Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
File: xeu4t5Qi-y1tioLbfxrAtqpZs38.mft (raw, json)
Hash identifier: yqS7n65KfLdeE5H5p7NHkfQYD1tNR6wYcei/wEsyZY4=
Subject key identifier: 8E:4A:41:AF:AB:18:DB:79:96:A4:D0:BD:FB:0F:4C:D3:04:17:D1:5E
Authority key identifier: C5:EB:B8:B7:94:22:FB:2D:6D:8A:82:DB:7F:1A:C0:B6:AA:59:B3:7F
Certificate issuer: /CN=c5ebb8b79422fb2d6d8a82db7f1ac0b6aa59b37f
Certificate serial: 019D394119F20452E3AA4C726C91F8D30C91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
Manifest number: 17B3
Signing time: Sun 29 Mar 2026 11:01:00 +0000
Manifest this update: Sun 29 Mar 2026 11:01:00 +0000
Manifest next update: Mon 30 Mar 2026 11:01:00 +0000
Files and hashes: 1: emO2nonrGTBV6dWmgfFKxf2S-4Q.roa (hash: J/NmygUcPvRFH9fgrU6o+RxXyKYU/ZMkRyNKy/UmGBA=)
2: xeu4t5Qi-y1tioLbfxrAtqpZs38.crl (hash: RJ8x4QGf+ZGGJuAWzWgsSq51dqpYnG4NN9uQ0eZ7JtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:19:f2:04:52:e3:aa:4c:72:6c:91:f8:d3:0c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ebb8b79422fb2d6d8a82db7f1ac0b6aa59b37f
Validity
Not Before: Mar 29 11:01:00 2026 GMT
Not After : Mar 30 11:01:00 2026 GMT
Subject: CN=8e4a41afab18db7996a4d0bdfb0f4cd30417d15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:95:23:12:ea:3b:b8:11:b4:e2:8d:5d:20:be:
ad:e2:dc:8f:19:f1:dc:77:ee:e7:d8:59:d3:8d:55:
0b:26:41:8e:1a:4b:00:60:c6:de:e9:c1:8b:b7:3d:
bc:07:be:7a:4f:7d:59:e4:e3:ac:86:c7:9f:d6:c6:
52:9e:52:01:c5:7c:75:bf:44:fb:17:1e:42:bf:03:
31:46:4a:be:a0:5b:df:53:4b:a4:46:a8:5c:af:d6:
4f:2b:fc:b6:f6:48:4d:91:f2:dd:f2:a4:b3:df:cb:
dd:c7:5d:80:ff:d5:c0:3c:1b:55:4c:bc:85:59:b6:
f4:dd:82:a2:67:08:7e:5f:ef:c7:f6:22:39:fe:ba:
67:22:85:49:06:3d:90:43:49:d6:87:a6:ee:cb:7e:
c1:16:03:74:92:2f:0d:42:89:5b:35:0b:1c:4f:ef:
01:30:f9:c7:4b:7e:b1:2a:81:3f:3f:5d:0a:76:a4:
a8:93:4c:a3:e1:6b:84:06:2a:eb:ec:b4:3a:c5:12:
73:e5:bb:4e:e7:b7:19:07:33:e6:5b:39:2b:1a:55:
f0:e1:68:69:e0:eb:64:e8:fa:56:bb:6f:15:9f:3f:
37:62:8b:86:db:f1:b3:ba:20:66:83:ea:b7:27:8f:
97:e0:04:33:be:37:ac:f3:64:d6:29:cd:ae:31:99:
2b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:4A:41:AF:AB:18:DB:79:96:A4:D0:BD:FB:0F:4C:D3:04:17:D1:5E
X509v3 Authority Key Identifier:
keyid:C5:EB:B8:B7:94:22:FB:2D:6D:8A:82:DB:7F:1A:C0:B6:AA:59:B3:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:10:15:99:f4:18:ce:1f:9d:df:c1:71:b1:9c:12:ba:38:f3:
01:55:ec:ef:d4:86:ce:88:ad:cd:33:e4:8d:25:83:58:19:a0:
16:cf:43:d4:35:ed:9d:97:a6:87:89:03:6d:a2:bc:73:ee:5a:
38:ed:96:bc:cd:8f:3d:03:e6:9a:38:4e:2a:87:dc:29:32:0b:
86:cb:d4:f9:4e:aa:61:90:4f:5f:1e:85:d0:cd:af:76:b1:82:
3e:20:99:82:dc:87:1c:86:f4:83:20:0c:08:ba:5e:c2:78:55:
34:b8:6e:ad:f7:a3:87:83:20:12:1e:58:71:16:3c:e8:52:10:
3f:18:9f:47:3e:a6:51:e6:ef:15:e4:fc:ff:ee:8b:97:fd:31:
97:05:ec:cc:aa:b8:1a:70:24:23:6c:e8:b1:78:4e:aa:0c:64:
b4:4b:3b:12:9f:b6:a5:64:30:ea:2a:f9:a9:5a:b9:9b:62:1e:
46:b6:31:ae:5e:63:9f:1e:2b:37:07:98:f7:1e:77:8d:99:54:
a8:8d:d1:d0:f0:53:4d:a5:3f:1f:0b:cf:9e:87:65:72:cb:e5:
21:0f:4f:42:2d:52:8c:59:a1:54:67:53:f1:89:c5:85:31:ff:
d0:bd:5e:0e:6a:34:1c:9c:d6:14:e1:24:3b:26:99:73:89:46:
85:46:0c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:34 2026 by rpki-client