Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
File: xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft (raw, json)
Hash identifier: 11sc8k5kgQdPdKMTto3v9k/WLE+qI/nY90CdVQB7PjE=
Subject key identifier: C1:65:F4:AF:7D:50:0D:89:2B:9B:EA:3E:15:22:91:8F:D0:33:E7:C0
Authority key identifier: C5:A0:19:CB:54:D7:00:A1:B1:C5:0E:8F:90:EB:EE:2A:5E:EA:57:BB
Certificate issuer: /CN=c5a019cb54d700a1b1c50e8f90ebee2a5eea57bb
Certificate serial: 019D25F12CF93793303A1E05A81D8A9A7BD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
Manifest number: 1819
Signing time: Wed 25 Mar 2026 17:00:55 +0000
Manifest this update: Wed 25 Mar 2026 17:00:55 +0000
Manifest next update: Thu 26 Mar 2026 17:00:55 +0000
Files and hashes: 1: a3vqBzTeMihaLI7nX3YXTwT9QXM.roa (hash: YtcSgTlR3L7xs2ulbON7vgzLF5ftnMrGCR+z8FjX7OE=)
2: xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl (hash: 42lYRpmonUgWvAJvlNc+T4yk4fA7xodTrQHzNFMqa18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:2c:f9:37:93:30:3a:1e:05:a8:1d:8a:9a:7b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a019cb54d700a1b1c50e8f90ebee2a5eea57bb
Validity
Not Before: Mar 25 17:00:55 2026 GMT
Not After : Mar 26 17:00:55 2026 GMT
Subject: CN=c165f4af7d500d892b9bea3e1522918fd033e7c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9c:d6:0a:31:0d:f4:77:1a:3e:6a:73:8f:1a:
eb:04:bb:93:04:46:f9:bd:f2:33:76:67:bf:a0:c5:
b1:0a:02:8e:39:ef:97:9e:fa:43:de:20:29:47:61:
07:9a:f4:ee:50:e7:e2:a6:c7:a0:48:8f:03:c3:42:
ec:e6:87:6b:d9:88:e0:2e:14:b1:7d:a4:ef:87:d4:
2f:e4:6e:d9:cb:37:97:6c:28:ff:28:94:45:3f:a8:
d5:8a:8b:72:66:af:c8:16:b6:49:14:e8:d1:ad:b6:
fc:12:27:bf:ae:f1:90:cf:6b:05:3f:17:96:e0:db:
37:e0:cb:67:de:25:72:dd:cc:20:dd:39:c2:11:6b:
04:95:36:8a:77:5f:ea:02:a4:83:f9:e0:24:b3:2e:
84:fd:fa:9f:0d:99:cc:db:73:24:48:08:88:0d:58:
1d:db:c1:d3:3c:b2:cc:33:7a:aa:fe:7b:09:ef:00:
23:c5:e9:4d:96:66:66:f3:47:32:fc:34:6e:eb:e4:
ff:4a:2e:62:22:c7:a1:00:b5:75:43:b4:0d:fc:66:
56:ff:6e:d5:39:84:f6:94:bf:53:c5:2c:bb:48:29:
bc:2f:2b:0e:f8:e1:21:aa:42:43:1a:3b:e4:23:5e:
be:6f:88:72:8f:64:4a:9b:5a:46:1b:90:db:ff:55:
a7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:65:F4:AF:7D:50:0D:89:2B:9B:EA:3E:15:22:91:8F:D0:33:E7:C0
X509v3 Authority Key Identifier:
keyid:C5:A0:19:CB:54:D7:00:A1:B1:C5:0E:8F:90:EB:EE:2A:5E:EA:57:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:67:c7:f1:b7:94:d0:f8:49:31:c2:2c:84:be:37:15:5c:80:
ed:6c:74:41:88:34:ef:94:23:4f:f5:a2:0b:6c:b9:42:f1:c5:
8c:93:01:6c:68:74:35:2b:10:7b:be:cc:aa:d3:e9:ef:1c:a4:
06:92:52:e4:9e:12:3d:7e:48:95:be:3f:57:4f:87:a0:97:2b:
31:2e:f9:43:09:29:51:d5:52:68:a3:db:d9:5b:e8:f5:bf:3e:
5d:da:7c:5f:b2:fd:27:eb:14:19:a5:76:be:e1:22:01:3a:40:
46:33:d9:f7:15:82:b0:73:af:56:f2:1f:64:1e:61:25:ee:b7:
e0:23:c9:f8:63:e5:d5:06:2c:ad:4b:c2:a4:53:36:f7:8c:2c:
24:11:4a:d6:9a:50:4f:bf:a1:16:69:75:67:73:07:21:b0:70:
1a:22:b8:56:12:b2:c6:27:60:8e:da:e9:67:54:f0:ad:25:77:
7a:61:8b:a9:44:be:eb:a0:ad:6a:f9:b8:44:5e:06:5b:d5:3d:
83:86:10:90:d1:f7:4d:d3:85:33:d5:60:7b:d7:33:12:7b:4e:
e3:a3:ca:d3:bf:1b:61:b8:01:05:4a:91:71:d4:66:0c:1b:dc:
84:56:d5:5e:a6:62:a3:24:6e:8d:6f:6b:85:5f:18:c8:27:f7:
80:1b:2a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:59:45 2026 by rpki-client