Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
File: xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft (raw, json)
Hash identifier: 32F4v849I7k7L8hbMU1853JJE2FlvRGkYz3pvWzQ4og=
Subject key identifier: EC:5C:14:DE:2E:BB:8A:2D:5A:8B:46:CF:57:D0:9E:75:0F:6F:37:F2
Authority key identifier: C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4
Certificate issuer: /CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4
Certificate serial: 019CCA1AE2F6283B2834EE7E9CE4C86708E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
Manifest number: 08A9
Signing time: Sat 07 Mar 2026 21:01:25 +0000
Manifest this update: Sat 07 Mar 2026 21:01:25 +0000
Manifest next update: Sun 08 Mar 2026 21:01:25 +0000
Files and hashes: 1: 5Qm3w6W4KV4G70UEua6vpofuK3w.roa (hash: 7gjCA6HtXiqMWysrEHmsQXBLEFr30GX2eXmg9EbiYCA=)
2: mI3qnrq6SLm_VsmkKACilXewKTo.roa (hash: Q4wc/dtQ8g68gQZvC3Ka6nudxiroE6HA9EnDTB3krUA=)
3: xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl (hash: JIZBODRpPmep3Eykzlp/bTql8ca2+bd3EPnskaHfAx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 20:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ca:1a:e2:f6:28:3b:28:34:ee:7e:9c:e4:c8:67:08:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4
Validity
Not Before: Mar 7 21:01:25 2026 GMT
Not After : Mar 8 21:01:25 2026 GMT
Subject: CN=ec5c14de2ebb8a2d5a8b46cf57d09e750f6f37f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:db:b5:f1:a5:ae:90:0a:a8:3c:2c:98:b9:42:
6c:30:b9:bb:f1:01:37:0c:99:04:da:38:5d:0a:08:
db:a1:c0:c0:64:f3:ff:91:73:62:7f:52:73:c8:45:
51:e3:10:62:65:6c:35:5d:56:b4:e4:86:80:04:64:
5a:8c:94:87:a9:41:dc:0e:04:88:04:c3:fc:c9:1f:
2a:9b:4a:2d:68:53:02:27:42:b4:dc:e1:f6:bc:a6:
1b:c2:29:1b:1d:aa:e3:5c:27:f6:e4:46:a9:93:33:
95:6b:bf:a6:1f:8d:62:e4:16:f8:fa:dd:6a:cc:a3:
c4:7a:54:bf:85:de:4a:3a:8f:86:44:83:19:c1:82:
c4:35:a2:ed:1b:14:48:95:e7:38:bb:7c:73:f3:d3:
86:71:4d:30:83:ea:6b:99:de:17:cf:c5:c4:c0:27:
19:2d:9d:a9:10:f8:4d:17:0d:4c:55:b1:4a:95:bb:
c2:64:5d:87:65:04:3b:21:89:2a:f4:4b:dd:b1:a4:
1c:cc:56:68:44:cb:cf:d3:4d:fc:b7:8c:2c:ef:9d:
f2:64:3b:a2:ad:d8:5d:2a:e9:40:a3:59:77:a0:07:
1e:97:f0:bc:58:4f:0b:9e:54:7a:a3:b7:8c:c7:3a:
75:89:20:76:7f:6a:f6:37:9e:ac:f4:83:57:7a:55:
d5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5C:14:DE:2E:BB:8A:2D:5A:8B:46:CF:57:D0:9E:75:0F:6F:37:F2
X509v3 Authority Key Identifier:
keyid:C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:38:33:d9:e1:11:69:8c:b4:26:c7:fd:75:47:5b:7b:e0:e0:
34:fe:ca:b3:05:b8:0f:dc:44:27:a9:dc:a4:54:69:0d:b9:c7:
3e:f9:72:95:7b:67:f4:84:9c:70:4d:0f:e7:4a:6f:86:e1:e6:
26:58:27:f6:04:36:cd:b5:02:30:d3:c8:6d:47:ef:fe:af:47:
d1:0f:b1:fd:fd:a0:dd:2d:07:ab:dd:eb:97:8b:c8:41:64:91:
7c:f3:bc:21:f6:c6:7d:c5:12:2d:f7:9b:d8:93:ef:9b:98:ea:
f1:aa:5a:2e:cf:d0:16:fd:ac:d9:01:c6:f2:82:a6:06:ca:22:
24:87:86:2e:86:ef:18:1e:33:e6:89:f0:78:d4:25:6a:f0:e4:
42:d8:cb:7b:5a:d2:58:c4:cb:46:ea:d8:ca:68:e9:c1:fc:5c:
8f:40:f0:87:70:f6:38:94:b7:c3:bb:83:f7:ba:a8:d9:33:04:
68:91:7a:0f:22:aa:b2:e8:db:44:92:c2:b4:fa:46:70:3f:70:
02:8f:51:af:6d:e5:e0:00:eb:00:83:4f:0e:b6:ce:14:d2:25:
96:48:df:f1:ac:17:6a:b4:7a:3c:48:49:a5:8c:18:fa:60:4d:
71:6d:bd:cb:77:c5:ce:21:37:2d:68:f5:13:96:96:f3:28:96:
49:67:26:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 01:35:31 2026 by rpki-client