Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
File: xs_ZQjfv0gDdCxFuH2-be8plnKc.mft (raw, json)
Hash identifier: QgNfhwn0fjPu8okeP92tNOeIbvLx387BkKKSHhXTtMA=
Subject key identifier: 5F:CB:49:1E:06:25:0B:1D:9D:A8:A2:3B:BB:68:BC:D1:EF:A5:8C:95
Authority key identifier: C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
Certificate issuer: /CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Certificate serial: 019D3909DCCF9BBA5BD8DF7597EE8B64B4C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 10:00:40 +0000
Manifest this update: Sun 29 Mar 2026 10:00:40 +0000
Manifest next update: Mon 30 Mar 2026 10:00:40 +0000
Files and hashes: 1: RB5D86Eez18oD-QABqEilaFp2nQ.roa (hash: cNT5vI1+Epdr8/RiwTV50sHhN6dBP41X/USYdNru1kM=)
2: xs_ZQjfv0gDdCxFuH2-be8plnKc.crl (hash: mb8DlHooyQTPrQIzHNbth0p0afAbB99IOROb9VJUlVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:dc:cf:9b:ba:5b:d8:df:75:97:ee:8b:64:b4:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Validity
Not Before: Mar 29 10:00:40 2026 GMT
Not After : Mar 30 10:00:40 2026 GMT
Subject: CN=5fcb491e06250b1d9da8a23bbb68bcd1efa58c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:57:08:6f:3c:b4:bb:e3:c7:cb:9b:57:20:6e:
fa:ad:ee:b4:e5:2e:3f:eb:a1:2d:8f:be:c5:b3:30:
ef:67:e8:69:4e:13:ae:b6:b3:11:b6:e1:42:cb:f3:
bc:79:ba:c3:1a:a7:88:b4:18:4c:07:dc:58:e1:c6:
58:4a:ae:3d:12:8d:1a:14:a5:95:56:61:cc:cb:5d:
2c:8b:c8:e0:02:02:9e:a2:d1:f0:d0:8f:1f:e8:cc:
51:54:2d:40:2e:bb:a9:58:76:11:d0:23:ea:8d:06:
c5:46:49:f3:09:b5:e1:6d:34:cc:6d:4d:c5:d4:dd:
8e:50:21:f7:f5:ba:14:ba:d1:ac:8b:8a:72:7d:0e:
8a:ec:01:f8:00:85:b1:5d:84:69:31:9a:66:ff:d4:
a0:50:8c:27:a8:80:fc:df:a3:cb:db:54:54:b3:f0:
53:cd:c1:e1:ba:0c:82:b1:99:37:0a:a8:c0:b9:d0:
6f:ac:e3:08:21:de:b2:c7:56:a6:da:68:83:98:6d:
1d:c3:eb:c8:99:87:8d:e4:e5:bf:e6:11:61:b9:4e:
4e:9d:60:44:f8:56:86:02:c5:b8:92:d9:63:85:ce:
de:e1:56:39:25:87:d2:6f:a3:e0:e0:d6:3b:f3:1f:
f6:4e:84:81:a7:9d:23:e8:c8:08:1f:7f:39:84:a3:
ec:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CB:49:1E:06:25:0B:1D:9D:A8:A2:3B:BB:68:BC:D1:EF:A5:8C:95
X509v3 Authority Key Identifier:
keyid:C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:2d:72:4d:f4:2e:c1:2f:04:0b:d3:fe:78:8a:0e:e5:67:bd:
34:ee:d3:09:67:fd:2b:e1:f7:8d:ca:90:cc:3a:14:f4:9d:38:
17:ff:c7:5b:2b:7a:50:80:97:65:cd:55:08:52:86:fc:0f:74:
e2:e0:c9:d4:16:45:22:b2:ba:5c:b7:22:c6:03:3d:1b:37:43:
11:bc:c3:91:1d:d4:99:d8:4e:1d:c5:1b:66:65:7e:00:48:f5:
c7:5f:af:a2:7b:2e:61:12:01:f8:37:e2:4f:e5:d0:d5:ba:9b:
d1:f7:ac:a4:0d:67:a7:c0:36:49:3c:3e:23:04:0c:b3:21:d0:
33:46:0c:50:e6:8b:86:30:67:92:46:a2:09:d3:85:06:d7:c5:
25:36:e6:e2:d1:06:8d:53:fe:0d:2f:16:79:07:5a:e5:a3:99:
1d:74:13:ff:d2:5b:2c:db:73:03:97:a7:de:72:e2:18:f4:fe:
14:71:63:e1:0f:0e:8c:a2:66:ca:00:a9:15:2a:4a:64:a3:0f:
ed:92:69:64:4e:5d:5d:4d:f4:0a:c4:3c:58:a5:6e:cb:fc:5a:
e9:34:94:1f:b6:e9:2c:9e:48:4d:24:89:d5:08:ca:84:99:96:
de:0e:7c:73:2a:4c:bc:3e:3e:7d:40:78:50:6e:d5:6d:40:3c:
dc:10:fa:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:50 2026 by rpki-client