Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
File: xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft (raw, json)
Hash identifier: EE96iM7N7nBP4XwnrTQrZB1ET4/1M0+odhaem27tEzE=
Subject key identifier: BF:91:A6:04:61:80:F5:7B:F7:ED:34:91:7A:D5:0E:AE:6A:17:4E:5E
Authority key identifier: C5:0E:08:01:82:3F:19:D5:1B:96:2A:B6:D4:EB:BB:C2:7D:D4:ED:96
Certificate issuer: /CN=c50e0801823f19d51b962ab6d4ebbbc27dd4ed96
Certificate serial: 019D27A88359A9AB73EA29CB17DEEDC11DC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
Manifest number: 0E91
Signing time: Thu 26 Mar 2026 01:00:48 +0000
Manifest this update: Thu 26 Mar 2026 01:00:48 +0000
Manifest next update: Fri 27 Mar 2026 01:00:48 +0000
Files and hashes: 1: 28OK2J3AhlsvkP5KX5FGL4PLk4k.roa (hash: sLJmlSxlUCogmrsIa1DupMYliLkoDK/6nUhbL0KQoh8=)
2: xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl (hash: oM1FPIqBXeEvkRM0jeJQJnTdEmbFGbvwi+c0adXypgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:83:59:a9:ab:73:ea:29:cb:17:de:ed:c1:1d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50e0801823f19d51b962ab6d4ebbbc27dd4ed96
Validity
Not Before: Mar 26 01:00:48 2026 GMT
Not After : Mar 27 01:00:48 2026 GMT
Subject: CN=bf91a6046180f57bf7ed34917ad50eae6a174e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9b:3c:62:ab:6e:2f:f5:7e:25:4f:08:0d:3e:
50:89:cb:7b:03:88:83:61:00:77:20:8a:48:34:5c:
7a:8a:db:4c:5d:a1:e4:3b:b3:c2:4c:ce:9e:ce:0a:
05:3c:5c:60:da:78:2e:32:e2:61:5a:ab:e8:db:7b:
37:64:31:08:26:95:76:9e:ff:73:33:68:bf:59:33:
a8:40:e3:cd:f6:83:8b:44:da:6b:dd:a0:79:48:50:
ea:2b:12:b8:02:ab:e8:37:4c:76:67:d3:fa:59:55:
1f:30:ea:c3:45:1c:24:8f:f1:6f:54:87:19:6b:26:
f8:dd:89:fd:ec:34:d5:af:d8:4d:0b:a7:3c:d9:4b:
90:fe:bb:f4:0b:f2:5e:a8:6f:df:ea:c7:39:71:cd:
23:a1:be:bf:a1:73:e5:52:79:4c:b1:c4:68:79:bc:
47:f1:6b:22:d4:d8:36:a2:49:5f:99:27:07:a6:d3:
a3:b2:a6:47:f6:d7:99:90:12:d2:0b:7c:a7:a1:b1:
be:69:d6:e2:f3:ca:c0:19:43:0e:d7:b4:62:47:36:
ac:2d:ec:87:bf:52:08:6f:e4:62:81:91:cf:c1:e0:
47:0c:e0:d0:ff:94:c7:2a:80:d9:99:5d:8b:fb:97:
eb:0c:a9:aa:2d:7f:1c:6c:53:bb:1f:ac:1a:c1:6b:
61:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:91:A6:04:61:80:F5:7B:F7:ED:34:91:7A:D5:0E:AE:6A:17:4E:5E
X509v3 Authority Key Identifier:
keyid:C5:0E:08:01:82:3F:19:D5:1B:96:2A:B6:D4:EB:BB:C2:7D:D4:ED:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c6:1d:68:61:c8:c2:6d:ea:71:90:c9:0d:52:aa:3c:fd:bc:
cf:6f:87:cb:45:ff:4c:2e:d3:4c:ee:13:28:76:73:eb:36:70:
05:c2:b3:b5:8a:ce:3a:b0:bf:e6:98:09:78:1e:1e:de:d9:90:
95:52:72:b4:b7:9b:8f:62:e7:ba:42:a5:57:a1:86:d0:6f:ca:
45:1a:ea:5d:e0:93:b7:aa:af:fd:b5:ac:c7:f2:a0:59:18:b3:
63:18:45:58:9b:f1:f7:07:d4:b8:4f:4c:98:87:4e:48:8b:2b:
56:f4:84:ce:bb:d3:7d:f5:00:fa:b6:1c:f3:72:8e:8b:e6:0b:
d4:99:82:f2:e3:bf:3e:b1:ff:cb:b4:c4:0e:7b:6c:65:f1:28:
2a:fc:d6:96:d0:5d:a3:31:52:31:ca:bd:af:ef:21:f7:56:d9:
b0:a1:f4:90:21:11:5c:27:2b:1a:74:ff:c0:95:94:e7:09:3f:
2a:e2:3b:19:97:4b:a5:f8:08:c5:d8:06:01:00:66:7f:d9:b5:
16:0d:54:fe:b9:61:1d:a3:7b:90:98:12:1a:a5:75:74:c5:2d:
c5:80:f4:ad:80:98:a4:88:73:e9:2f:d6:67:4c:61:a2:5b:5d:
10:b8:98:97:ef:31:5e:31:49:1a:1e:88:7b:cd:ae:c1:d6:a8:
60:35:bf:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:04:36 2026 by rpki-client