Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7eecd9-a4c4-41aa-a6ec-42ac69e5e8dc/1/xEBsnAYTL85A7cBG4GmuNFK6aOM.mft
File: xEBsnAYTL85A7cBG4GmuNFK6aOM.mft (raw, json)
Hash identifier: BmfiUSPVAriEta5iaqmfmylpQ0LiZXVcMZbTskyuXUk=
Subject key identifier: AE:1E:34:01:C6:7B:3B:6F:E5:72:46:2E:68:BB:96:B0:F1:A9:01:D7
Authority key identifier: C4:40:6C:9C:06:13:2F:CE:40:ED:C0:46:E0:69:AE:34:52:BA:68:E3
Certificate issuer: /CN=c4406c9c06132fce40edc046e069ae3452ba68e3
Certificate serial: 019D34520E4CA854255570914338A0583EE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEBsnAYTL85A7cBG4GmuNFK6aOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7eecd9-a4c4-41aa-a6ec-42ac69e5e8dc/1/xEBsnAYTL85A7cBG4GmuNFK6aOM.mft
Manifest number: 50
Signing time: Sat 28 Mar 2026 12:01:25 +0000
Manifest this update: Sat 28 Mar 2026 12:01:25 +0000
Manifest next update: Sun 29 Mar 2026 12:01:25 +0000
Files and hashes: 1: b_C6-vRVgU9-ZGu5iPetXhBiGd0.roa (hash: 2gUqRWsgOMEHr5aKvlRadKgrnBBP2u9PjUCeJ2rack0=)
2: xEBsnAYTL85A7cBG4GmuNFK6aOM.crl (hash: /OHsKHX3p+yr75L/z6yi8thmk0l+Ak4m7zM0dFQkrxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7eecd9-a4c4-41aa-a6ec-42ac69e5e8dc/1/xEBsnAYTL85A7cBG4GmuNFK6aOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7eecd9-a4c4-41aa-a6ec-42ac69e5e8dc/1/xEBsnAYTL85A7cBG4GmuNFK6aOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xEBsnAYTL85A7cBG4GmuNFK6aOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:52:0e:4c:a8:54:25:55:70:91:43:38:a0:58:3e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4406c9c06132fce40edc046e069ae3452ba68e3
Validity
Not Before: Mar 28 12:01:25 2026 GMT
Not After : Mar 29 12:01:25 2026 GMT
Subject: CN=ae1e3401c67b3b6fe572462e68bb96b0f1a901d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2c:5f:7f:79:fc:37:85:c9:83:68:47:f0:bf:
cc:9d:15:af:ea:da:f1:08:50:3f:2a:28:8b:58:55:
6e:bc:43:a5:01:ba:53:79:b3:46:39:f2:35:6e:8b:
a9:dd:18:19:61:d9:4f:4d:7c:ab:9a:59:69:fa:d0:
0d:d7:d3:56:10:9b:c5:84:4c:0e:80:23:2a:10:a2:
64:76:8b:a8:46:21:d0:2b:01:05:b3:65:9b:97:78:
99:32:ed:ae:11:ce:38:91:1a:9f:41:49:4f:90:ec:
e5:f9:82:73:bb:26:12:33:73:2d:54:ba:09:f4:09:
cc:d1:99:98:ce:02:55:c7:04:55:92:12:e3:0d:ad:
e2:a3:73:df:a3:48:32:58:9d:1c:ae:aa:a1:46:b3:
77:aa:e7:e5:f5:90:c6:51:e4:fc:73:d7:fe:55:c6:
a5:aa:ec:69:89:a1:04:52:9d:b7:bb:c9:7e:2a:b2:
40:99:4b:59:68:32:ee:7a:c2:40:c8:05:39:f6:a0:
9c:a9:69:6a:7f:52:e0:c1:7c:39:03:66:ba:60:41:
23:61:4c:f1:36:2b:e4:3a:c0:a5:a2:46:43:6f:99:
d7:47:37:74:ab:72:e9:b3:51:21:2d:01:6f:8b:23:
aa:0e:4c:20:19:4e:93:9c:38:4f:1e:47:47:71:3f:
d2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1E:34:01:C6:7B:3B:6F:E5:72:46:2E:68:BB:96:B0:F1:A9:01:D7
X509v3 Authority Key Identifier:
keyid:C4:40:6C:9C:06:13:2F:CE:40:ED:C0:46:E0:69:AE:34:52:BA:68:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEBsnAYTL85A7cBG4GmuNFK6aOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7eecd9-a4c4-41aa-a6ec-42ac69e5e8dc/1/xEBsnAYTL85A7cBG4GmuNFK6aOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7eecd9-a4c4-41aa-a6ec-42ac69e5e8dc/1/xEBsnAYTL85A7cBG4GmuNFK6aOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:23:eb:15:94:ce:5f:ee:5f:7c:51:c3:af:01:c1:0e:ef:a9:
7a:2c:25:4e:77:57:cd:51:a3:e4:c0:a6:7f:78:6e:b7:c2:27:
4b:ef:ed:ae:b1:5c:63:bb:88:87:a6:bb:fa:86:5b:c4:81:e9:
55:e1:0c:67:9d:c7:40:8b:5a:d2:5c:38:b4:c1:c2:bf:12:32:
bc:2b:3d:db:8d:5d:29:a1:3a:22:60:9c:89:af:c6:5f:85:aa:
b6:78:cc:bb:91:46:c8:88:6f:15:e8:a1:83:f0:ad:e0:d7:4e:
a4:97:c5:21:fc:fb:b6:59:59:e0:2a:cb:85:af:b3:79:1c:9f:
a2:ff:7a:d4:0a:38:20:a0:70:b1:9a:7c:d2:d1:20:f9:29:fe:
77:ae:4a:37:4c:b9:01:78:ee:32:5e:12:45:5b:35:eb:be:5f:
dc:2c:09:dc:26:6a:07:6b:4f:33:69:f3:fa:e3:cc:20:82:2a:
90:b3:50:17:3e:77:a9:15:bb:64:2c:b0:19:c4:ce:81:e5:c9:
30:5a:1a:16:89:d3:9a:8c:c2:f6:86:d6:75:d3:0a:9b:0d:25:
71:f8:d0:01:97:b3:d2:00:a7:c3:02:b4:a3:c3:17:c6:91:42:
0e:09:09:c7:56:fa:c6:6c:bb:35:32:97:8b:7e:6a:6d:af:39:
01:1d:84:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 14:29:51 2026 by rpki-client