Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
File: xeu4t5Qi-y1tioLbfxrAtqpZs38.mft (raw, json)
Hash identifier: R9UAs8ZxHWFseRnUY/q/jKF/EoutaG+SYg1LaHbhIYM=
Subject key identifier: 70:E6:37:E6:E0:F3:28:67:3D:07:01:43:8A:EB:20:02:F5:D4:86:73
Authority key identifier: C5:EB:B8:B7:94:22:FB:2D:6D:8A:82:DB:7F:1A:C0:B6:AA:59:B3:7F
Certificate issuer: /CN=c5ebb8b79422fb2d6d8a82db7f1ac0b6aa59b37f
Certificate serial: 019D27DFCADC25DD0A58514F2D51879C6C2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
Manifest number: 17AA
Signing time: Thu 26 Mar 2026 02:01:10 +0000
Manifest this update: Thu 26 Mar 2026 02:01:10 +0000
Manifest next update: Fri 27 Mar 2026 02:01:10 +0000
Files and hashes: 1: emO2nonrGTBV6dWmgfFKxf2S-4Q.roa (hash: J/NmygUcPvRFH9fgrU6o+RxXyKYU/ZMkRyNKy/UmGBA=)
2: xeu4t5Qi-y1tioLbfxrAtqpZs38.crl (hash: U+OaJrPJOkYSq1J4tcszHW9sEj0K47LgLhBnaSVP1zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:ca:dc:25:dd:0a:58:51:4f:2d:51:87:9c:6c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ebb8b79422fb2d6d8a82db7f1ac0b6aa59b37f
Validity
Not Before: Mar 26 02:01:10 2026 GMT
Not After : Mar 27 02:01:10 2026 GMT
Subject: CN=70e637e6e0f328673d0701438aeb2002f5d48673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:61:5d:9c:27:b0:29:23:c6:7a:9d:3b:8c:0c:
56:e6:02:83:99:85:b8:77:43:72:ff:a1:3e:06:a8:
6d:a5:c0:ca:53:50:fa:50:94:fc:f0:dd:31:d4:f5:
a3:16:f2:a9:d8:75:61:b5:05:8e:57:68:16:08:02:
db:34:0f:f8:91:79:bb:b3:74:3f:f6:49:8b:04:4d:
75:7e:5d:dd:db:a5:c6:fa:42:f6:3c:a4:b6:a1:7e:
b1:c1:1d:76:f0:a7:53:bc:af:b8:cd:ed:a6:44:67:
a1:a3:cf:c9:d0:3b:f3:50:fc:ba:78:f9:b1:9f:6a:
d2:45:cc:9a:90:e6:91:31:c2:f7:50:a5:fb:5d:75:
60:14:8f:21:ec:38:70:06:bb:7c:cc:cb:9b:2e:43:
c1:d0:6d:84:df:11:f8:31:4d:0a:8b:3b:40:c6:91:
a8:d8:5d:56:25:f5:ba:8d:32:fb:26:d4:86:04:16:
64:1b:03:e9:72:01:81:d1:46:83:24:71:0f:8d:9a:
73:d3:d6:90:11:60:7e:62:86:3f:9d:f1:5f:e7:f2:
df:d2:9e:3c:05:8b:b2:dd:1d:83:4f:ac:36:1e:c3:
a3:63:08:a7:84:3d:e9:5c:25:50:2c:21:5e:49:89:
d9:c7:9c:58:72:f5:2b:60:96:9c:52:ad:55:53:9e:
14:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E6:37:E6:E0:F3:28:67:3D:07:01:43:8A:EB:20:02:F5:D4:86:73
X509v3 Authority Key Identifier:
keyid:C5:EB:B8:B7:94:22:FB:2D:6D:8A:82:DB:7F:1A:C0:B6:AA:59:B3:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:8a:3c:32:06:ed:d7:30:a9:ff:58:16:7a:d9:9b:ff:fa:47:
6d:13:2d:f7:ab:65:4b:d6:1e:f9:20:22:06:22:4a:62:52:48:
32:d8:9b:66:6c:9c:87:bf:ee:9f:0a:6a:64:44:fe:8f:10:1e:
b8:eb:70:e7:0b:4f:d1:92:c7:30:f7:f1:4b:81:44:f8:ba:3d:
77:60:ff:a3:48:c0:e4:f5:74:6f:95:33:b1:0f:be:16:11:d5:
9b:e8:ed:a9:5c:41:4d:2f:98:c8:74:3c:b7:f2:17:81:2d:6d:
af:e8:e1:83:f2:1e:50:c9:15:b2:94:bc:ec:85:fd:68:ca:97:
6e:ed:17:3f:6f:27:4f:c1:54:d2:61:bc:a0:b6:16:c8:64:4d:
1a:76:bf:dc:16:2e:c9:ed:78:60:8d:58:0c:5d:dc:4e:28:38:
44:4e:32:83:96:c9:b6:61:3c:81:e9:34:b9:b1:a1:25:8b:1e:
08:4f:34:19:f7:d3:a4:a1:2c:29:c1:2f:17:4b:ac:da:eb:d3:
81:91:33:e1:27:b9:a2:7b:14:7a:bd:e2:db:ab:7f:02:51:96:
ae:bc:af:51:f6:83:3d:0d:5a:2c:b7:a2:0e:c5:95:53:af:b5:
7d:65:25:1a:ae:f2:fe:fc:c7:b4:06:f1:7d:a7:d4:0d:6d:43:
66:de:0f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:53 2026 by rpki-client