Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
File: xBCR00cDwD74-NKcu9zZjD5wb4Q.mft (raw, json)
Hash identifier: gLHiga4RERz7s14480dAxf/SCcAC4EjN/5OeGGKHdpo=
Subject key identifier: 51:8B:20:35:F9:35:2C:7D:D4:6A:38:80:25:E7:57:CC:77:65:86:55
Authority key identifier: C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84
Certificate issuer: /CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
Certificate serial: 019D2AE11C60D41F06E717CA1CED33B384A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
Manifest number: 0DEB
Signing time: Thu 26 Mar 2026 16:01:28 +0000
Manifest this update: Thu 26 Mar 2026 16:01:28 +0000
Manifest next update: Fri 27 Mar 2026 16:01:28 +0000
Files and hashes: 1: wj36KuC4KkbAWGdbhxPcToGipcw.roa (hash: /SiPmXieUUyR1/NuMTzivGKUx8ZGueEIDbGfwzhdLBk=)
2: xBCR00cDwD74-NKcu9zZjD5wb4Q.crl (hash: fmJtYP/4mXbucpjH0/wCgNcj4Bl+QbRhMUnjN7iyC/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:1c:60:d4:1f:06:e7:17:ca:1c:ed:33:b3:84:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
Validity
Not Before: Mar 26 16:01:28 2026 GMT
Not After : Mar 27 16:01:28 2026 GMT
Subject: CN=518b2035f9352c7dd46a388025e757cc77658655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b0:4b:89:dc:9f:52:b0:b0:9f:fe:1c:da:5a:
fd:04:14:d5:c3:bd:b1:83:44:e2:f9:b4:46:5a:df:
d6:83:35:82:9a:5a:23:e7:1d:fa:48:50:19:9b:4a:
a8:ee:8b:41:b2:4d:2f:3b:2a:6d:7b:e5:bf:ba:72:
78:a9:81:99:af:3d:92:ca:55:62:8f:61:cc:ab:80:
e5:32:d9:09:1d:7b:c1:75:3f:44:0a:2c:fc:98:9e:
69:dc:52:bd:c4:d4:3d:ba:7f:6b:b8:d1:26:63:ee:
ea:80:87:41:a3:ee:56:95:0c:44:0e:50:a1:10:48:
a6:e1:5a:d3:1f:ff:2c:50:db:cb:5a:2f:8b:27:1e:
e5:e4:fb:ba:8f:bc:87:87:3c:6c:40:3b:12:7b:92:
a2:e9:c8:6c:36:f6:a7:d2:6d:b7:9e:20:f8:96:cc:
2f:06:98:80:f7:3d:30:19:1d:86:f8:e2:e2:ff:ed:
94:4b:c9:a0:79:c5:69:9b:87:b6:18:65:ec:23:1a:
61:57:b3:d6:9a:48:df:96:35:87:58:58:aa:0b:1b:
db:01:0f:a1:94:54:9b:06:0a:ed:3e:d7:74:21:a7:
56:06:e8:b9:48:f9:84:aa:7a:f3:ea:09:f2:1d:f1:
57:c3:97:fc:aa:cd:ed:fd:aa:38:45:31:3a:32:2b:
09:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8B:20:35:F9:35:2C:7D:D4:6A:38:80:25:E7:57:CC:77:65:86:55
X509v3 Authority Key Identifier:
keyid:C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ab:72:ff:9e:0b:4b:3a:f5:6e:1d:63:2d:b6:ef:ae:ae:0a:
98:bc:fd:14:60:f4:27:5f:c9:14:fc:2c:43:24:c4:c7:1d:95:
58:99:cb:fa:5b:66:7c:cc:24:2e:e2:5f:a8:4d:28:bb:7a:84:
eb:a6:35:40:3d:3e:ad:5f:ce:32:b9:e9:c4:29:5d:30:4b:84:
aa:45:bc:67:d8:1f:ef:67:5f:40:28:bb:ca:27:92:e6:ee:59:
5c:e1:ab:41:7c:47:04:b4:e9:50:d8:10:2d:6e:b1:f6:7a:40:
3a:fe:1c:31:d9:c9:11:e9:9c:eb:ed:17:e2:af:05:33:a2:d5:
a0:91:27:63:6b:b4:28:2d:71:39:84:db:71:12:07:54:d4:d5:
08:bb:d1:8f:b0:80:52:76:7f:a7:86:90:c2:99:29:74:da:1e:
10:54:be:39:9f:76:d8:9c:a8:77:80:cc:11:40:c9:31:b6:26:
ec:33:01:0e:51:f7:6f:38:fb:6b:50:c1:1f:5a:82:d0:3f:0c:
bd:46:a3:ea:13:d5:27:d6:03:ad:fb:c4:e4:5f:0e:38:31:f0:
2d:6a:ab:09:66:3b:9b:85:ab:6a:e8:78:ed:d4:e2:67:01:b7:
4c:1b:de:47:cc:d7:e9:ee:1f:6a:a9:58:de:90:aa:73:c5:6b:
4c:a0:1e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:20:58 2026 by rpki-client