Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
File: xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft (raw, json)
Hash identifier: ZptVdKwg4RIUWrzY1dFkgxhIDpuHVlLXrNLpXf1lj/g=
Subject key identifier: 2B:9F:21:83:55:A9:31:16:B7:29:EE:2C:92:D7:13:FD:E5:1C:79:B0
Authority key identifier: C5:BA:51:C0:71:48:84:3D:40:08:05:B4:03:35:E7:2D:32:42:65:F1
Certificate issuer: /CN=c5ba51c07148843d400805b40335e72d324265f1
Certificate serial: 019D26283F44CD6D7901021CDDFAE69FE406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
Manifest number: 0929
Signing time: Wed 25 Mar 2026 18:01:04 +0000
Manifest this update: Wed 25 Mar 2026 18:01:04 +0000
Manifest next update: Thu 26 Mar 2026 18:01:04 +0000
Files and hashes: 1: 4kyWrT9Xy1B7TLtNDP6HuPz-7hw.roa (hash: sWHWI8IzaliyTyKxy/NPSWlKi/bMUwx2CvIPkFk/56s=)
2: A_J1Iis85mInuYBjqNWnaY64Er4.roa (hash: KG2bwrYCBOkD3k9N+nA/ujMikD/ZloBG8hBsS2kc7cc=)
3: xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl (hash: LaC2SFJHo9d5uIeSGZXiIL8qITXwPWiel9D+EIy2e9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:3f:44:cd:6d:79:01:02:1c:dd:fa:e6:9f:e4:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ba51c07148843d400805b40335e72d324265f1
Validity
Not Before: Mar 25 18:01:04 2026 GMT
Not After : Mar 26 18:01:04 2026 GMT
Subject: CN=2b9f218355a93116b729ee2c92d713fde51c79b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:19:51:dc:6d:74:97:02:d4:23:29:cc:99:cf:
88:14:a3:77:58:f9:e9:57:72:82:d4:68:cd:15:0e:
df:78:10:b2:d9:02:d4:64:eb:9d:b5:7f:6d:e7:a8:
d1:17:03:e2:6b:c0:d9:85:89:0b:d9:85:d4:fa:4b:
12:32:b9:2d:87:09:d2:c5:d0:05:0d:c1:9b:8f:be:
d5:f6:18:e0:88:f4:7b:3b:c7:58:34:26:18:c6:ce:
16:d7:19:26:c6:d8:2c:5b:fa:d4:c4:a7:19:bf:99:
66:e2:10:0d:b0:54:ce:e1:4c:dd:6f:d5:8c:71:75:
0b:7f:b9:fc:ef:f4:76:0b:17:3e:3f:f9:a6:67:63:
b5:e0:da:94:a1:6e:7f:89:ee:c8:3e:62:66:de:0b:
2d:28:db:b1:73:e9:37:3a:60:7f:42:66:b3:4f:44:
ab:40:4f:6f:1c:70:c7:cd:96:04:07:a7:1a:3e:7d:
9f:10:98:fb:dd:92:10:17:85:05:65:bf:82:54:4a:
f4:78:64:44:9f:d9:5b:ea:6d:8e:e7:81:80:39:84:
af:5e:08:d3:27:76:77:5f:b3:e4:0f:fa:30:f7:32:
7f:07:34:97:c8:c2:ca:31:15:32:ba:aa:f7:47:d9:
b4:c3:63:d4:15:6c:c4:d7:cf:c9:8a:c1:a7:95:ac:
77:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9F:21:83:55:A9:31:16:B7:29:EE:2C:92:D7:13:FD:E5:1C:79:B0
X509v3 Authority Key Identifier:
keyid:C5:BA:51:C0:71:48:84:3D:40:08:05:B4:03:35:E7:2D:32:42:65:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:7e:04:ab:fb:f1:96:4d:44:e0:2e:f5:35:9f:10:92:c5:fe:
f6:86:db:67:90:79:86:d9:32:cd:9c:04:af:90:61:3e:38:e4:
10:06:68:bc:99:50:47:6a:83:8c:f7:54:9d:6f:99:e9:cf:86:
5f:5f:e0:36:57:4d:0a:90:5f:f7:1b:11:97:1e:bb:ba:de:1d:
50:7c:b1:81:ae:25:a7:4d:57:93:d7:95:d0:53:3f:7e:50:1f:
aa:9a:a7:28:7d:fd:d3:c2:19:67:a1:a3:7c:77:47:d0:0d:3b:
0f:08:5a:92:08:71:66:03:d0:c2:0f:c0:70:c3:47:56:5e:df:
54:d2:db:c2:6a:1a:83:d9:a5:6a:53:88:fb:90:93:41:76:fa:
f2:07:e4:ce:3d:d6:58:0e:49:0c:6e:bb:ef:2c:55:f2:70:a3:
6e:79:5a:de:fc:33:f2:34:ff:21:e2:be:79:bf:54:81:93:b6:
7b:fe:d1:ee:7f:70:fa:39:53:cb:ae:d6:fb:a2:f5:5f:82:67:
2e:f4:f3:9b:2a:f7:5c:34:61:20:a3:57:d3:2e:52:1c:13:12:
6b:66:65:75:dc:4c:ca:4e:3f:cf:a2:5f:24:df:12:1f:cb:cd:
1a:91:d8:ed:e4:f0:06:0a:b7:dd:61:f5:70:16:f2:84:ef:48:
ce:55:dd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:36:38 2026 by rpki-client