71:b3:bb:a0:cf:5d:c6:6f:ff:be:37:
09:f9:d2:0f:3b:3e:56:f1:15:5a:dc:f8:af:83:41:
e6:e7:70:38:79:0e:ec:19:7b:d6:ca:3d:96:e5:87:
c4:f6:08:29:a5:74:26:94:9d:82:8f:14:51:da:9f:
85:b0:f7:ba:78:d3:c6:de:e7:ee:1c:ef:90:04:7f:
f0:13:3c:5f:75:a7:bf:d9:29:d7:b8:20:9a:b1:f9:
74:4a:fa:9b:b5:5b:e3:77:13:d8:09:a1:fd:7a:b4:
45:f6:86:3d:7b:af:76:33:57:24:a0:06:a6:33:a4:
6e:5f:0c:6b:3a:1d:1e:9e:4c:c0:6b:00:79:ab:d6:
80:fb:1b:e2:5c:21:de:cc:0d:50:00:60:0d:23:e9:
8e:72:56:73:25:a7:a1:90:85:3b:16:eb:70:9b:1c:
79:ce:c5:1a:56:6d:3a:95:68:a8:a5:4e:86:8e:37:
99:90:bc:d1:28:42:4d:8d:02:ec:0d:79:d9:a5:85:
07:e0:3e:8a:ff:09:09:5a:70:ee:b4:7b:c4:e0:87:
0b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C7:89:04:A5:19:DE:32:3B:91:B4:E5:F6:D3:DF:32:22:DB:D2:80
X509v3 Authority Key Identifier:
keyid:C5:F1:52:B6:A0:D0:04:62:7D:28:5D:87:9A:A8:3E:58:46:1A:B2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:cb:95:58:ce:39:90:e8:8e:a5:91:40:44:fa:f7:33:3b:f0:
59:4e:db:c1:4f:c4:7d:35:f8:8f:06:65:5b:99:73:9b:94:28:
65:88:f8:bc:68:3f:06:c9:6e:38:11:40:8e:17:5a:52:b1:f1:
59:97:0d:64:3c:c6:90:47:b9:0a:f4:c7:f9:43:c9:7a:c1:af:
ed:b0:3f:df:f1:29:96:e4:12:74:c2:54:a4:9b:6c:df:76:ac:
76:dd:b7:69:0f:0e:7f:3b:04:6b:6b:7f:ce:da:fa:fd:fb:47:
ba:36:3f:cf:d0:88:c8:70:d3:50:a0:0e:1e:ff:83:ce:db:17:
d1:e4:21:6d:ec:36:23:46:b6:47:ae:32:66:0c:56:8a:06:48:
52:53:83:9c:82:84:c2:2d:43:cb:6b:35:c3:2a:58:fa:59:e0:
a5:5c:a7:ac:ef:1c:04:83:de:32:0e:f4:92:4f:41:5d:29:00:
d4:96:22:f9:75:7d:e9:5b:ff:46:af:8d:d8:d8:8a:24:90:b9:
0c:a0:39:40:ac:45:2b:ec:8c:78:b6:44:55:74:3e:25:66:d2:
bc:00:88:96:da:b0:61:8d:b2:7a:6b:d2:b0:97:48:b0:9b:09:
e5:31:8a:45:8a:11:2e:db:3b:4c:8e:1d:f7:2b:d7:4d:e5:78:
02:1f:84:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:38:03 2026 by rpki-client