Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
File: xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft (raw, json)
Hash identifier: ClOzd7TEZLmDPUVGCfwsOcfW81GbMOjVSMOfqxMCLTY=
Subject key identifier: FA:18:91:49:8C:5F:25:49:D4:FF:D0:7A:7E:93:7A:D4:0C:B0:A0:F6
Authority key identifier: C5:0E:EA:13:07:21:E9:CD:19:76:FD:7E:0F:34:C9:6D:F6:EA:C6:B0
Certificate issuer: /CN=c50eea130721e9cd1976fd7e0f34c96df6eac6b0
Certificate serial: 019D37C07E9D4FD8265D115C70C8A947E842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
Manifest number: 05F2
Signing time: Sun 29 Mar 2026 04:00:55 +0000
Manifest this update: Sun 29 Mar 2026 04:00:55 +0000
Manifest next update: Mon 30 Mar 2026 04:00:55 +0000
Files and hashes: 1: 2DuCV_W-U_DjGo5XDf9E-S3sShM.roa (hash: cc9HcaIk4ywCecPBpWCavoWGQGYzOyoXbURNvhX6CYg=)
2: UF4pzZ4nyW6OV0vWDdSDtWl2FC4.roa (hash: i7rT7fXaiMm+2WOfWQg8Ficq8leAUCxuWRS6LiqQgSo=)
3: xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl (hash: Fg3BjKv8pe7leJY9D1J3DoR/SPETcp/naqaF9N9Awm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:7e:9d:4f:d8:26:5d:11:5c:70:c8:a9:47:e8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50eea130721e9cd1976fd7e0f34c96df6eac6b0
Validity
Not Before: Mar 29 04:00:55 2026 GMT
Not After : Mar 30 04:00:55 2026 GMT
Subject: CN=fa1891498c5f2549d4ffd07a7e937ad40cb0a0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:dd:9a:a9:2f:22:a9:9d:f3:60:9b:de:c3:7d:
e4:96:30:6b:5a:1d:43:aa:52:16:87:ce:86:cb:51:
04:02:08:b0:fc:08:47:8e:d8:ae:9f:17:5d:dc:c9:
50:af:23:f3:e5:92:7d:71:b8:c8:c6:3d:e8:ca:d8:
4b:d5:43:b2:27:bd:f5:40:a2:3e:44:9e:f5:d2:a5:
4e:bc:2a:1a:2a:d4:05:52:3d:ec:70:2e:74:c8:a3:
b2:ee:06:48:cc:4f:1d:5a:ed:03:09:8a:6f:35:6f:
e8:92:b2:d5:a1:45:d5:56:38:e4:96:dc:dc:ef:16:
cb:01:0d:20:ff:f6:3f:51:35:ae:00:7e:f3:68:a0:
19:b3:7e:93:82:74:1e:f4:1e:e8:84:2c:f5:7d:83:
37:c5:83:a4:97:ca:6a:a3:32:82:3e:fd:82:8d:86:
14:9d:50:25:29:c7:08:ba:2f:5d:57:19:43:90:06:
90:95:88:e1:f9:b7:5f:c6:3a:ab:57:50:cf:89:fc:
5c:d8:25:94:c2:e4:4e:76:2a:5a:dd:fd:ed:b6:1c:
61:a2:eb:d4:fa:34:82:b7:43:fe:f1:54:c3:52:eb:
06:6f:18:b1:00:ca:fe:92:da:90:89:27:47:4c:67:
25:e3:83:c5:bc:16:8a:5b:02:e6:d3:64:2e:75:db:
9d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:18:91:49:8C:5F:25:49:D4:FF:D0:7A:7E:93:7A:D4:0C:B0:A0:F6
X509v3 Authority Key Identifier:
keyid:C5:0E:EA:13:07:21:E9:CD:19:76:FD:7E:0F:34:C9:6D:F6:EA:C6:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f7:98:b2:0c:ea:f6:ad:3e:80:78:60:b5:73:24:2e:d2:da:
24:a4:4d:77:2b:cf:fb:17:21:d8:a2:a4:b6:c3:2c:d9:89:8d:
62:6d:de:00:3e:c9:54:52:a4:e4:5a:6d:d4:f4:c1:6a:59:16:
90:63:db:c0:9b:80:33:f4:2d:1f:ea:8c:db:5f:5d:89:40:90:
3e:d7:29:35:80:7a:fe:2d:40:96:3b:91:d2:4d:19:3e:73:54:
a1:51:5b:7a:f7:70:2b:1b:ef:9a:f3:2e:a0:40:8a:e7:a7:d9:
dc:03:10:7f:90:d1:61:29:b1:71:f2:3d:92:e6:3d:04:09:d3:
5d:98:30:76:04:7d:63:28:f5:05:9a:62:9a:1f:4c:55:89:a0:
82:c3:0d:25:14:66:9d:df:bd:6d:fa:55:d0:63:2b:1b:c5:ef:
3a:d2:42:6e:49:83:c6:9c:7d:bd:82:e0:32:9d:c5:b7:9a:f7:
bc:b9:0c:0f:0d:cd:9d:df:5a:96:e4:af:8e:e4:f9:b4:e8:5d:
fe:92:0f:96:ca:98:c7:69:aa:3d:42:68:a4:0e:78:b5:4e:82:
49:78:8d:1e:f8:73:a7:91:b2:92:25:7d:ac:c6:8c:f8:69:24:
93:8c:05:8b:03:7b:ce:ce:62:59:5e:17:9c:67:01:d6:b4:d3:
3a:cc:b7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:40 2026 by rpki-client