Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
File: xaH7W7wvqFcePV-MrkGWqNfpbDU.mft (raw, json)
Hash identifier: R6YdxYYVAehEqVpkHGmqvOpafKbhB5/lqgrhNnH77+o=
Subject key identifier: A2:98:2A:EC:37:9E:65:88:BF:04:83:B3:DE:9C:34:BF:99:E3:90:8E
Authority key identifier: C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35
Certificate issuer: /CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35
Certificate serial: 019D2816C248E1EF0CFF847249189D83A70E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 03:01:13 +0000
Manifest this update: Thu 26 Mar 2026 03:01:13 +0000
Manifest next update: Fri 27 Mar 2026 03:01:13 +0000
Files and hashes: 1: jbS8RSSk1qPuBMHXiz0NFlG5gaU.roa (hash: ffpPuQq0nfWr1B/H6xQP1tfUAtvyoDxPWUAq5WEIXy0=)
2: xaH7W7wvqFcePV-MrkGWqNfpbDU.crl (hash: ZvKMk9R6wPnxiM3yRdrzRfATTIjXg4KGJFIZFDkAAjI=)
3: xo3E7B75wnW1W3d1HJPhSZevYZA.roa (hash: PthsrXu6VgY7H1QeefirkpT9auw29AQ4kvdF+HY+Frc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:c2:48:e1:ef:0c:ff:84:72:49:18:9d:83:a7:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35
Validity
Not Before: Mar 26 03:01:13 2026 GMT
Not After : Mar 27 03:01:13 2026 GMT
Subject: CN=a2982aec379e6588bf0483b3de9c34bf99e3908e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:41:35:ed:08:e6:5b:b2:52:0a:a6:d9:f3:4f:
80:93:4e:2a:dd:d2:17:09:68:e6:5e:79:94:eb:1b:
0a:73:9c:69:77:57:90:70:b7:1b:ef:4d:c2:9b:e9:
3c:a9:9e:ef:3f:88:43:fb:9f:b4:c7:6b:3d:f9:4b:
28:90:6d:3c:03:8e:66:fa:c4:2b:99:fd:27:c3:0c:
eb:23:dc:71:53:de:52:d1:44:08:fd:04:7d:e4:fb:
4e:a9:3b:54:e6:b9:bb:10:5b:35:3e:ec:75:7c:21:
13:4c:d8:30:9d:1d:af:29:0b:52:29:34:b0:89:7d:
77:0a:b4:88:7d:3e:0c:2f:23:33:2f:98:6d:b1:bd:
d0:ce:c3:cc:45:4a:17:60:4e:8c:ae:9e:f2:ce:ff:
db:25:1d:21:40:37:47:af:bd:50:ba:26:48:30:d6:
84:13:35:52:80:78:73:6f:3f:32:2d:9f:0c:62:2f:
54:d0:c1:1f:90:fe:f3:7c:3e:8d:ba:52:78:91:b5:
d3:28:65:e9:07:00:c8:90:f1:db:13:db:f7:be:cb:
90:d0:f0:fe:11:70:59:9b:de:75:d1:2b:e9:93:74:
4c:ce:4f:e0:b9:c9:fb:f4:aa:17:2f:2f:84:9b:0e:
d7:9d:79:cc:e0:86:2e:ab:5e:be:2d:4c:3c:52:47:
13:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:98:2A:EC:37:9E:65:88:BF:04:83:B3:DE:9C:34:BF:99:E3:90:8E
X509v3 Authority Key Identifier:
keyid:C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:10:92:28:7c:07:e3:ef:95:ed:66:8a:e7:23:52:d7:de:db:
fd:9b:b6:20:2f:a8:c2:8c:e6:05:63:8f:f0:54:2c:d6:70:72:
4f:0a:51:fa:0e:31:9d:3f:2d:e0:02:ea:74:9d:fa:d0:db:8f:
28:b2:f9:69:43:27:e5:2c:a2:b7:88:b4:e6:ea:7d:29:fa:33:
43:5c:e2:85:fa:cb:a4:07:c9:c8:64:a9:0d:c5:07:ac:81:18:
7b:66:05:9a:10:9a:5c:9e:e2:2e:56:68:ab:e6:ec:e7:96:f6:
1a:82:3f:ab:85:bf:20:f8:07:6e:b0:d1:96:91:d6:e6:9c:f4:
d4:01:e2:c7:88:20:c7:2c:a3:eb:4b:8e:54:80:8e:c0:a8:9a:
9d:e5:56:b9:56:6f:38:ad:15:6d:af:8d:17:7a:46:a7:51:39:
af:12:86:d3:50:77:8c:8e:02:79:b0:ff:c5:67:43:29:79:35:
d5:bc:6b:dc:cb:98:d6:20:72:5f:bf:e3:f3:d8:3d:2d:97:b6:
78:2a:e4:e0:d0:7b:b8:72:fd:f4:8c:1b:0f:24:8b:81:97:15:
7f:13:90:01:96:27:d3:ef:78:dd:00:a7:6d:1d:93:2f:94:a8:
e8:87:49:1b:5c:6f:0e:61:d2:40:29:c2:cc:10:ce:ab:67:19:
aa:fd:fb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:47:41 2026 by rpki-client