Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
File: Xka_H_gWvgukxiFxI0IzCp-ti9o.mft (raw, json)
Hash identifier: 0oV3Jpc7Aav3/IsqThb+FYJB4PiD9Xocjfm8gD7ATQo=
Subject key identifier: 1B:47:67:A6:09:6E:2F:A1:B0:37:91:FD:BB:7E:A9:86:6F:83:25:62
Authority key identifier: 5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
Certificate issuer: /CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Certificate serial: 019D265FABFD41F9DC78ABAC05E095C1A669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
Manifest number: 18B0
Signing time: Wed 25 Mar 2026 19:01:37 +0000
Manifest this update: Wed 25 Mar 2026 19:01:37 +0000
Manifest next update: Thu 26 Mar 2026 19:01:37 +0000
Files and hashes: 1: Xka_H_gWvgukxiFxI0IzCp-ti9o.crl (hash: eC+zD6UPrs9MohNlQxYuXrlS8AklToihvyxKjx2J6iE=)
2: coRfEXrfHGck2d3kTCu4-WIF828.roa (hash: seMqqalk2GBduoeIME3C50KibF4OKg4MDnKjSiFIduo=)
3: sVAfKvrvvhMbIUsWh385vVnIquc.roa (hash: M9eQGOQqKf4XTtZds1m1OGeYS0UwjPbRi7yLdnFl6LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:ab:fd:41:f9:dc:78:ab:ac:05:e0:95:c1:a6:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Validity
Not Before: Mar 25 19:01:37 2026 GMT
Not After : Mar 26 19:01:37 2026 GMT
Subject: CN=1b4767a6096e2fa1b03791fdbb7ea9866f832562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f3:b9:d1:e4:20:64:e0:74:18:cf:d3:a4:66:
9f:b2:92:06:c9:cf:57:95:ec:4e:a7:9f:b7:70:60:
4d:13:cf:ac:dc:56:85:a7:1c:65:e1:b9:e8:ca:93:
29:84:98:ef:f0:30:e0:00:cb:1a:15:77:1a:48:21:
de:d4:4c:96:58:fd:89:eb:43:11:7a:8f:05:a2:ca:
6c:97:90:9b:48:8f:78:5e:e3:f7:93:35:73:3a:d4:
c8:94:5e:93:0a:60:50:2a:ad:df:19:3b:ba:20:13:
0d:7b:90:da:d0:77:71:bb:13:c1:63:6f:1f:4c:ee:
ba:e8:02:08:6b:20:d6:4b:a0:09:5a:2d:16:6c:9c:
22:30:08:6d:e3:c9:75:df:60:3d:63:ac:b7:35:d4:
82:f1:7a:3b:7c:f1:46:d2:ae:f0:84:7d:d9:5a:66:
63:ac:84:cc:df:fd:9e:ef:45:48:7e:da:2f:e2:fc:
67:b3:d2:f6:7d:e6:d5:16:6b:89:05:19:76:57:44:
4b:cb:b1:b5:c7:32:57:f0:7c:d1:72:8f:28:6f:b4:
1b:87:af:0e:83:b5:a5:ac:50:4e:00:b0:7a:d7:e6:
66:01:a3:27:00:a0:42:b8:d5:fe:df:a4:d8:8a:04:
20:61:96:12:25:57:75:ab:ed:1d:79:f2:3c:d2:21:
4f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:47:67:A6:09:6E:2F:A1:B0:37:91:FD:BB:7E:A9:86:6F:83:25:62
X509v3 Authority Key Identifier:
keyid:5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:9a:9c:89:19:0a:72:dd:fd:ad:88:9d:46:53:31:8f:72:04:
e8:a1:65:a0:b1:55:eb:3e:e1:cd:e1:cf:f9:87:74:fa:0a:38:
c0:1f:d6:6b:90:d4:34:31:67:d9:0f:64:cb:06:f3:47:21:66:
83:89:53:eb:f4:73:f1:d5:ef:be:f7:25:9e:80:a4:6a:a4:cf:
7f:37:9d:8f:f5:53:1c:17:a4:70:04:1b:5b:89:be:1b:83:f7:
a0:a2:11:4d:80:e0:68:07:3b:8d:49:03:f1:f2:c8:4e:c2:f4:
dd:d4:98:18:f6:17:b2:d3:c3:80:71:48:e0:de:7b:ea:da:0c:
1a:9a:69:6f:ad:53:16:4d:e0:44:bf:0b:22:a1:63:e9:ab:dc:
c2:6f:2a:3b:38:6f:a3:f2:38:72:14:c7:67:a8:08:b3:83:3d:
dd:d4:0e:01:3b:93:04:d5:5b:1e:95:6e:37:77:25:fb:c2:09:
69:71:b7:18:ff:5e:2f:9a:3f:80:0c:82:22:d8:20:a8:44:7b:
fb:cc:d2:92:8c:76:33:c5:53:6e:08:e1:d0:1b:2a:9b:7f:7e:
35:c7:2e:41:0d:b3:89:be:d2:ff:71:26:b1:00:fa:9d:e6:50:
78:d1:b4:35:51:31:4f:09:9e:ff:e2:82:bf:a0:4f:96:3a:a8:
f2:3d:54:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:31 2026 by rpki-client