Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
File: xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft (raw, json)
Hash identifier: mn/I6NqbfwcdtEGjpCsMRXGMzCF4JxT4vn6JL8FWsX8=
Subject key identifier: 25:D6:53:A2:ED:3F:54:CD:AC:CB:7D:76:3B:A7:A6:F4:EE:F0:2E:11
Authority key identifier: C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4
Certificate issuer: /CN=c5e14070210627bfca4654b42de797acd6d2c4f4
Certificate serial: 019D25F201A55808680BEDEA90DDAA7E28B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
Manifest number: 0877
Signing time: Wed 25 Mar 2026 17:01:50 +0000
Manifest this update: Wed 25 Mar 2026 17:01:50 +0000
Manifest next update: Thu 26 Mar 2026 17:01:50 +0000
Files and hashes: 1: 2jQx973K_WHIEDeBwoceaInwrVk.asa (hash: Xu/Sv3zfgccGu+NaMsUgY/a+THDNzPx1jfH33fWcIQ0=)
2: 4N_n1cCDT7wj_iB4XrMTAQ9PivM.roa (hash: MxvavFzCXv3bNh/z3UJzQ6ZzRkLADzDg48/vugWD+cE=)
3: xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl (hash: gboYZh42LDCVsJe14KpPYr7L0dGmL8BUO8+ETqZi7Js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f2:01:a5:58:08:68:0b:ed:ea:90:dd:aa:7e:28:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e14070210627bfca4654b42de797acd6d2c4f4
Validity
Not Before: Mar 25 17:01:50 2026 GMT
Not After : Mar 26 17:01:50 2026 GMT
Subject: CN=25d653a2ed3f54cdaccb7d763ba7a6f4eef02e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d3:18:31:ff:93:67:f7:54:77:00:4d:05:51:
31:77:a7:04:7a:f4:53:6f:df:d2:b6:1b:24:ba:d9:
f6:ca:0f:dd:b1:43:79:54:cf:1d:ee:6f:84:06:7a:
3e:20:48:be:45:6d:e6:0b:d7:1e:d5:2f:db:9c:60:
87:57:1a:4d:ac:61:a5:8e:ee:a9:8b:25:3c:68:e6:
14:74:fd:57:e3:89:82:e0:77:67:fc:4a:55:63:4f:
cd:6b:0c:4b:3d:ff:e5:13:81:f2:87:c1:ce:94:7d:
8f:9d:a2:09:b9:f7:89:7b:92:74:0c:89:c5:9e:72:
12:e0:d3:6c:d6:74:f6:d1:42:c0:3d:e2:b4:66:56:
e0:dc:53:44:f6:28:1c:29:3f:fc:ea:2b:b3:fc:08:
0f:61:39:2c:82:c3:7b:0d:5b:2c:34:3c:5f:99:6c:
2d:1e:07:fd:e8:42:d2:6c:27:f3:1e:62:00:78:14:
ac:ae:30:93:e8:f6:80:4c:0d:02:12:9e:10:69:1e:
a7:7f:b3:e1:bd:4d:78:28:9e:c3:fc:e9:48:f0:c1:
48:32:74:c5:53:06:5a:53:bc:27:c9:9d:df:f0:1f:
47:9a:a7:61:e3:3b:21:1d:aa:74:05:25:14:9d:f6:
8d:b0:d8:d8:72:5a:d4:b9:61:a2:d4:91:6e:59:aa:
14:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D6:53:A2:ED:3F:54:CD:AC:CB:7D:76:3B:A7:A6:F4:EE:F0:2E:11
X509v3 Authority Key Identifier:
keyid:C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:3d:61:83:0b:9f:5c:20:c6:91:40:a7:24:ad:06:75:52:e7:
7c:e5:75:f1:61:19:05:e3:de:b3:ef:22:5f:d5:66:d4:94:76:
6d:ef:7b:ae:a0:c7:5f:aa:bc:de:80:30:78:51:d1:a6:11:63:
f8:ba:4d:9a:de:61:ad:8e:7c:04:6b:56:55:49:cd:fa:8b:b5:
be:15:15:45:65:e2:f5:1f:87:f5:60:d5:00:8a:6b:f8:02:7f:
f7:dc:92:eb:d4:a0:38:7e:50:cc:37:e2:d5:75:0f:db:a6:42:
bd:f6:c2:b5:23:99:a1:f0:6d:d9:85:1c:1b:34:8b:a0:fb:0e:
95:a7:d2:49:7a:08:92:6f:ee:c4:a8:bb:97:b7:7b:ad:80:71:
3e:9c:91:44:f1:31:67:79:7f:a0:b4:8b:b1:4e:dc:c1:1f:d8:
25:ea:a0:a6:1e:87:8e:af:91:83:db:ed:26:c5:19:38:83:7e:
d8:40:77:8c:93:e0:6d:50:b8:9f:22:8f:05:84:a2:58:a5:8d:
b5:1a:bf:6a:95:61:7f:f6:02:e5:a5:b1:78:36:54:85:2f:58:
0a:23:82:8f:c7:28:c4:82:b9:e5:d9:2c:e2:27:fd:44:fa:89:
d5:33:5b:fd:3f:6a:e6:19:56:6d:ea:fa:5e:7a:41:72:02:ae:
bb:10:51:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:40:54 2026 by rpki-client