Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
File: xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft (raw, json)
Hash identifier: 6p3BRdqptTN+2Nee7bouLcvaSke5uaBwb3s07MuL4pg=
Subject key identifier: 79:25:F0:80:F1:50:FE:C3:B3:3C:03:D4:6F:5B:2F:BE:80:9B:1B:85
Authority key identifier: C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4
Certificate issuer: /CN=c5e14070210627bfca4654b42de797acd6d2c4f4
Certificate serial: 019D375218A9191D5D88D8403FDF3CA21EC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
Manifest number: 0880
Signing time: Sun 29 Mar 2026 02:00:20 +0000
Manifest this update: Sun 29 Mar 2026 02:00:20 +0000
Manifest next update: Mon 30 Mar 2026 02:00:20 +0000
Files and hashes: 1: 2jQx973K_WHIEDeBwoceaInwrVk.asa (hash: Xu/Sv3zfgccGu+NaMsUgY/a+THDNzPx1jfH33fWcIQ0=)
2: 4N_n1cCDT7wj_iB4XrMTAQ9PivM.roa (hash: MxvavFzCXv3bNh/z3UJzQ6ZzRkLADzDg48/vugWD+cE=)
3: xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl (hash: ni1AqeC6fNOftX/UPkaKNXRHsdqdshzAwkjuOfJ9+Wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:18:a9:19:1d:5d:88:d8:40:3f:df:3c:a2:1e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e14070210627bfca4654b42de797acd6d2c4f4
Validity
Not Before: Mar 29 02:00:20 2026 GMT
Not After : Mar 30 02:00:20 2026 GMT
Subject: CN=7925f080f150fec3b33c03d46f5b2fbe809b1b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:52:88:67:c4:9b:d1:4b:e0:6b:87:c5:55:4e:
ee:82:89:bd:54:7e:d3:37:cc:af:93:0e:0d:bb:84:
6f:fc:31:ea:19:25:d9:62:29:20:47:59:13:b6:ec:
14:f2:51:fa:94:33:0d:ba:21:4f:1e:18:aa:cd:d3:
df:66:61:1b:e6:cd:d4:02:b8:f8:52:af:61:50:c4:
c6:84:12:76:6b:fd:b3:f9:b6:f6:c1:78:ab:01:5e:
dc:26:fa:32:21:be:3e:67:98:1c:71:b0:1c:48:70:
64:bb:91:a8:09:ac:83:0f:a7:14:0c:09:59:b9:db:
c1:67:b8:f6:af:41:9a:42:ab:af:df:37:95:6a:21:
e1:e1:44:e9:d5:fa:d0:fe:58:03:ff:64:cf:0e:e0:
1c:c7:97:05:d4:70:b9:8a:61:30:f9:ff:0f:95:a8:
f6:05:74:43:5c:84:b3:1c:d7:b6:ed:1e:c7:64:3d:
52:69:75:94:63:4a:64:e1:d4:c9:57:13:b9:f3:74:
b5:c9:a0:1d:7a:d6:ff:47:16:a8:82:38:17:65:53:
89:fc:85:f8:a2:cb:e8:95:22:d7:43:c2:2a:ee:3a:
45:69:87:9e:fa:c1:14:ac:8b:d6:84:62:7b:1f:3f:
9e:99:f3:92:8c:de:42:26:41:cf:12:f1:f5:72:c4:
66:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:25:F0:80:F1:50:FE:C3:B3:3C:03:D4:6F:5B:2F:BE:80:9B:1B:85
X509v3 Authority Key Identifier:
keyid:C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f4:32:e0:56:72:e6:c9:fe:cf:8f:77:9a:03:e6:50:e4:0f:
77:3f:3d:26:af:a8:d5:15:d1:ab:24:fd:06:33:2a:19:1c:74:
1c:08:f3:85:2e:31:b9:87:1c:41:bf:b4:e5:29:cb:30:04:b8:
1a:68:3f:51:2c:16:4e:50:ca:10:55:f8:51:40:cd:ed:c3:4f:
b8:90:65:92:dd:de:09:1f:47:ce:16:4b:50:2f:47:fc:6a:3d:
d3:f7:17:10:e0:8b:2a:9e:11:f3:fa:0a:3f:cc:66:dc:6f:6e:
1f:26:40:a1:ed:78:8b:f3:2c:a2:c1:c1:74:0a:d9:ce:25:8f:
84:4a:7d:f3:6d:ae:e1:74:5c:73:83:6f:69:77:1d:b0:26:2f:
3e:5f:75:8d:c1:95:ca:8a:f2:fd:6b:60:0d:54:f3:63:f2:be:
02:45:71:cc:6b:f2:0f:e6:67:5e:73:bc:34:cd:6d:c3:13:7d:
a0:d0:e9:de:75:74:ae:06:3c:33:dd:fa:7c:4e:a7:ac:08:dd:
d1:c8:be:05:1a:63:f8:01:02:63:c3:0b:7c:16:ee:da:ff:ba:
f3:4d:92:90:90:64:95:bd:32:4d:56:81:7a:a7:48:6e:25:f2:
ec:62:63:73:ad:07:d2:71:f8:7c:95:fc:aa:9c:c4:d0:c6:85:
49:62:a8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:26 2026 by rpki-client