Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
File: xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft (raw, json)
Hash identifier: V8+5OXy7xbOjv9NKiVTOEl7kyyo6H+HbGoJ4utXYG8E=
Subject key identifier: 61:82:1D:87:61:AC:42:C4:24:CF:7C:94:C5:9D:30:02:28:C5:B3:AD
Authority key identifier: C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84
Certificate issuer: /CN=c53435f4be2c543bf3483e377f80314d28230184
Certificate serial: 019D27E049931458E170CDC9AD96E3BBE534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 02:01:43 +0000
Manifest this update: Thu 26 Mar 2026 02:01:43 +0000
Manifest next update: Fri 27 Mar 2026 02:01:43 +0000
Files and hashes: 1: 3gfFN41_-V5KCVj9bLCnPzDA4Sg.roa (hash: feVZbY6ZTCnUm+ks82CSr0rpu6G60t2RiQeNmO5z3TE=)
2: xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl (hash: Clhh+udXeyA5iWOP3NVRE1LGBPCQcN4jUptqnFePAOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:49:93:14:58:e1:70:cd:c9:ad:96:e3:bb:e5:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53435f4be2c543bf3483e377f80314d28230184
Validity
Not Before: Mar 26 02:01:43 2026 GMT
Not After : Mar 27 02:01:43 2026 GMT
Subject: CN=61821d8761ac42c424cf7c94c59d300228c5b3ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:40:16:98:cc:50:de:a8:7c:eb:a5:ce:78:f1:
f0:17:ee:9c:9d:6f:b1:95:78:68:44:d6:2e:8b:a9:
8f:8a:7e:bd:13:3a:03:20:7c:94:c5:ab:6a:82:41:
69:a4:c6:7f:24:1b:7c:e1:09:18:94:d8:2f:6d:b4:
e7:03:87:bb:87:63:0d:c9:67:af:9e:04:90:fb:84:
30:52:5d:b1:98:7f:e4:02:d1:8d:39:50:44:48:15:
81:43:ee:4d:f0:92:25:8e:02:a3:ba:6d:6d:f0:99:
3e:d1:0f:2e:aa:c1:39:0e:89:df:44:fe:50:06:3a:
6b:be:04:54:1c:43:44:f8:32:c4:a5:c2:77:a2:2c:
98:12:d1:d6:47:7c:8d:00:9c:48:a9:0f:10:cb:02:
22:41:2b:83:fd:1b:71:31:f2:dc:b5:66:53:54:a6:
25:7d:ce:9c:19:c5:1e:24:fe:78:97:92:a2:4e:08:
e1:73:d8:5d:1b:3a:d7:1f:cf:f5:f1:67:38:7d:aa:
eb:2e:27:4b:86:f4:d6:4b:34:3e:f3:25:85:56:a1:
7c:bc:f6:ab:5b:dc:a6:10:2e:12:82:b0:87:12:9b:
57:25:30:45:54:17:f5:e7:f5:3f:e0:ed:8a:51:4a:
e6:de:f4:5c:54:57:9c:1a:ec:6c:fb:3c:2f:70:c8:
25:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:82:1D:87:61:AC:42:C4:24:CF:7C:94:C5:9D:30:02:28:C5:B3:AD
X509v3 Authority Key Identifier:
keyid:C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:88:30:39:ff:cc:0c:a8:64:c0:67:6a:b3:dd:7f:d9:e5:ce:
7c:84:be:11:d2:0a:93:a8:08:cf:c7:8b:4a:83:c3:9f:ea:37:
82:5d:20:b5:24:06:60:5b:05:7e:71:38:93:2b:f4:a6:07:f2:
94:eb:37:c3:28:c8:8a:fa:59:dc:a8:95:fb:7b:38:e3:9a:64:
21:2b:15:e4:c5:cd:2e:00:94:00:2a:aa:68:7c:63:9d:63:b3:
16:c2:7d:e8:9b:49:8a:d9:1c:7b:5a:7f:09:d3:14:b2:82:8d:
e3:76:aa:4d:3a:6b:79:fe:b3:90:b3:7c:b3:23:97:cb:da:10:
31:bf:9f:09:ed:29:67:18:b5:dd:5a:1d:d6:f5:e3:9e:12:de:
ac:e9:97:42:0c:5d:a8:98:b1:bd:b3:b8:49:57:f1:60:91:81:
c3:c7:c7:ab:25:49:9d:f3:c4:38:04:90:78:a3:4b:ea:3a:01:
31:50:17:30:2d:10:4d:98:95:31:08:b4:85:92:92:27:b3:ce:
2d:a3:0a:c5:83:2e:22:36:a3:f1:dd:d6:0f:35:9e:e9:83:a2:
33:6d:4f:4d:9d:b0:22:8c:ca:2a:a0:a4:b3:e0:4f:a5:d6:cf:
34:de:e3:4e:50:db:cb:dd:93:ee:53:03:cd:a8:dd:f2:0b:78:
03:6c:7d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:12 2026 by rpki-client