Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
File: xeFyhy63vvCWXfE7D8XWXnU3Chk.mft (raw, json)
Hash identifier: 5QCTU/U5Bd5gZwl8oGuO/VazLXcrZE/u5kYoDc9Hshw=
Subject key identifier: C2:D5:E6:06:5D:AA:9E:17:55:0F:ED:66:0F:47:B0:FA:84:56:76:A0
Authority key identifier: C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
Certificate issuer: /CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Certificate serial: 019D058A590BD6478D1477501A11E2E57D9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
Manifest number: 1876
Signing time: Thu 19 Mar 2026 10:00:45 +0000
Manifest this update: Thu 19 Mar 2026 10:00:45 +0000
Manifest next update: Fri 20 Mar 2026 10:00:45 +0000
Files and hashes: 1: BQKL8EXCPvyOQg1ICU181HzsTLY.roa (hash: MQTZW+TVECgfYFhuLaoeF6hUd6ELHRAnYHxRk4WvfLE=)
2: FxY1RAn7Uc02QNfQHdB91asNvfo.roa (hash: XFxgE3CskWpWNCg7s6TQKuMZYsJq+2wXqoHIuIsrGSk=)
3: mvSatyfuo61e-RTaG2TAjXDZEec.roa (hash: Wd+3k5bQsb75PtYForkA7tIC7S5S2MMNM7YiFG0yOOs=)
4: xeFyhy63vvCWXfE7D8XWXnU3Chk.crl (hash: qGVFl5G4QTqI2VdSNhlP6tGvgj3HTZBNJibJoqLgLK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:8a:59:0b:d6:47:8d:14:77:50:1a:11:e2:e5:7d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Validity
Not Before: Mar 19 10:00:45 2026 GMT
Not After : Mar 20 10:00:45 2026 GMT
Subject: CN=c2d5e6065daa9e17550fed660f47b0fa845676a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:66:80:44:04:07:c9:64:26:82:f9:b8:67:44:
61:08:e3:dc:0a:42:93:39:c4:a3:71:cc:b5:ae:49:
e5:4b:b8:d2:1b:eb:a1:8b:87:60:03:04:37:21:9b:
90:ec:b9:ff:5e:f4:e1:09:d2:42:23:d2:ee:25:d5:
d8:c6:f3:30:38:38:42:94:1b:54:77:07:75:18:9f:
bf:5e:d3:07:99:97:65:72:96:21:82:da:85:26:2f:
86:05:f8:ec:48:49:7a:2a:99:f1:42:32:ae:69:51:
7d:b9:e6:48:17:91:bc:6e:b3:c1:56:7b:55:22:aa:
23:52:bc:58:df:ae:2d:6d:ee:85:5b:d1:77:f0:fd:
b3:12:bf:6d:a7:c5:0e:f5:bf:63:1e:45:a4:2c:53:
41:06:dd:f7:57:6a:59:e3:5a:fc:5b:1e:5b:3d:96:
ef:3e:95:a7:31:0b:bc:6a:3b:ec:71:ab:db:8c:40:
34:bb:e5:cb:fb:1e:1c:3c:59:c6:65:54:20:ea:57:
78:f5:cc:89:27:be:7d:e5:62:06:a5:95:98:ce:04:
da:cd:92:98:a7:62:a1:4b:92:64:97:5e:e8:17:3d:
3a:a5:2c:cb:6e:ed:f5:d1:bd:6e:30:34:0c:cb:b8:
df:e3:a9:2f:11:91:c1:8a:2f:ef:75:ef:1a:34:84:
f4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D5:E6:06:5D:AA:9E:17:55:0F:ED:66:0F:47:B0:FA:84:56:76:A0
X509v3 Authority Key Identifier:
keyid:C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:f9:ed:9e:36:11:d6:8e:0a:6f:25:fe:57:76:57:ce:9d:e4:
a4:74:57:69:fd:95:b1:24:ad:c9:03:3e:ce:06:66:fe:e8:a6:
70:1e:95:2c:1d:f9:ab:7d:53:bb:d7:69:d4:17:99:92:9b:b9:
e9:cb:28:08:68:10:4d:29:e8:21:61:4a:ca:ba:68:a5:76:bf:
9b:4f:b4:d1:06:96:fc:af:75:68:a4:19:42:0a:b1:63:da:a9:
78:08:2e:14:d9:91:2c:39:3a:c7:0a:68:54:4c:60:ef:59:2a:
d2:cb:86:15:c4:96:b7:0a:2a:02:93:5a:d6:3d:7c:6f:33:b3:
ec:00:81:8c:0b:df:cc:4c:5d:7c:64:fb:cc:ad:40:c4:fe:83:
55:7d:f6:f5:52:39:e4:c8:4f:a9:e8:f8:40:cc:f3:37:1f:9e:
42:65:da:88:d1:53:c7:45:55:b1:6b:c7:4b:f4:0b:cf:dd:ac:
4a:b0:12:9c:5f:f8:cc:7d:2d:ae:01:9c:4e:af:d0:1f:a0:de:
76:a8:6d:f5:78:ef:bc:d4:e3:81:60:d7:44:a1:4c:91:0a:a3:
37:66:1e:f0:c1:12:7b:85:b2:ab:4d:f7:13:df:d7:d0:c0:43:
d8:11:b4:30:05:81:7d:53:25:4e:02:4f:77:27:64:10:52:e2:
88:d3:6d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 13:45:08 2026 by rpki-client