Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
File: xLG0WKv3l97cxmHlSmhfZRg0tdE.mft (raw, json)
Hash identifier: y3BrsX++v8QWLdgLI6Gv/ZOxr2zwrpBKfm2jZ4FeyOQ=
Subject key identifier: CC:43:39:7B:EC:75:A7:A3:1C:90:7E:B9:5A:C9:CF:E9:45:B9:39:0C
Authority key identifier: C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
Certificate issuer: /CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Certificate serial: 019CE259AC43585495E3BCE150045FA6C298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
Manifest number: 156A
Signing time: Thu 12 Mar 2026 14:00:53 +0000
Manifest this update: Thu 12 Mar 2026 14:00:53 +0000
Manifest next update: Fri 13 Mar 2026 14:00:53 +0000
Files and hashes: 1: Vu85Nu-HoLeRv_52CEznI8bQbss.roa (hash: c6ty/wCdDrBOcI9jUvVNl5APK8YZjil4x8ZlNRshHvo=)
2: hwEYkWKezFU1S6DS8A0TF6JXUos.roa (hash: dJKRSf7F67Dm6ZGKlb7G6KP8NQfxdE863RZT2JIwE9k=)
3: lo3R5w_kTel81Z1irkIbzAD6F8Q.roa (hash: PuU1Xdn3kY1LjMwZS3Qaqe5MniakxiQ+Y+f6yTPGRCQ=)
4: nb0hXlBPQhPWTuMEqZzkSxkwpXI.roa (hash: 55gzjqx5n4gyySLdEurC8vvFbXFEosab3sYhqOZ+WA8=)
5: xLG0WKv3l97cxmHlSmhfZRg0tdE.crl (hash: PeCtkjhoMydtAno4/E8ScQQjslvLsa/A426Pg3FDR3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:59:ac:43:58:54:95:e3:bc:e1:50:04:5f:a6:c2:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Validity
Not Before: Mar 12 14:00:53 2026 GMT
Not After : Mar 13 14:00:53 2026 GMT
Subject: CN=cc43397bec75a7a31c907eb95ac9cfe945b9390c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0f:26:ed:5d:1d:81:4d:e1:24:10:65:61:87:
8e:e3:14:c2:be:66:08:50:ad:36:50:63:89:13:18:
4c:96:83:d8:28:2f:19:23:38:9d:66:67:e2:2e:12:
1a:89:be:f1:a4:8b:42:76:52:3b:4b:de:e1:49:6f:
dc:46:49:32:45:e8:56:69:38:ab:72:dd:b5:ce:b3:
2e:d3:be:97:13:c3:fa:20:b2:f5:d3:2f:8f:9c:e4:
4c:ef:ed:2d:15:89:ed:a0:0b:98:7b:f6:dd:6a:57:
1c:2e:07:85:3b:91:1a:57:be:c0:a7:8f:84:b7:27:
ec:d3:2a:d7:55:d4:94:d8:0f:de:ba:61:c8:79:a2:
5d:59:8a:98:e9:ba:7d:7b:e3:29:1e:c0:a4:4d:32:
2f:30:3d:29:01:fd:b7:9a:ab:d6:75:04:40:1f:cb:
57:28:0d:3c:55:5d:4d:8f:03:de:2f:39:0d:37:00:
9e:f5:d7:df:45:0a:72:7c:ed:ef:f4:f6:b7:04:a5:
b8:a8:1c:f4:d7:2b:3f:95:ad:95:e9:5c:b2:cf:62:
5c:90:94:83:ba:7e:70:8c:9f:4c:db:80:b1:75:5d:
5c:4b:57:35:14:13:5a:eb:97:9e:2a:bb:d0:fc:b4:
f9:cc:3d:af:70:0a:4d:2e:fd:bd:68:44:79:0e:3d:
91:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:43:39:7B:EC:75:A7:A3:1C:90:7E:B9:5A:C9:CF:E9:45:B9:39:0C
X509v3 Authority Key Identifier:
keyid:C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d8:fb:d8:4f:89:e1:c1:4e:35:b6:b4:07:85:21:ca:52:7c:
9a:d0:56:86:fa:6b:31:d4:6f:ee:c8:fe:00:be:82:8d:f3:27:
56:96:48:7b:53:1c:b1:60:4c:4d:18:f8:83:68:9c:37:28:5e:
86:0a:05:e6:72:6d:66:03:94:3e:19:1b:04:38:43:f6:2e:7f:
04:dc:c2:07:28:a9:44:ee:0a:f3:7e:e3:11:ca:a0:ff:5a:ce:
d5:73:58:84:6b:d2:e4:a1:27:e8:1a:3b:11:e3:4e:55:db:81:
d6:27:0d:81:4c:eb:34:93:74:dd:e3:44:ef:4f:d3:80:aa:ed:
b2:f2:15:6a:da:14:24:ab:29:80:8d:be:e6:c2:71:42:7e:5b:
cf:08:c6:61:0c:72:a9:2f:96:d4:73:fd:cd:41:16:eb:d9:b6:
cd:98:77:86:55:ac:59:f7:91:a2:35:f3:3a:10:26:ab:7b:6c:
52:8b:ff:03:99:6d:6f:a1:98:95:32:48:2f:11:c4:97:1c:de:
63:56:d5:f7:08:3f:79:3c:55:20:24:6d:69:cd:0f:69:76:e8:
66:16:e4:5a:95:45:62:43:10:ec:ae:21:5e:47:7c:c8:88:69:
b7:c4:21:93:13:a7:7b:da:7e:7a:cb:b7:0c:e8:56:a2:24:01:
b2:81:07:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:56:23 2026 by rpki-client