Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
File: xBRUZfBpanDV8D7h1d7K_UHcY4U.mft (raw, json)
Hash identifier: 3WOy+QXh9aJ1PN1W7Rs0poc36hvzq91BqnSDtz8wOZs=
Subject key identifier: 19:CF:1C:06:1C:94:93:64:EE:06:FF:99:5C:AF:1D:2B:B9:A6:EA:6D
Authority key identifier: C4:14:54:65:F0:69:6A:70:D5:F0:3E:E1:D5:DE:CA:FD:41:DC:63:85
Certificate issuer: /CN=c4145465f0696a70d5f03ee1d5decafd41dc6385
Certificate serial: 019D26280C19E2CFB8A76A19931362F7337B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 18:00:51 +0000
Manifest this update: Wed 25 Mar 2026 18:00:51 +0000
Manifest next update: Thu 26 Mar 2026 18:00:51 +0000
Files and hashes: 1: biJ04bmigw6iVpUiIdYRLfiKayE.roa (hash: //R/p5jeoEyHzrVxssR2SpOIbWo1BamvM90LorlHczo=)
2: xBRUZfBpanDV8D7h1d7K_UHcY4U.crl (hash: pcBaWPl5iM48edKiUmIgwj3m9BVyvZp5cxcMlLH3Ynk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:0c:19:e2:cf:b8:a7:6a:19:93:13:62:f7:33:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4145465f0696a70d5f03ee1d5decafd41dc6385
Validity
Not Before: Mar 25 18:00:51 2026 GMT
Not After : Mar 26 18:00:51 2026 GMT
Subject: CN=19cf1c061c949364ee06ff995caf1d2bb9a6ea6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:16:67:d2:d4:a6:2c:8b:1f:c7:15:9b:78:c9:
04:98:3d:b6:d2:37:4c:e2:58:4c:d6:77:52:d8:31:
40:74:6c:b6:be:87:02:f5:92:4b:db:73:dd:b6:15:
8a:64:d6:22:d2:59:dc:b8:3f:3f:c2:7d:f2:10:ae:
13:1b:d9:fd:13:d1:62:f1:cf:36:20:e6:24:9c:4d:
53:00:b6:cd:bb:52:cd:94:47:ce:64:c5:0e:42:6a:
d8:ba:ee:5f:c2:40:d9:68:27:f1:aa:3f:71:07:67:
67:c0:7b:18:37:da:03:48:a4:32:47:9b:3a:db:23:
4b:6e:3b:32:a7:48:4e:b2:07:01:97:7d:6b:8e:66:
e2:44:28:16:66:27:0b:7a:85:c5:f1:76:0b:39:57:
d5:68:ba:f3:15:6a:1d:67:43:86:f3:ed:8a:16:4f:
75:ed:fe:a2:11:0c:65:6e:0e:c5:9c:6f:c8:a9:11:
d1:db:5b:4f:2d:34:17:5d:71:c5:b0:3e:c2:c9:4d:
b6:42:15:58:17:a0:5b:cc:2e:ce:64:31:84:63:a0:
57:37:3a:4a:84:db:97:cb:ed:41:f6:86:45:2e:ab:
c6:c0:6f:8f:5a:37:67:55:af:e5:37:a9:c7:08:a6:
24:b8:d2:dd:c0:9e:f7:f9:1f:d4:a5:0f:57:d1:cd:
ea:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CF:1C:06:1C:94:93:64:EE:06:FF:99:5C:AF:1D:2B:B9:A6:EA:6D
X509v3 Authority Key Identifier:
keyid:C4:14:54:65:F0:69:6A:70:D5:F0:3E:E1:D5:DE:CA:FD:41:DC:63:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:56:1a:c0:29:8a:73:00:10:75:d7:dd:bc:71:90:b9:7d:9d:
e7:06:21:4e:ca:43:d4:40:64:8c:11:ea:d2:4f:c7:63:3c:c9:
16:4e:bc:d6:ef:41:22:bc:74:7e:a7:c2:07:de:9b:30:e0:ea:
fd:73:3d:f1:10:30:16:45:5f:e5:dd:b7:0c:5c:e8:04:30:90:
67:8f:c8:de:fb:4b:a9:33:67:b0:32:27:58:7c:e9:57:37:45:
63:c4:69:f2:b6:23:17:b1:be:7b:02:6c:30:c4:ea:42:c9:a0:
a8:18:c0:f2:a5:75:36:75:2a:1d:0b:e3:96:f2:0d:92:6d:a9:
68:0d:04:60:9e:3c:40:a8:b6:57:62:22:b0:bd:60:8c:27:b3:
77:90:79:e4:6a:17:a1:97:fd:39:fd:4c:b6:06:03:b4:e9:fe:
e9:75:28:77:79:96:ca:12:ce:3c:9f:ad:fc:48:2d:b3:4e:96:
41:17:ea:c4:8b:83:b3:88:d2:5b:3a:a4:55:17:94:cf:46:13:
9a:16:42:76:3d:a8:ac:a0:00:c9:a1:45:0e:e8:59:e9:69:6c:
16:f1:d7:20:2c:6f:9d:e7:5b:04:dd:29:76:6b:78:79:68:83:
ed:52:4f:20:b8:c1:08:68:43:b6:e7:62:5e:70:36:f9:c4:3f:
86:d9:3d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:38 2026 by rpki-client