Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
File: xrbwexczYPIV8VGMhxKksFTYXAc.mft (raw, json)
Hash identifier: WitfqpfsZDJ49uGo7VQSIC5prEGXiAvVGQ18tslCdT0=
Subject key identifier: CE:E5:F0:E1:54:C8:74:05:86:57:2F:54:93:93:FC:94:5F:D3:F3:B6
Authority key identifier: C6:B6:F0:7B:17:33:60:F2:15:F1:51:8C:87:12:A4:B0:54:D8:5C:07
Certificate issuer: /CN=c6b6f07b173360f215f1518c8712a4b054d85c07
Certificate serial: 019D26284FE09A115ABA6D33EAF969C6ED76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 18:01:09 +0000
Manifest this update: Wed 25 Mar 2026 18:01:09 +0000
Manifest next update: Thu 26 Mar 2026 18:01:09 +0000
Files and hashes: 1: lXZ70sH06yN7K7WcAZYGhagQGQU.roa (hash: eJ37tNCDP1cEuP29zNg/vJT6DSno9tiJhEXL9Ek6IDY=)
2: xrbwexczYPIV8VGMhxKksFTYXAc.crl (hash: IOuLojnq0M1gZ+MTScw2Mts4xhBY48eDch8t34zKSF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:4f:e0:9a:11:5a:ba:6d:33:ea:f9:69:c6:ed:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6b6f07b173360f215f1518c8712a4b054d85c07
Validity
Not Before: Mar 25 18:01:09 2026 GMT
Not After : Mar 26 18:01:09 2026 GMT
Subject: CN=cee5f0e154c8740586572f549393fc945fd3f3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7c:0f:53:c3:f5:1b:6d:07:b0:ac:a0:a8:74:
b1:7d:bf:b5:1a:b6:e7:93:18:f4:66:db:99:b8:68:
6a:4d:ea:bd:96:c5:75:a8:5b:18:f8:8c:61:a0:54:
df:e0:fb:3c:37:80:c6:71:41:a0:f6:78:1e:ff:8c:
d5:24:6c:3a:58:c8:51:51:89:fc:54:33:d7:3f:65:
32:0c:fd:d1:a5:f1:21:d3:32:c5:8e:b9:68:46:cd:
ae:87:3d:64:10:31:b8:55:ab:7e:53:80:ce:ec:57:
3b:e6:18:e2:31:fb:89:34:bd:3e:44:39:09:38:14:
e8:1b:33:38:66:17:a2:0f:24:ba:47:8b:1b:c5:9d:
41:ec:89:fc:8e:78:c9:64:86:f1:4a:45:3f:00:0c:
11:fd:5a:3e:68:a1:7f:0d:b7:ca:8e:03:8d:90:61:
b9:05:d3:77:7f:55:9a:0a:eb:6e:1d:ef:e9:aa:96:
9c:f9:8e:c4:77:b5:eb:26:c7:fa:e6:8f:7f:7b:cf:
ff:a7:27:df:66:87:f9:37:55:86:f4:32:95:ba:17:
47:93:ca:ab:a7:64:f6:62:8e:b2:dd:82:86:9c:dc:
39:42:ff:5b:0b:a6:dd:48:97:ab:9b:17:49:c9:9b:
d6:44:c0:85:99:65:e6:69:a7:bc:be:20:43:a5:af:
41:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E5:F0:E1:54:C8:74:05:86:57:2F:54:93:93:FC:94:5F:D3:F3:B6
X509v3 Authority Key Identifier:
keyid:C6:B6:F0:7B:17:33:60:F2:15:F1:51:8C:87:12:A4:B0:54:D8:5C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:de:fd:2b:d3:ad:8e:fe:3b:91:96:f9:ea:c5:b1:09:3d:7e:
4e:ed:95:6b:ef:d5:9e:26:1f:3f:64:ae:47:3b:27:07:af:ca:
e5:24:1c:dd:b0:3b:22:43:d5:58:f6:74:1e:1b:c5:15:10:cd:
b4:be:88:92:fd:b8:46:d4:f4:7c:fb:e4:92:e1:ab:2b:05:6c:
ef:15:6b:e0:41:7e:ac:86:de:25:72:2a:47:46:bc:3e:31:7d:
e3:c0:5d:b5:40:e9:6c:84:8c:3a:1d:f2:56:15:1a:bf:d3:8b:
74:80:8f:53:d9:f5:c5:47:f4:b8:7f:62:71:5e:b1:63:03:8d:
66:3b:3a:22:5b:24:f5:b0:a4:71:1e:ed:ed:6a:1a:d4:75:f0:
51:54:5e:42:9b:db:60:c1:d7:56:f9:84:6a:b5:31:15:17:2a:
c8:17:2d:df:38:30:2d:04:3e:00:af:af:99:a2:66:be:cb:3c:
89:75:44:f1:f9:f8:6a:cc:79:41:5b:d6:81:3a:e9:f8:72:5c:
04:eb:cd:91:d1:78:fb:d2:04:8f:9b:26:64:43:b5:78:db:fe:
fc:bc:bd:3a:2a:1d:94:48:12:45:9b:d8:49:ff:56:2f:fe:f3:
02:9b:98:25:3b:e4:f0:5f:df:7a:fe:73:3e:ec:b7:73:25:c1:
e8:57:00:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:11 2026 by rpki-client