Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
File: xw2_VVhwtVas-rQox06s7lb3siI.mft (raw, json)
Hash identifier: VqSJCbinqjnOVUSvPxHUmusmf3IkzOOtEqfrNVDRx24=
Subject key identifier: 49:F8:5B:5E:D5:F7:98:E4:2C:55:11:98:E2:61:91:92:56:C5:51:05
Authority key identifier: C7:0D:BF:55:58:70:B5:56:AC:FA:B4:28:C7:4E:AC:EE:56:F7:B2:22
Certificate issuer: /CN=c70dbf555870b556acfab428c74eacee56f7b222
Certificate serial: 019D25837302BD94BA241CC2069C59EA091D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 15:01:04 +0000
Manifest this update: Wed 25 Mar 2026 15:01:04 +0000
Manifest next update: Thu 26 Mar 2026 15:01:04 +0000
Files and hashes: 1: UVWbdtgMtPSlXPD-ljLhVUXQTLI.roa (hash: 0y9dv3rbyul1H/gRs5dF3tqgdi9jkPTntAurTA6guBk=)
2: xw2_VVhwtVas-rQox06s7lb3siI.crl (hash: hqGzwGSZ0bBQgZuhejKTM2d5N7mxaO4fEeylV3c4308=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:73:02:bd:94:ba:24:1c:c2:06:9c:59:ea:09:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c70dbf555870b556acfab428c74eacee56f7b222
Validity
Not Before: Mar 25 15:01:04 2026 GMT
Not After : Mar 26 15:01:04 2026 GMT
Subject: CN=49f85b5ed5f798e42c551198e261919256c55105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:26:ba:2c:99:59:a1:39:3c:49:24:ea:74:26:
fe:c9:92:10:30:20:5b:8c:7b:4b:0c:a6:e9:a3:fd:
1e:a4:78:76:9c:84:46:dc:0f:92:aa:6b:7a:3d:15:
17:e6:bc:14:3f:8d:80:5e:9f:24:82:fc:c0:89:7a:
79:73:b6:1b:7d:12:5e:3a:3f:47:12:cd:2f:4a:74:
0f:a9:ff:43:1c:c5:c5:44:56:72:bf:8f:39:4c:d4:
0e:85:fa:5d:17:4f:23:70:23:a1:f2:bb:81:6a:a4:
be:a8:fe:f2:70:1c:5a:2a:82:16:4e:51:7e:32:d6:
aa:00:42:b0:a9:d1:a6:fb:58:83:43:a1:61:db:1c:
2d:2f:fa:7c:4b:80:d5:9c:f9:04:e1:be:30:8e:60:
12:de:f5:55:c7:c4:25:12:ae:cc:68:ab:c3:97:81:
51:29:36:86:83:43:b0:48:c0:f8:db:cd:c1:1a:42:
cc:54:8d:11:dc:c0:52:52:c0:5e:77:d1:0b:a9:81:
d4:5b:67:1d:b9:f8:5b:3a:ba:5c:0d:5a:a2:df:11:
c9:ba:35:f9:a3:30:bc:aa:32:9d:aa:b0:c0:82:83:
1a:86:77:b9:5a:13:8b:3a:6d:0c:9a:f2:70:6f:66:
08:ed:29:58:be:a9:e3:85:dc:e1:86:c4:61:86:eb:
f6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F8:5B:5E:D5:F7:98:E4:2C:55:11:98:E2:61:91:92:56:C5:51:05
X509v3 Authority Key Identifier:
keyid:C7:0D:BF:55:58:70:B5:56:AC:FA:B4:28:C7:4E:AC:EE:56:F7:B2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:69:c9:c8:2f:89:dc:1b:52:60:1d:e1:b2:5f:d5:44:11:31:
4d:ea:ee:ee:e0:88:1b:fc:d4:51:22:89:10:d1:b9:e5:88:e9:
c8:fe:91:9a:07:8a:e9:5b:94:4d:44:b0:4c:b3:54:42:f0:e9:
f3:8a:76:51:63:26:98:ec:16:66:cc:14:4e:01:01:e8:0d:3b:
46:59:fc:a4:5d:94:3e:9f:46:8e:d9:5b:5e:ec:64:69:d7:21:
7e:10:20:ed:86:fb:b2:60:c8:8a:9c:c6:29:29:83:95:ce:ad:
65:62:63:d6:89:5e:25:0f:cd:3e:01:0c:96:1d:00:bf:68:cd:
74:ee:8a:77:91:62:9b:83:a7:46:78:d2:f1:f2:50:25:b3:31:
43:ce:fc:1f:a7:2d:ad:c6:ab:bd:6d:51:92:93:aa:48:2a:36:
b5:e3:0a:38:59:5f:e8:11:d3:69:41:9d:41:d4:d1:8d:ba:a6:
8c:1c:ce:92:b6:8b:02:22:b5:3d:2c:b5:c3:7a:57:b8:f6:68:
ed:c1:3d:98:78:ad:0b:39:a3:34:c6:7e:43:47:6e:46:33:bb:
c5:56:fb:1b:98:a3:12:3c:41:dc:0a:1c:18:e1:cb:ce:36:12:
74:d9:c4:a5:93:5c:f2:0d:8a:53:a6:49:03:59:b8:a1:6f:83:
fd:39:05:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:44 2026 by rpki-client