Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
File: xs-pT2E045YOpfMYhGowzz6SLdc.mft (raw, json)
Hash identifier: sQ9dst1vI6NrYDTGpiQo7SYZ2HavWNUQ6VK7qzaYmuk=
Subject key identifier: B5:FA:24:4E:83:BF:79:0F:F6:FF:49:AC:AF:72:2F:49:0D:A4:22:19
Authority key identifier: C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
Certificate issuer: /CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Certificate serial: 019D29976550B80655AD55D736EDDAAE52F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
Manifest number: 1890
Signing time: Thu 26 Mar 2026 10:01:20 +0000
Manifest this update: Thu 26 Mar 2026 10:01:20 +0000
Manifest next update: Fri 27 Mar 2026 10:01:20 +0000
Files and hashes: 1: 3q5RWSGOxCn-4vQQtjRT8k1IAvA.roa (hash: MIWK18fPNJwt93Pk47XkLTue9uAHSbtiIrZzbMWjVSU=)
2: Dx0dpQ_AbPOHo68C5ZHoBOIeMpQ.roa (hash: JCGvmXb4UTtEBOFvTPRpl2liGZ4WCIfGLFxvNxNlUlQ=)
3: UBa5jx_ljBddT4tcu2z4LiFhOrk.roa (hash: zIhepUpUWuaAk7nANePm+39a2QbrU+z3WqdtyUCFmrk=)
4: b68J68814HG70-IxOZC5l9IfQFw.roa (hash: 5V2eWlG8SHwx9mjWWlI/4oOe8kmHY5VMZdFbe9QXZ+A=)
5: jG6aepPboty3bhwMFNAy4j7PZLg.roa (hash: RpAm5WQYOjhIalUzLd+dhvF8WQ0tVlQHMoKb6uwbMJc=)
6: r-DgonvlWJqtYHHlaiaRiANzpGc.roa (hash: fwKAaMm3Gqo5hD8uzSgECi6owDeeT3DsiPyBbjJxWhQ=)
7: xs-pT2E045YOpfMYhGowzz6SLdc.crl (hash: yclFz6RktAv/ZkPUfp8KPJSbh9nKP31F7HQNvGefyMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:65:50:b8:06:55:ad:55:d7:36:ed:da:ae:52:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Validity
Not Before: Mar 26 10:01:20 2026 GMT
Not After : Mar 27 10:01:20 2026 GMT
Subject: CN=b5fa244e83bf790ff6ff49acaf722f490da42219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fb:0d:56:d7:08:71:88:c5:f6:6c:35:24:b7:
1a:66:a3:a2:91:20:ac:94:03:40:57:e3:0c:b2:0b:
87:bb:28:84:a8:6a:c1:71:d2:f6:27:93:02:42:46:
19:8f:76:e1:e3:5d:8c:0c:23:9d:cb:3a:7e:f1:00:
04:ff:67:e4:f9:00:a1:32:69:3d:53:fb:1b:e2:54:
a1:4a:fb:a3:e2:eb:84:37:f9:0e:94:02:44:e2:8d:
10:88:25:42:f5:46:8a:50:65:36:d5:83:fc:83:46:
87:f4:39:a5:16:70:91:b3:31:d9:3e:00:e6:f2:29:
73:22:dc:82:96:f5:3b:06:96:45:57:de:de:2d:50:
b4:d2:f3:c4:09:fe:c8:c8:ab:0f:9b:f2:f2:3c:42:
8d:8d:75:f3:e6:49:b5:df:3a:8b:0b:ad:ed:ee:89:
e1:51:06:6a:29:2a:e1:ad:54:44:aa:59:20:36:4f:
41:a8:ff:8a:91:bd:2a:c8:0f:f0:4c:b6:2a:d1:c6:
c7:ba:1f:8c:88:19:6a:38:0e:26:58:d4:18:0f:ae:
28:d5:6f:b1:c9:e6:62:d8:52:3d:67:2f:d3:3c:20:
74:d4:8c:8a:ad:32:a8:97:8b:a6:73:2b:94:c2:1d:
0f:33:36:7f:3b:41:1f:da:c0:e3:55:1f:b1:2e:3f:
3d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FA:24:4E:83:BF:79:0F:F6:FF:49:AC:AF:72:2F:49:0D:A4:22:19
X509v3 Authority Key Identifier:
keyid:C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:67:58:aa:08:62:be:4e:29:5f:3d:51:eb:8a:62:94:e1:0d:
19:2b:88:7c:88:c7:b2:e2:e3:98:40:6a:eb:84:95:a4:37:79:
33:e7:ca:b0:2d:c4:fe:70:e5:7a:7e:2b:37:56:c9:dc:3e:01:
04:2e:60:8f:59:44:bb:c5:5e:5c:1c:92:85:09:d1:c9:09:20:
87:c7:46:56:59:91:d0:1b:7e:62:07:f5:b7:cd:f5:a3:15:87:
1f:9d:47:f9:53:dc:af:1f:c0:c8:7e:63:fb:08:8e:87:14:5c:
26:cd:ee:01:40:ec:ff:11:f8:6e:12:58:8e:b9:d5:87:89:14:
e2:7d:e9:bf:4e:10:bf:c9:d2:55:6c:f2:dc:79:15:25:65:fe:
0b:5e:75:6d:79:34:34:77:e9:9e:93:7f:ba:66:98:f7:2d:20:
e4:ae:91:02:91:14:f5:7b:21:ca:09:a8:95:3a:0a:3f:77:9d:
86:53:c4:87:fd:10:4d:2e:aa:8c:bd:67:3c:54:bb:fb:27:54:
d6:6b:67:3e:09:04:9b:e2:b1:f4:08:09:10:d8:38:2f:f1:bb:
37:54:e6:42:27:6a:dd:1f:47:6e:16:f4:10:85:bb:dd:5a:a2:
ea:45:bb:dc:2e:75:25:d3:d2:97:20:b0:f3:60:91:af:79:d1:
38:4b:d4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:06 2026 by rpki-client