Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
File: xBxyIe3jr17pLjIGry8YvQENXdk.mft (raw, json)
Hash identifier: X55TvkOjgMK5r4N7sPI5XTgRcONN5WfqU+v3PYSB+ns=
Subject key identifier: 33:B6:64:DC:1D:F4:78:E8:74:9A:ED:6C:29:FB:DD:7B:C2:B8:E5:75
Authority key identifier: C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
Certificate issuer: /CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Certificate serial: 019CE1EC1785BEB9111DD785DDBF2F9E71E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
Manifest number: 17C5
Signing time: Thu 12 Mar 2026 12:01:11 +0000
Manifest this update: Thu 12 Mar 2026 12:01:11 +0000
Manifest next update: Fri 13 Mar 2026 12:01:11 +0000
Files and hashes: 1: 0GQvydNnvltwCYU4Ip_UMWYTxxY.roa (hash: LhV5AD4zlFaWyl3gf5xKjG4cuVjXMxEqjf7rizI3yyc=)
2: BfDjCxQZpVIvWuHPpUF1014sxPo.roa (hash: xAMeCUjUJk50I2+3B3yRzk6L+sK+RxuSoLFdPe8pfMM=)
3: XWrjWShl8ZOcp09LK2_ONhgHsKY.roa (hash: AC5IcqCMeXfvwYRIiyyOeZ/CwhWtUU1oEh3vKTXLGOA=)
4: YTvzQsFBXRxpZjxppqCZCxmRPYQ.roa (hash: t3YG10sy6vB+Qag/g3AGHLoljWVvm1G3KkmY9lIG3vE=)
5: aRUSUeQ8jMxodN7YT76VVlAnkYc.roa (hash: kW/ZEynMRGdhc2qvAiSVXrvlJhdBKDD65FvfwCuJ9qI=)
6: meWMB7mMCO2YGDQEgDBAeOkKxbU.roa (hash: 5uVBi/vJg+ul9fevZEzoy7ePbW0P4h1Oq+CpG62Daig=)
7: umcl7WnZK20q_yk2qfdqCvl0gZc.roa (hash: a3iwx7aEh16G880sgnY2R852Jz2/uGuPT/7WcJXbeQc=)
8: xBxyIe3jr17pLjIGry8YvQENXdk.crl (hash: 1+WQwqw4tplu3jeQCdkWj5UWzE/n3Sgf53/pu+ul95I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 12:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:ec:17:85:be:b9:11:1d:d7:85:dd:bf:2f:9e:71:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Validity
Not Before: Mar 12 12:01:11 2026 GMT
Not After : Mar 13 12:01:11 2026 GMT
Subject: CN=33b664dc1df478e8749aed6c29fbdd7bc2b8e575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5c:c5:40:f0:37:66:99:91:2c:7a:c8:07:89:
79:22:cd:09:61:12:b5:d0:1c:2b:e8:b3:38:84:22:
22:9c:12:3d:96:43:58:28:1c:a1:2c:48:7f:db:6a:
2e:86:c0:13:2b:b0:aa:df:7d:f5:ee:38:71:7c:b3:
72:18:0e:73:32:3a:a9:a0:2b:ee:b4:c2:7a:08:a6:
ce:e3:c0:2c:a3:86:93:d1:6f:34:8f:9d:29:0c:90:
98:aa:db:18:76:10:a1:c4:bb:2a:e7:5a:66:43:2a:
d6:02:9d:b6:39:b4:79:3e:f6:d1:28:8c:98:80:10:
94:f1:b2:9b:47:1b:41:30:55:ab:8f:4b:48:c8:76:
42:89:9f:46:4e:b0:71:1a:0b:bb:6b:4a:88:56:e6:
89:00:49:95:89:4c:78:e4:d0:b5:49:51:36:45:db:
6e:76:42:37:52:72:11:eb:0f:68:a7:b5:ee:e4:ac:
b3:d1:f5:26:e0:7a:94:1b:52:bb:74:92:01:95:e6:
86:8b:d4:0f:ed:4b:d3:f6:fa:e3:36:df:5e:b0:bd:
14:74:69:25:68:e4:db:7c:59:54:31:83:27:3a:f8:
ad:94:36:7a:cc:a8:7e:ce:9b:ec:69:97:e9:4b:e6:
36:a6:cd:d0:03:45:5b:5a:cc:a1:3e:4b:89:71:86:
38:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B6:64:DC:1D:F4:78:E8:74:9A:ED:6C:29:FB:DD:7B:C2:B8:E5:75
X509v3 Authority Key Identifier:
keyid:C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:60:b5:0b:85:7f:b9:27:14:46:1d:56:15:9b:ae:84:3f:bb:
ba:fc:52:f5:96:24:6c:e0:de:86:c5:df:53:80:7f:8f:d5:ce:
4a:f7:d5:b4:41:86:12:0f:aa:e3:f8:d5:36:7b:2f:af:52:ab:
95:8d:70:d4:1a:8a:16:a8:45:a9:e2:4b:47:d7:6c:00:55:3b:
ed:a9:bb:1b:ab:fc:7f:84:1a:aa:a0:7e:c4:91:54:53:c3:d5:
a2:34:ff:dd:08:3f:6c:a7:6f:fd:a0:22:df:de:be:42:cc:1b:
15:96:d8:c5:51:83:78:8a:5d:6f:a3:4a:bf:1f:fa:3a:d0:10:
28:88:c2:ac:3b:e4:1b:e6:9e:35:82:4c:c9:e3:f7:98:d8:a2:
5c:24:76:53:e4:53:d0:3a:69:0b:b4:db:6a:db:92:0c:b6:bc:
78:0d:51:d9:8a:b8:84:3f:aa:53:50:6c:72:80:d5:f3:87:50:
f5:fd:f2:fa:62:45:98:09:f0:c0:46:a5:45:84:71:d6:ba:4f:
07:57:e8:cb:7e:fc:d9:35:31:1a:19:15:9c:d4:f9:a5:24:48:
cf:82:25:18:65:ab:9b:e7:9a:fe:b3:ba:f0:a8:05:74:5f:79:
ea:58:0d:a2:37:fe:6e:54:f8:6a:e5:d6:91:e6:10:c5:14:8b:
af:4e:55:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 20:11:17 2026 by rpki-client