Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
File: x-2m5S-HeWCp4PvJPmg_5khKawQ.mft (raw, json)
Hash identifier: UxQy713HK/DFMdzbkX9KvSBYp/207hqobPRrdD+1Dpc=
Subject key identifier: CF:3C:B0:3E:62:48:1C:CB:8B:E9:9A:68:C9:53:AE:85:27:5C:E9:D5
Authority key identifier: C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04
Certificate issuer: /CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04
Certificate serial: 019D26CDA6F485AC9DC2B5F1147533013078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 21:01:44 +0000
Manifest this update: Wed 25 Mar 2026 21:01:44 +0000
Manifest next update: Thu 26 Mar 2026 21:01:44 +0000
Files and hashes: 1: XZNXCKIqVDgpPc7kS3zYiOP2yVE.roa (hash: rxN9jO9dfAmhC4tVQzEusEgOoOYY+A90wdSvN0MmV5g=)
2: x-2m5S-HeWCp4PvJPmg_5khKawQ.crl (hash: Qi8ARNx6ZQcOg6ReROW8PT5O5DyoVHg+kJ2477AlhoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:a6:f4:85:ac:9d:c2:b5:f1:14:75:33:01:30:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04
Validity
Not Before: Mar 25 21:01:44 2026 GMT
Not After : Mar 26 21:01:44 2026 GMT
Subject: CN=cf3cb03e62481ccb8be99a68c953ae85275ce9d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2a:b0:d0:af:f0:87:f0:a6:ec:61:36:71:34:
28:02:a3:3c:61:65:a6:48:57:c5:81:bb:a5:d1:cb:
6f:16:ef:41:5b:8a:23:cd:8b:43:c3:57:43:dd:70:
7d:b0:2b:20:2c:b9:e0:3e:75:af:12:4a:0a:94:5a:
b0:b4:b9:f0:43:b6:2f:83:d5:23:a7:41:d7:74:32:
45:c5:e8:45:5f:a0:c9:84:5a:c3:91:c5:6d:3d:06:
ae:32:51:71:16:0d:a4:ad:f8:f6:0c:8d:db:99:30:
79:15:c3:cc:a5:4f:bb:81:b3:a7:6f:09:ce:7e:32:
3e:1c:4b:cc:3e:7b:8e:11:ec:b5:b2:90:34:8b:d8:
33:8c:75:ed:11:61:81:ee:fc:40:c7:da:0f:2b:19:
30:df:4c:d7:d8:62:99:36:ad:8f:93:91:12:f2:c7:
a3:27:fd:5a:93:e3:25:1c:82:92:67:47:5a:ac:88:
18:43:a8:0b:aa:68:79:85:d8:84:cd:26:99:b5:8f:
93:c1:68:41:76:22:dd:dd:fa:fd:26:b8:94:f6:52:
64:d4:32:95:62:76:cc:bb:86:f9:35:3d:fd:2d:34:
7f:37:f9:86:71:ce:6b:32:6b:b2:fd:d5:a6:1f:19:
e7:48:b0:31:a3:14:7f:00:c3:e1:33:d1:b5:61:e6:
ea:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3C:B0:3E:62:48:1C:CB:8B:E9:9A:68:C9:53:AE:85:27:5C:E9:D5
X509v3 Authority Key Identifier:
keyid:C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e0:de:47:ed:c8:1f:15:8b:7c:1c:13:fa:38:34:67:d0:87:
b9:24:94:b2:46:70:5a:ba:ec:de:8c:19:2f:d3:da:5c:9e:f6:
59:6d:cc:69:8e:28:86:c8:39:b0:84:d5:48:de:1b:84:b8:9b:
9b:93:14:81:9b:91:2d:b6:16:04:3f:53:c2:da:5c:82:8e:d0:
25:9f:72:bc:76:c3:59:bb:78:c1:e3:14:f6:58:11:55:d8:b3:
b1:b3:e6:f9:e6:c5:cf:46:0a:d9:9b:ec:fa:04:c9:dc:4b:db:
75:db:9c:8d:61:95:ee:35:c1:23:f6:34:b9:84:d8:5f:aa:94:
19:e7:37:82:32:dd:cb:44:39:21:15:23:1a:3e:50:f9:74:45:
ee:3d:01:16:46:dd:3f:1b:45:70:d7:b6:c4:ee:19:53:af:27:
2e:99:76:50:73:85:8d:9e:2e:9e:df:89:68:9e:21:4b:d5:3a:
44:3e:b1:57:49:dd:59:d9:8c:89:d8:a4:14:af:bd:2e:86:b9:
1b:4d:79:eb:51:e8:49:90:dc:f3:13:b7:56:ad:75:db:1e:0d:
14:99:42:18:9b:96:4b:40:a7:05:81:3f:96:4a:5a:b5:e2:3d:
fc:53:76:9f:71:52:f7:10:a8:fa:4b:00:7a:0b:8d:17:67:39:
b7:bb:36:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:37:18 2026 by rpki-client