Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
File: xX5Yw0bntBVVDBOurdLPkO3QeJU.mft (raw, json)
Hash identifier: +FrnczrbyD7IidTMvUv7skd15nV/VoG/8/7atd4sVvk=
Subject key identifier: C1:AD:90:A9:CB:7D:5F:39:ED:8D:77:98:77:42:6C:1C:8B:B9:B6:C4
Authority key identifier: C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
Certificate issuer: /CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Certificate serial: 019D3A1C7D974073AD8C28C3655A70916835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 15:00:38 +0000
Manifest this update: Sun 29 Mar 2026 15:00:38 +0000
Manifest next update: Mon 30 Mar 2026 15:00:38 +0000
Files and hashes: 1: 1kAOPGpT_yO1V9aiYjzOs8fosJ4.roa (hash: uKDlJs0NDCjfdYnB+MfIB/jlA65konDisvJIGcTDJUU=)
2: 9j1B5LLZDXYRtu0JrlF53YNgDew.roa (hash: enCaw1pzt1wj9vxuJHJ4PKIp1awPrJly1Aljj7nxS5c=)
3: xX5Yw0bntBVVDBOurdLPkO3QeJU.crl (hash: neLoK0dj/FC1SX1UfAkMKeNfq1SFFW/aw4/HPhin388=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:7d:97:40:73:ad:8c:28:c3:65:5a:70:91:68:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Validity
Not Before: Mar 29 15:00:38 2026 GMT
Not After : Mar 30 15:00:38 2026 GMT
Subject: CN=c1ad90a9cb7d5f39ed8d779877426c1c8bb9b6c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:be:7f:1e:d5:3b:80:de:1e:ac:41:f9:67:30:
aa:ff:e1:cb:dd:86:d9:46:1d:09:60:11:04:3a:d3:
95:79:55:7f:73:db:58:66:67:fd:b9:3b:e0:4a:61:
32:f8:03:39:19:51:18:8c:3c:de:5b:5a:da:74:a7:
e1:fc:e2:2c:0c:39:f4:e9:64:d7:d6:6e:e7:e1:97:
c3:38:bd:48:06:2f:83:da:c9:97:30:d0:3b:25:7d:
a8:58:c4:22:a3:37:7b:7e:5e:6f:c2:02:4e:f6:b4:
55:86:2c:0d:f6:d1:e3:6b:18:d5:4f:12:4c:5b:ac:
56:af:3e:70:14:ca:52:13:85:01:38:a6:c8:28:e8:
b0:8e:03:a7:22:fa:a3:3b:92:80:e6:3c:91:2a:6f:
ed:ed:bd:18:b5:62:40:90:23:36:91:f4:54:97:46:
02:65:cd:2f:e8:bf:ca:9e:65:10:00:00:6e:26:dc:
d2:e6:4b:c7:b7:cf:76:69:68:0a:bf:9a:06:1f:9b:
e1:e2:42:2a:c0:9c:8a:29:fb:45:76:bb:74:ed:00:
9d:1c:27:47:b7:04:1d:3e:b7:a2:9c:20:94:4b:e9:
4d:2c:1c:9e:2e:83:d6:49:a3:34:bd:f6:67:6d:b4:
5e:b9:b3:f5:bb:04:61:e1:44:13:9e:fc:11:ba:02:
bd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AD:90:A9:CB:7D:5F:39:ED:8D:77:98:77:42:6C:1C:8B:B9:B6:C4
X509v3 Authority Key Identifier:
keyid:C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:2d:6e:d2:19:2e:f8:25:20:fd:c3:e2:54:6e:d0:ef:bf:03:
97:ed:14:cb:3c:b7:50:2a:79:fe:b5:3f:59:fb:5c:1d:14:c5:
84:e1:93:5e:21:a0:10:96:50:c3:5e:6e:7b:46:ea:51:cf:2d:
4d:ab:84:4b:25:62:96:4d:e3:7f:ae:36:88:5e:63:13:3f:7f:
2d:c1:50:dc:ac:e5:13:02:bc:4b:e7:99:95:c3:cb:18:0e:dc:
65:77:7f:08:72:e2:f8:13:71:12:a6:54:fd:00:a4:79:d4:7f:
9e:a8:91:f7:90:f1:b0:5a:b1:ec:24:c4:cd:16:e7:97:4f:7a:
a1:18:ac:d7:fe:30:82:b4:15:89:d7:6c:d0:78:d9:6b:4e:fc:
3a:e9:c1:9c:8e:25:e6:b2:79:69:05:3b:ce:36:e7:6d:e9:2f:
1d:fd:5b:bd:eb:97:49:8a:5f:c6:b8:5d:4f:ac:55:a9:fc:70:
8b:8e:a9:84:43:c6:03:7d:4c:a1:ab:f7:48:89:4f:d6:24:f3:
d2:1d:f3:ae:95:60:c0:92:11:d7:1f:c4:5a:d3:33:38:2f:30:
23:8c:ba:85:54:94:38:9c:b2:9e:73:2c:67:4f:52:36:63:f6:
85:b2:0f:58:a8:60:af:0f:b4:14:c3:51:4c:29:70:28:ed:54:
5e:c2:a2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:13 2026 by rpki-client