Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
File: xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft (raw, json)
Hash identifier: BUujSsgCsbmapphczFArvpKQBuAcdbM39XfBX0lvAus=
Subject key identifier: E2:DF:55:68:90:37:CD:01:EE:01:E0:52:EE:FB:43:ED:84:51:31:8D
Authority key identifier: C5:0E:EA:13:07:21:E9:CD:19:76:FD:7E:0F:34:C9:6D:F6:EA:C6:B0
Certificate issuer: /CN=c50eea130721e9cd1976fd7e0f34c96df6eac6b0
Certificate serial: 019D284D8B8E16F072B093CB4729A63FF50B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
Manifest number: 05EA
Signing time: Thu 26 Mar 2026 04:01:03 +0000
Manifest this update: Thu 26 Mar 2026 04:01:03 +0000
Manifest next update: Fri 27 Mar 2026 04:01:03 +0000
Files and hashes: 1: 2DuCV_W-U_DjGo5XDf9E-S3sShM.roa (hash: cc9HcaIk4ywCecPBpWCavoWGQGYzOyoXbURNvhX6CYg=)
2: UF4pzZ4nyW6OV0vWDdSDtWl2FC4.roa (hash: i7rT7fXaiMm+2WOfWQg8Ficq8leAUCxuWRS6LiqQgSo=)
3: xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl (hash: 3joJXR9OGOJ8RB8OqmSedDzB1wOxX03pKDEMPBo7Tr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:8b:8e:16:f0:72:b0:93:cb:47:29:a6:3f:f5:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50eea130721e9cd1976fd7e0f34c96df6eac6b0
Validity
Not Before: Mar 26 04:01:03 2026 GMT
Not After : Mar 27 04:01:03 2026 GMT
Subject: CN=e2df55689037cd01ee01e052eefb43ed8451318d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:78:7e:f8:44:b1:f4:77:76:86:73:15:3d:0b:
a7:7b:5f:60:c7:ab:03:2d:c3:55:86:34:c2:d3:54:
f7:2b:99:55:d1:8b:de:49:e2:a6:80:ea:34:9d:e5:
63:1a:33:ff:91:35:22:e8:77:5d:81:51:22:90:75:
28:a3:3e:ab:01:dc:44:bc:a7:2d:5b:0e:00:c6:52:
f0:b9:f9:da:95:2d:34:8d:13:91:1c:b7:89:57:23:
d1:bb:1c:aa:82:aa:5c:31:97:40:4b:79:3f:bf:be:
0b:dc:9f:fc:77:bc:de:bd:94:f4:fc:28:33:19:29:
db:3a:a7:12:6f:87:b0:90:37:59:89:27:65:74:b9:
de:e8:d9:60:ee:e1:20:ad:bf:04:f4:c4:3f:dd:30:
1a:8a:bd:5f:b0:15:fa:25:f8:56:f8:1c:02:92:70:
2f:c6:32:1a:37:2f:a1:96:bc:24:88:1b:e1:78:a2:
0f:3f:50:95:9c:90:79:ff:a6:11:65:5b:da:7f:0f:
89:e3:5b:36:77:66:f9:84:d5:36:05:f8:7d:2f:fb:
c9:ac:cd:ec:81:7a:7b:c4:c9:35:d3:c1:6a:57:c4:
f2:4f:ea:98:e1:06:25:84:b5:e2:c1:fe:e1:69:92:
51:8c:8f:ff:ad:3c:bf:9a:c3:4f:ab:91:96:61:0c:
74:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DF:55:68:90:37:CD:01:EE:01:E0:52:EE:FB:43:ED:84:51:31:8D
X509v3 Authority Key Identifier:
keyid:C5:0E:EA:13:07:21:E9:CD:19:76:FD:7E:0F:34:C9:6D:F6:EA:C6:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:19:6f:5b:1c:d9:5a:64:bb:60:12:11:bd:a6:9f:45:4b:2d:
ed:be:0a:e9:2a:95:23:9c:93:c1:cc:c6:67:83:59:70:46:0d:
40:d3:14:de:c9:4a:51:a5:9d:7b:3c:72:04:50:c9:db:ab:3c:
bb:49:4e:f6:92:3e:08:26:bd:b6:7b:fa:0a:88:4c:16:49:1d:
17:5c:dc:c6:d3:87:71:55:7b:86:a0:0d:ff:5c:32:3c:93:85:
dc:fc:dc:6c:6e:ed:68:87:38:74:cd:08:c4:d6:a6:a3:3a:d1:
a9:57:fe:ba:d4:4f:21:22:6a:b1:6a:1b:36:89:12:48:6c:e6:
af:16:37:15:fc:39:bb:89:73:d6:f4:50:be:5f:6f:4d:66:07:
46:df:61:bf:38:47:56:b4:ad:02:cf:85:85:1c:0c:d9:1d:c6:
92:a7:0c:de:19:a2:a2:df:be:50:80:c6:9c:58:ff:92:96:2c:
29:4a:67:cb:6e:d4:77:0d:1d:76:a2:0d:6f:89:49:d3:91:f0:
5d:58:38:d5:64:d4:5a:cd:9b:9a:c6:a6:a6:30:a2:46:ed:e2:
c5:be:10:66:93:84:bd:75:51:d9:70:09:a3:3a:7d:30:5a:6e:
20:b1:7e:15:a7:62:e1:5e:90:be:3c:5f:27:c0:4d:12:f6:af:
e4:fc:92:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:55 2026 by rpki-client