Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
File: _xwhiBHZKUrWMSU6RF7R05WpY58.mft (raw, json)
Hash identifier: r1ptsWlHw95VO70o5OnKW2OXjqeea3Bcc/XrDZw1DB0=
Subject key identifier: 36:14:6A:9D:9C:02:DF:8F:89:AE:E5:BF:CE:AC:7B:5B:5F:B8:BC:49
Authority key identifier: FF:1C:21:88:11:D9:29:4A:D6:31:25:3A:44:5E:D1:D3:95:A9:63:9F
Certificate issuer: /CN=ff1c218811d9294ad631253a445ed1d395a9639f
Certificate serial: 019D269632EC9EFCCDA07871146594778551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
Manifest number: 16E1
Signing time: Wed 25 Mar 2026 20:01:10 +0000
Manifest this update: Wed 25 Mar 2026 20:01:10 +0000
Manifest next update: Thu 26 Mar 2026 20:01:10 +0000
Files and hashes: 1: IewQ4-Em8YPzzj6aKGxcrGBWA00.roa (hash: d+3Wy6JFrqiHOg5/dyS0zErOjSAHU2d4zx1E1Uy5i+w=)
2: _xwhiBHZKUrWMSU6RF7R05WpY58.crl (hash: U/lKtm7VMmtYRUEMnHtvTRt7QeGaLATvyXZnjTDW+x0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:32:ec:9e:fc:cd:a0:78:71:14:65:94:77:85:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1c218811d9294ad631253a445ed1d395a9639f
Validity
Not Before: Mar 25 20:01:10 2026 GMT
Not After : Mar 26 20:01:10 2026 GMT
Subject: CN=36146a9d9c02df8f89aee5bfceac7b5b5fb8bc49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ed:27:09:49:66:18:60:95:b7:c0:f0:59:b8:
3a:f1:b0:a1:00:89:82:e4:93:84:15:fb:a5:59:46:
79:43:d4:89:7e:4c:8e:bd:38:51:75:fc:ba:f6:67:
7b:72:63:94:5d:ec:a6:44:2c:15:fd:3a:82:ae:37:
00:02:3f:3d:82:0d:01:f4:d0:81:e6:1e:e5:38:22:
59:9c:2b:60:3f:91:d8:2d:14:33:a6:7b:19:89:e0:
f1:88:04:fc:c6:b9:d9:d9:6c:44:d5:b5:f3:5c:9c:
c0:1f:d3:25:42:84:eb:6c:9f:0b:e4:9f:b2:a4:3f:
dd:07:ce:da:7d:26:48:e7:1d:d3:e8:0a:ed:50:36:
ad:b3:83:bd:62:64:ea:8e:f9:31:36:09:d8:2b:0c:
db:f9:c3:e0:29:b1:74:01:2f:df:a1:82:fd:30:b1:
d7:97:ad:f9:96:d2:0a:c3:f2:b8:b3:91:69:4a:1a:
60:f0:23:fe:13:6e:88:ee:af:72:db:15:17:48:eb:
84:89:cb:b3:5c:46:1a:70:e4:cc:a5:7b:eb:1a:af:
85:e5:aa:f1:ab:e4:36:fb:c5:a6:2a:35:4e:3e:43:
7b:cc:e3:63:1b:bd:e2:18:72:6a:5b:a2:19:54:a9:
55:37:6c:93:ed:41:dc:f9:3d:a0:09:e9:9a:3b:87:
6d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:14:6A:9D:9C:02:DF:8F:89:AE:E5:BF:CE:AC:7B:5B:5F:B8:BC:49
X509v3 Authority Key Identifier:
keyid:FF:1C:21:88:11:D9:29:4A:D6:31:25:3A:44:5E:D1:D3:95:A9:63:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ef:92:c9:f4:8c:6c:7a:c6:9e:c8:6e:d2:55:bd:a9:07:5b:
da:ef:1c:f5:86:a8:df:02:31:33:8d:c7:f9:43:95:c2:f2:08:
83:71:97:0b:e2:10:8d:d1:ba:3f:59:0c:49:dc:8e:19:5f:82:
4a:bb:8a:fd:af:48:ae:62:be:0b:1c:1a:42:22:c9:95:38:c0:
ea:be:f8:6d:a0:e7:ae:65:be:7a:f7:25:44:e3:35:58:47:5a:
51:a1:8e:aa:94:0f:9f:e6:0d:37:2f:cb:2c:e6:d4:c4:bd:17:
4a:37:f3:97:b8:6f:b8:a1:d8:80:53:24:38:07:6c:55:fe:27:
5a:1e:fa:16:dd:94:9b:66:e7:db:74:87:53:0e:b7:3f:90:f7:
25:32:ff:34:85:70:81:0d:7d:e0:05:dc:83:26:3b:21:a1:ed:
b0:ca:0a:4f:95:0e:1d:27:f9:48:32:eb:40:b7:36:de:44:ef:
cb:0f:3b:b4:d6:39:bf:54:f9:27:44:c0:e4:a5:3e:27:59:8a:
1e:3f:4e:85:c4:bc:6a:0b:c5:ca:d1:ab:fe:3e:ba:7f:a5:1a:
02:7d:70:70:e7:25:64:3a:a6:79:53:ed:e0:19:91:3b:c2:5a:
ce:49:33:c2:d0:d4:e5:1d:ca:53:b8:74:29:92:12:6e:25:3d:
79:45:08:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:05 2026 by rpki-client