Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
File: xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft (raw, json)
Hash identifier: 8FC1DZ3El9itDItf2D0sK3KBj8wxOLBWTroE2bc7AgA=
Subject key identifier: 90:43:B3:4D:36:C6:8E:4D:EA:E3:B1:B2:03:94:95:28:4A:33:62:EB
Authority key identifier: C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
Certificate issuer: /CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Certificate serial: 019CE85BAA63A07292D473112CBEBFDF37D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
Manifest number: 1873
Signing time: Fri 13 Mar 2026 18:00:47 +0000
Manifest this update: Fri 13 Mar 2026 18:00:47 +0000
Manifest next update: Sat 14 Mar 2026 18:00:47 +0000
Files and hashes: 1: 7qKY5-kl-qaVMoRIB3RG5oNUdf0.roa (hash: L6u//TWO0oG/8Tdr3Tg8lfsVqZiNaM1y0Ryf8hK01sg=)
2: PPXNJhyqSJSHAcVtgk0VztMlglY.roa (hash: ex9cUqmNLS12UIvKYIuoCv8mQvwQVbCS289sS1wTF3M=)
3: e6h2n9XnoiZKNpyZDuWS--kogbA.roa (hash: tWYIKN6aFchD9ZG77xZYhxaLu1YeirWOa5ux4eeE0kw=)
4: lNE8D9GJWfcd-D9egVK1TMPitC0.roa (hash: 2CmJCZprp/LCt6ibHBoiFVrP1YcZuqexjzFdiTh77oM=)
5: xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl (hash: oK2DuqpI6C8UM/CxI78Z/7H5LVo1Naf4eRThZHRE8j4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e8:5b:aa:63:a0:72:92:d4:73:11:2c:be:bf:df:37:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Validity
Not Before: Mar 13 18:00:47 2026 GMT
Not After : Mar 14 18:00:47 2026 GMT
Subject: CN=9043b34d36c68e4deae3b1b2039495284a3362eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c0:8e:bd:9e:19:3e:13:3d:f5:a8:35:41:00:
9c:c8:1b:49:1b:14:ed:7a:e9:b1:71:dd:b7:30:b8:
51:b1:9e:48:9f:42:09:aa:c6:19:82:c6:5a:60:7e:
04:36:01:03:90:1e:85:0e:d2:75:6d:e5:ae:69:f0:
17:ca:d1:b2:64:16:01:b0:1b:36:0f:b9:8a:b3:47:
07:ef:57:85:6c:74:8b:1f:7d:b6:5b:1e:c4:15:d2:
62:35:22:5d:e7:2d:fb:a8:4b:ed:db:4a:c6:9f:d2:
38:59:d0:14:f4:d7:63:3f:25:66:89:d9:53:b1:6b:
49:a4:2c:a8:6d:dc:e2:e7:b1:3e:72:09:31:bf:13:
a6:8f:6b:07:b0:e0:ad:0b:85:4d:5d:35:01:a8:00:
0b:a6:15:ad:25:4e:64:88:29:95:b8:f7:f6:bf:f9:
4f:2d:81:5e:31:43:e2:e2:fb:5d:7c:02:3c:65:9a:
7c:47:e7:84:00:f3:02:1f:b6:f5:71:d1:85:33:fa:
32:73:4a:41:c1:17:05:80:2f:d2:5d:22:d6:69:99:
70:07:18:25:c9:62:15:dc:ee:c8:15:fd:d7:2c:ef:
b1:fb:55:49:6f:6e:cd:5b:65:7d:a2:b1:b0:d0:cc:
a0:09:0a:49:4c:81:45:fb:c0:f9:d0:16:e6:c3:3e:
a8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:43:B3:4D:36:C6:8E:4D:EA:E3:B1:B2:03:94:95:28:4A:33:62:EB
X509v3 Authority Key Identifier:
keyid:C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d7:74:06:2b:d7:ba:77:c5:b6:7f:5c:2f:7a:3c:14:bc:a3:
27:53:d2:7d:c5:de:fc:df:ef:06:7b:dc:a6:c9:77:28:40:4f:
6b:00:36:66:aa:48:fd:85:ee:05:7a:83:20:a6:87:fe:5f:0e:
c7:7d:f5:53:28:da:a6:8b:85:9b:fc:bd:f6:ce:c1:1b:66:17:
37:b1:88:5e:f5:66:c4:2b:8c:27:14:98:3e:1f:69:50:9d:c5:
14:58:7e:ed:07:f5:a2:89:09:93:2a:7e:88:cb:33:3a:29:d7:
4a:75:a6:b4:22:ec:da:a7:8c:df:d4:26:4a:b9:67:c6:fc:8a:
13:fe:3f:95:c8:05:95:0a:20:b7:2b:f2:03:ec:cd:b2:90:14:
b9:07:a3:5e:e4:ad:dd:7b:da:2b:56:d9:22:1f:46:12:d7:24:
fa:f9:5b:dc:cc:4a:9e:f2:95:33:00:ad:34:54:6b:d0:7e:f6:
f8:3c:41:8c:1c:b4:91:ed:26:73:a8:b9:bd:88:6d:d4:87:02:
de:10:da:74:00:0e:21:47:ff:e5:8f:a0:87:9e:df:a4:3c:cb:
33:20:34:d5:36:8b:7f:a2:0c:ce:ea:53:29:30:e1:de:c5:9a:
84:47:62:91:9d:5a:e1:4a:93:7a:96:09:0f:cc:2e:17:a1:58:
1b:a0:7b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 21:48:14 2026 by rpki-client