Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft
File: Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft (raw, json)
Hash identifier: bWdJcAogOpU/XgYzrnmvy6jqZBqD5QLxmsBo93fyBnU=
Subject key identifier: 2C:BE:D1:DC:80:07:46:E8:86:0B:56:5B:EA:76:44:1A:5D:01:2D:BE
Authority key identifier: 5E:9E:D9:91:EE:6B:C4:BB:48:A8:B7:50:11:D0:48:19:17:E0:F3:F7
Certificate issuer: /CN=5e9ed991ee6bc4bb48a8b75011d0481917e0f3f7
Certificate serial: 019D277219716514948EEC1601228CF47C6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 00:01:22 +0000
Manifest this update: Thu 26 Mar 2026 00:01:22 +0000
Manifest next update: Fri 27 Mar 2026 00:01:22 +0000
Files and hashes: 1: SyWTiReTZTnBDg5JyysBSj2Ylo4.roa (hash: fZ2UZHiHpOuYHZzSoYWZDivGjx4cM7k5nd9px5ySpG0=)
2: Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl (hash: p2KLncHEEYMZiM7PM4Qlx0vkh1lQf86YGUJpCI8xQzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:19:71:65:14:94:8e:ec:16:01:22:8c:f4:7c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9ed991ee6bc4bb48a8b75011d0481917e0f3f7
Validity
Not Before: Mar 26 00:01:22 2026 GMT
Not After : Mar 27 00:01:22 2026 GMT
Subject: CN=2cbed1dc800746e8860b565bea76441a5d012dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4b:79:6f:d7:b0:ba:0c:91:a2:41:0b:f4:49:
f8:fd:92:e5:c6:0e:53:a7:e0:34:23:23:05:5b:e4:
a6:26:da:31:f5:05:f9:7d:e8:ab:f8:da:17:43:ba:
60:20:67:32:45:11:3e:39:f9:c7:43:b6:3b:54:dc:
da:ac:72:5e:e6:bd:ef:49:24:15:4c:df:59:6c:6a:
34:fb:5d:9e:ae:26:65:bb:f6:69:1e:61:2b:14:15:
19:f3:67:26:20:0a:47:56:e0:f9:60:8f:30:7f:4f:
a2:51:8f:9a:0a:60:e1:76:39:34:55:e4:a9:f9:76:
35:51:fd:5c:ec:19:09:92:cd:25:f5:a1:58:52:ee:
cd:da:77:db:19:4f:9b:5c:14:9c:63:10:9c:50:1f:
69:81:1d:06:b1:78:66:74:c6:52:e8:fb:e4:1f:a4:
78:aa:d7:5d:70:6e:3d:9a:0b:6c:23:f0:20:a1:8e:
08:48:6e:0a:67:6f:84:95:e8:f0:f9:88:1b:f8:ae:
b3:9a:57:9c:91:84:61:66:37:9d:4d:36:d6:64:a7:
79:0d:20:61:f6:db:bd:92:5f:bb:e8:90:24:f2:81:
f9:ec:ff:0c:fc:5c:e6:0c:46:4f:c2:92:31:18:34:
96:c1:69:0f:b8:a5:19:f8:aa:95:53:c8:be:31:b6:
b8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BE:D1:DC:80:07:46:E8:86:0B:56:5B:EA:76:44:1A:5D:01:2D:BE
X509v3 Authority Key Identifier:
keyid:5E:9E:D9:91:EE:6B:C4:BB:48:A8:B7:50:11:D0:48:19:17:E0:F3:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:1f:0a:a1:78:02:e0:ee:5d:db:a7:28:69:8f:30:84:ad:aa:
ec:7f:65:90:65:82:b3:60:96:a1:b0:54:b4:b4:bb:34:6f:16:
e7:4e:43:ad:ca:cb:e3:6f:93:23:f0:c6:ff:ac:5a:1f:3f:13:
1b:5c:f9:03:cb:91:ea:33:90:26:a8:38:d5:1d:5b:6b:95:c1:
e4:1f:19:a9:75:34:2a:14:3e:28:db:3e:c1:8d:3b:0f:e6:a1:
22:d1:aa:01:19:fd:22:d9:ab:9a:db:58:cc:a5:21:34:44:cc:
a1:2b:5a:5d:dd:11:f3:2c:58:76:ed:4f:ef:b3:7b:2b:d2:01:
f0:42:2e:ab:10:6a:15:1e:49:6f:22:6e:27:28:0e:42:21:61:
f6:b3:5d:53:2b:60:c7:c8:6e:87:17:7f:01:fe:68:e8:73:01:
91:a9:0e:e8:46:3d:57:61:f4:f9:6d:56:78:18:56:6c:53:a9:
88:bc:ca:4d:48:51:66:06:80:75:1b:28:ee:dc:54:ce:2b:7b:
51:6f:a0:79:79:d2:5d:40:8a:cb:82:6d:67:69:9e:bd:c9:c6:
d6:5c:ed:8f:1d:4d:8f:df:2a:47:8e:60:45:ee:64:77:8b:5a:
7f:ad:46:75:5a:7c:0b:33:04:45:09:a2:a2:d6:19:e8:73:ed:
94:54:16:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:00 2026 by rpki-client