Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
File: Xka_H_gWvgukxiFxI0IzCp-ti9o.mft (raw, json)
Hash identifier: dOrTbmT9gJ8Dkerrd6+lXkcMo8UyoqUmWIxZFQDBVKc=
Subject key identifier: D9:3B:09:78:BA:BC:66:6B:ED:8D:9B:84:AC:E0:B5:90:20:1E:3D:78
Authority key identifier: 5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
Certificate issuer: /CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Certificate serial: 019CCB9B8996DA20A7E94A5D440B279E3D97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
Manifest number: 1881
Signing time: Sun 08 Mar 2026 04:01:33 +0000
Manifest this update: Sun 08 Mar 2026 04:01:33 +0000
Manifest next update: Mon 09 Mar 2026 04:01:33 +0000
Files and hashes: 1: Xka_H_gWvgukxiFxI0IzCp-ti9o.crl (hash: RykoRL9/zAq2ulr/3C0cPxyCj4VAtDlmB30toNpGbtk=)
2: coRfEXrfHGck2d3kTCu4-WIF828.roa (hash: seMqqalk2GBduoeIME3C50KibF4OKg4MDnKjSiFIduo=)
3: sVAfKvrvvhMbIUsWh385vVnIquc.roa (hash: M9eQGOQqKf4XTtZds1m1OGeYS0UwjPbRi7yLdnFl6LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 22:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:cb:9b:89:96:da:20:a7:e9:4a:5d:44:0b:27:9e:3d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Validity
Not Before: Mar 8 04:01:33 2026 GMT
Not After : Mar 9 04:01:33 2026 GMT
Subject: CN=d93b0978babc666bed8d9b84ace0b590201e3d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:db:b8:4c:d4:4b:fb:f2:a1:0a:2f:7b:82:d9:
74:cf:de:d1:9d:b9:a4:cf:14:14:1e:63:42:8e:fa:
19:56:a7:62:ae:b6:2d:0e:d4:7f:8b:b7:2d:7c:b2:
64:37:a0:15:40:ab:fa:a9:ad:bc:3b:d2:26:a1:ca:
67:f6:f5:a7:79:64:49:14:2e:cd:af:88:02:9a:20:
50:32:b0:6f:86:f5:29:8d:4e:53:5f:33:49:c9:e0:
d0:5c:b7:db:ac:bf:44:a1:46:33:af:f2:dd:80:7d:
00:67:d6:d6:b8:3b:32:78:7e:7b:8a:de:50:00:2a:
9f:ea:9e:c5:e0:63:6f:e3:aa:5f:71:36:d0:98:62:
52:4f:94:b1:76:24:8d:00:57:56:5e:ff:3d:33:4e:
b5:1f:52:2a:d7:bb:31:a4:f3:fd:bf:5f:e4:d7:bf:
54:31:fc:7e:c2:25:be:14:bb:97:8b:84:be:bc:5b:
c3:22:87:fb:d5:55:16:a9:8d:43:ca:5f:68:ad:a1:
94:48:08:bc:c5:5d:18:03:65:44:ac:f9:e5:bd:2c:
8b:a5:13:9b:61:8f:16:30:d9:fb:00:16:8e:e1:6f:
6a:4a:e2:e1:1e:df:00:f4:84:11:40:f5:f9:11:b4:
47:96:61:2e:ae:24:3c:fa:ad:8e:50:c9:15:5c:08:
19:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3B:09:78:BA:BC:66:6B:ED:8D:9B:84:AC:E0:B5:90:20:1E:3D:78
X509v3 Authority Key Identifier:
keyid:5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ea:6f:ee:08:8a:8f:8c:bc:62:87:ea:a3:a2:77:37:c9:a6:
f8:a6:e2:dc:11:54:f2:f3:73:aa:ac:3b:3d:26:94:ea:be:ab:
48:19:32:3c:b5:09:78:ad:45:08:c2:fa:df:f0:bb:26:7a:ab:
b0:d2:4a:c4:de:55:0f:80:3b:e7:78:f2:a4:fd:04:a3:3f:15:
ec:fc:fc:bb:b5:0b:26:60:cd:29:3e:60:e5:dd:86:24:8a:5f:
3b:13:f4:0a:99:47:a0:89:5a:7b:42:18:87:67:58:23:91:9f:
01:cd:6b:e6:ac:17:40:d0:91:53:1c:db:d3:0d:bf:aa:c4:7b:
96:ed:c8:7b:d6:95:37:e8:b8:be:eb:9d:f6:4a:cc:52:de:dd:
fa:6e:e8:a6:dc:ab:5e:df:47:53:3c:c2:fd:03:be:82:ad:f6:
92:1e:66:2f:29:b4:de:87:4a:89:f0:d1:bc:a3:75:d4:8a:5c:
d8:b1:df:f6:02:df:d6:c6:6e:3b:66:ec:9f:80:2a:c1:f0:0b:
b4:92:1a:34:a4:16:76:c4:16:b6:5c:ad:08:26:3b:48:cf:0b:
7b:a1:85:c3:83:63:cf:1c:48:ad:20:ec:9a:33:53:1d:21:3e:
12:34:e0:d0:7d:3b:17:38:68:50:91:16:3b:68:07:c8:81:8e:
ef:19:0e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 08:17:40 2026 by rpki-client