Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
File: x1eZ_0M1t7GucYjt-lP9fiE-shY.mft (raw, json)
Hash identifier: njc2QDxMwCPF2Ww5QGSHKmcm5r/5rPg+Y/47oZZNolk=
Subject key identifier: 7C:08:A3:C2:31:5A:80:38:71:11:0B:10:77:9C:1E:5E:37:1F:7A:8C
Authority key identifier: C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
Certificate issuer: /CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Certificate serial: 019D382DCBC42D7A39F0CC6048A9CDCFCE38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
Manifest number: 1812
Signing time: Sun 29 Mar 2026 06:00:18 +0000
Manifest this update: Sun 29 Mar 2026 06:00:18 +0000
Manifest next update: Mon 30 Mar 2026 06:00:18 +0000
Files and hashes: 1: 7wQkjJzOFmhj4SlVLo-x26w_WTc.roa (hash: uBOYkM28EcQ5gB0Rh8GkUGQb+Ga2UZ8JgAHYGzfSXXI=)
2: uabo7ndnRWzy9MUqP3Ih5P2gxe8.roa (hash: j629zk7F2qIP3WUGuPA4LCpVgjs/1/AZWtVe090YvCY=)
3: x1eZ_0M1t7GucYjt-lP9fiE-shY.crl (hash: Rmzor9xXtnah8St8dRJyki3rYY9Ihj+KFs3Fxnxxp68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:cb:c4:2d:7a:39:f0:cc:60:48:a9:cd:cf:ce:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Validity
Not Before: Mar 29 06:00:18 2026 GMT
Not After : Mar 30 06:00:18 2026 GMT
Subject: CN=7c08a3c2315a803871110b10779c1e5e371f7a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:71:d0:48:4f:d2:96:60:a6:38:e8:22:19:f4:
3e:65:15:97:5c:a7:06:d3:3b:68:7b:7a:5b:7a:3c:
2f:00:b3:e4:f3:7a:a9:f2:bf:ef:fe:ba:7c:91:4d:
8d:79:be:1c:bd:90:e6:06:c6:81:58:fc:e9:1d:fd:
8c:e3:25:46:da:27:1d:c1:f0:36:ed:1f:f6:72:cc:
25:8b:74:f1:f1:79:ef:f8:38:69:8c:9a:87:c0:7d:
5b:e0:ed:18:58:bd:59:02:cf:aa:20:a8:7c:bc:16:
3e:cc:15:2f:25:e8:26:4f:3c:61:62:2b:f8:76:f8:
94:d3:60:39:ed:34:bb:7e:87:96:65:8e:dd:28:40:
e4:7f:05:f5:2b:5d:7d:97:05:5b:58:b6:b0:55:0f:
c2:f0:a4:b7:0f:99:c0:87:de:38:06:5a:26:5e:34:
67:f4:3f:08:e4:cb:14:4e:d3:57:84:f8:68:d9:1a:
24:08:82:9c:bc:15:36:fa:69:24:e5:46:73:dd:a8:
f3:3d:92:30:2b:bd:f1:0a:3e:e3:3d:3d:24:09:0a:
a6:80:5d:41:f8:01:92:27:76:82:fb:7a:47:bc:cf:
0e:f8:ac:6f:d9:71:c8:ee:20:20:46:93:b6:da:1f:
80:b8:eb:e4:98:a8:7d:07:50:82:37:c6:7b:4d:0e:
b5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:08:A3:C2:31:5A:80:38:71:11:0B:10:77:9C:1E:5E:37:1F:7A:8C
X509v3 Authority Key Identifier:
keyid:C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:e5:e4:de:05:1a:36:3f:ca:a3:a0:3e:ae:6a:ce:91:8f:eb:
