Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
File: xalo7bcsFfX5Vn_TQme4dIXvNtE.mft (raw, json)
Hash identifier: x8xebSX8rgBIBCeAfp5x8230Lo3mOzcHH5XZFFlUtjQ=
Subject key identifier: C9:54:F5:3E:F2:43:FC:D6:67:B5:C0:C6:D7:04:35:FA:36:18:09:1E
Authority key identifier: C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1
Certificate issuer: /CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
Certificate serial: 019D2A3B4210A3CCDB0A0238EDD2D192B429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
Manifest number: 14EA
Signing time: Thu 26 Mar 2026 13:00:19 +0000
Manifest this update: Thu 26 Mar 2026 13:00:19 +0000
Manifest next update: Fri 27 Mar 2026 13:00:19 +0000
Files and hashes: 1: 9EktXdyZJh18u-aW7yKS4HoPavo.roa (hash: rjDqPIBakWvnRieCU3x6qlMyDbDmiCMZb+0A8kLnWdc=)
2: cPX1K7h-wlaCr7zmE40f44WojxI.roa (hash: Q/KPZCaK+pTYPECUWe3LbMeOLvb3gqHt7TrGMiKZCx4=)
3: xalo7bcsFfX5Vn_TQme4dIXvNtE.crl (hash: WlRsdNC/6ckDLKonKa5YwLT5KGtalEUQ5WuFtEc92JI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:42:10:a3:cc:db:0a:02:38:ed:d2:d1:92:b4:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
Validity
Not Before: Mar 26 13:00:19 2026 GMT
Not After : Mar 27 13:00:19 2026 GMT
Subject: CN=c954f53ef243fcd667b5c0c6d70435fa3618091e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c2:c8:04:c5:6a:6c:a9:38:b2:62:2a:41:75:
88:2c:1f:28:e0:54:3d:27:f5:99:5e:b6:b1:b2:92:
09:a8:3c:9e:48:9a:9f:ff:54:f3:28:86:a2:20:4d:
2c:85:24:37:71:ff:20:67:a5:9f:b6:2d:26:bc:96:
e8:da:90:ed:89:b1:44:91:1b:bb:b6:d8:2d:7c:7e:
62:06:95:42:37:30:a4:22:7f:d2:ec:76:6e:83:46:
3b:9d:6d:27:ad:ca:dc:78:b8:50:02:73:8d:83:24:
ed:22:6c:23:40:56:45:72:6e:f1:51:3e:09:ff:87:
3e:bd:f0:91:57:2c:e2:01:54:a5:19:b9:f9:fb:6d:
48:0d:92:3d:76:18:27:ef:58:33:92:fe:10:9d:2f:
fc:25:07:7a:c7:a1:58:ef:81:d1:8b:89:c4:5f:da:
88:67:81:c5:fd:82:09:26:72:d5:1a:28:b4:53:95:
13:a5:b6:3a:1a:c0:4f:f6:4c:25:43:26:f9:38:aa:
53:94:4e:17:b5:1b:91:65:48:b5:fd:dd:01:75:ee:
a0:c7:39:ee:83:cd:b1:62:26:c3:fc:1a:09:03:86:
c1:22:70:1a:81:e1:7b:ca:f8:8b:0e:ff:82:5f:9e:
9c:e6:1a:86:ec:00:2b:d3:50:f8:62:12:e5:74:4a:
f0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:54:F5:3E:F2:43:FC:D6:67:B5:C0:C6:D7:04:35:FA:36:18:09:1E
X509v3 Authority Key Identifier:
keyid:C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:dc:04:74:d4:e2:8b:90:bc:1d:66:9f:4b:0f:ff:09:d1:b7:
4b:9f:f3:95:a5:bb:2d:24:4c:b2:ef:7f:30:a8:f2:0c:c3:d4:
1e:82:ce:f6:77:66:ea:03:de:05:d3:b4:3a:bb:f8:a2:4e:14:
28:d4:1d:27:6e:4a:f3:91:60:8e:d8:f6:a8:ac:1f:18:73:c3:
4d:d4:28:64:84:ee:25:01:5c:d9:83:d7:40:bf:48:7f:32:6b:
18:b2:fb:ae:f7:07:b5:cc:64:dd:5f:dd:5a:85:0f:3b:01:53:
4a:3c:5e:36:eb:f1:78:7b:8a:65:7d:33:97:d1:be:54:15:07:
05:6e:b9:b1:f3:0f:ab:a1:60:18:d0:5f:1c:42:35:09:9d:fe:
49:32:88:af:90:e3:3d:8b:bf:b0:70:7a:5b:a6:33:7b:fd:3c:
a5:42:7f:ec:2f:1c:c5:e5:c0:33:82:8a:04:dc:5d:18:3e:93:
e3:5d:6a:cf:b0:d5:b3:d1:cd:fd:dc:27:c5:1f:74:f4:d4:d0:
42:01:ad:72:6f:76:d0:76:f3:99:c5:a7:2d:5a:31:f4:d5:1a:
27:e7:1b:80:56:3f:a5:c7:81:bd:4a:c4:de:5a:22:fe:6e:df:
bf:1c:f0:69:09:33:7f:be:ec:31:41:ab:c7:e5:d7:de:e7:17:
4d:a4:ea:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:28 2026 by rpki-client