88:52:5b:94:6b:6d:53:ad:93:cd:53:dc:05:2c:b9:f5:7b:7c:
cd:7b:da:63:1f:55:e5:84:17:a9:d9:36:b3:f0:93:85:6d:58:
f7:b8:98:02:c9:b9:44:1f:5f:ce:e7:f3:99:1b:4d:61:0b:27:
8e:71:97:8c:d8:73:39:09:12:b9:30:58:2b:88:85:3e:10:d0:
f2:8e:3b:15:38:2d:48:43:31:ae:a5:4e:94:25:e9:fa:aa:e9:
84:b2:76:c2:8d:71:f0:ae:33:af:6b:bc:1b:0b:48:3c:54:83:
97:11:8d:67:a9:63:6d:1b:8d:e3:3f:f7:26:8a:88:4f:9f:07:
93:23:b3:f0:cb:db:17:a9:34:f3:6d:45:e0:2a:51:34:a6:72:
30:57:42:66:c4:43:d8:d3:7d:07:02:88:df:40:c5:ab:84:91:
88:e5:3f:b3:02:3f:c0:20:fb:f4:1f:f6:98:a0:29:a7:6f:71:
96:a2:98:3d:fe:b7:68:d7:ec:2f:b2:03:17:0d:39:eb:e2:dc:
75:19:b3:19:ed:0f:a5:70:f4:82:21:dd:33:f5:90:5e:8c:23:
7b:99:aa:9a:7b:96:39:1f:10:2e:d6:5e:cd:b4:cf:6e:bc:c1:
a8:98:22:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LcvELXo58MxgSKnNz844MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NTc5OWZmNDMzNWI3YjFhZTcxODhlZGZhNTNmZDdlMjEz
ZWIyMTYwHhcNMjYwMzI5MDYwMDE4WhcNMjYwMzMwMDYwMDE4WjAzMTEwLwYDVQQD
Eyg3YzA4YTNjMjMxNWE4MDM4NzExMTBiMTA3NzljMWU1ZTM3MWY3YThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHHQSE/SlmCmOOgiGfQ+ZRWXXKcG
0ztoe3pbejwvALPk83qp8r/v/rp8kU2Neb4cvZDmBsaBWPzpHf2M4yVG2icdwfA2
7R/2cswli3Tx8Xnv+DhpjJqHwH1b4O0YWL1ZAs+qIKh8vBY+zBUvJegmTzxhYiv4
dviU02A57TS7foeWZY7dKEDkfwX1K119lwVbWLawVQ/C8KS3D5nAh944BlomXjRn
9D8I5MsUTtNXhPho2RokCIKcvBU2+mkk5UZz3ajzPZIwK73xCj7jPT0kCQqmgF1B
+AGSJ3aC+3pHvM8O+Kxv2XHI7iAgRpO22h+AuOvkmKh9B1CCN8Z7TQ61QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHwIo8IxWoA4cRELEHecHl43H3qMMB8GA1UdIwQY
MBaAFMdXmf9DNbexrnGI7fpT/X4hPrIWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDFlWl8wTTF0N0d1Y1lqdC1sUDlmaUUtc2hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xZTRjMDMtZjYxOS00N2EzLTgxYmQt
MzZlZjdhZWViZTNiLzEveDFlWl8wTTF0N0d1Y1lqdC1sUDlmaUUtc2hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8xZTRjMDMtZjYxOS00N2EzLTgxYmQtMzZlZjdhZWViZTNi
LzEveDFlWl8wTTF0N0d1Y1lqdC1sUDlmaUUtc2hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoOXk3gUa
Nj/Ko6A+rmrOkY/riFJblGttU62TzVPcBSy59Xt8zXvaYx9V5YQXqdk2s/CThW1Y
97iYAsm5RB9fzufzmRtNYQsnjnGXjNhzOQkSuTBYK4iFPhDQ8o47FTgtSEMxrqVO
lCXp+qrphLJ2wo1x8K4zr2u8GwtIPFSDlxGNZ6ljbRuN4z/3JoqIT58HkyOz8Mvb
F6k0821F4CpRNKZyMFdCZsRD2NN9BwKI30DFq4SRiOU/swI/wCD79B/2mKApp29x
lqKYPf63aNfsL7IDFw056+LcdRmzGe0PpXD0giHdM/WQXowje5mqmnuWOR8QLtZe
zbTPbrzBqJgivw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:58:06 2026 by rpki-client