Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
File: xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft (raw, json)
Hash identifier: eeSvb3wdMwyyHHPcFzC8nZPN5yNqdW5wZUF7YthlcgA=
Subject key identifier: E9:AD:7F:2A:97:4D:3B:4F:E1:CF:97:2D:B7:8E:22:BD:80:D2:E6:6C
Authority key identifier: C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D
Certificate issuer: /CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d
Certificate serial: 019CE4B5B64FC2EA7C84E0E3EF9287113894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
Manifest number: 0449
Signing time: Fri 13 Mar 2026 01:00:39 +0000
Manifest this update: Fri 13 Mar 2026 01:00:39 +0000
Manifest next update: Sat 14 Mar 2026 01:00:39 +0000
Files and hashes: 1: KzL1NrpF1fIv1UZ-w1843U42opY.roa (hash: e/MBTifLcIfwIpz3DnQOZZoxAp3TFvcIxij/7Ilh7dM=)
2: xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl (hash: RStK53TsCKOE7DVNN1MIDTRHylccrxnnVg5Fm3sPbRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b5:b6:4f:c2:ea:7c:84:e0:e3:ef:92:87:11:38:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d
Validity
Not Before: Mar 13 01:00:39 2026 GMT
Not After : Mar 14 01:00:39 2026 GMT
Subject: CN=e9ad7f2a974d3b4fe1cf972db78e22bd80d2e66c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f0:dc:54:1b:9d:3b:41:19:be:d7:16:a3:25:
a5:c5:c6:ab:8a:3b:ea:4e:ce:0d:f1:80:09:be:fc:
5c:5a:3c:1e:77:35:f1:b9:0c:16:4d:3f:58:cf:19:
d5:6d:bf:d4:09:f6:51:26:39:ae:7e:18:96:a5:b7:
40:0c:95:ed:45:83:cf:0e:b1:d8:b0:c0:2f:54:cd:
7f:30:94:f9:b2:08:c9:67:d9:45:15:14:a0:93:27:
56:b3:42:70:3e:a2:c7:3d:f2:ce:3e:3f:01:19:6f:
03:22:e3:19:87:c3:d3:fb:3a:7f:eb:cb:7b:06:ba:
af:b5:ff:97:75:1c:16:d8:23:cb:0d:17:3a:de:aa:
1c:f4:5e:11:bf:54:c3:ca:54:d2:a6:0b:80:9a:e4:
a0:4b:a7:c7:fd:86:e3:13:77:48:cb:07:3f:f5:3a:
58:d7:2a:d8:ee:a2:f2:8e:fa:4b:6b:a8:9f:5c:64:
20:1f:81:83:80:24:91:f1:40:81:0f:a9:5d:7b:45:
ae:5c:ef:27:4b:6a:f3:e8:93:78:9f:5a:b3:1b:7b:
54:1c:b7:d4:5d:ab:4b:51:96:b7:c9:ad:54:7f:0b:
d2:73:33:3e:61:e9:6a:32:d4:3b:c9:8d:9c:3a:20:
58:64:d2:c3:df:5b:fa:f1:d9:e9:3d:e9:57:2a:72:
aa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AD:7F:2A:97:4D:3B:4F:E1:CF:97:2D:B7:8E:22:BD:80:D2:E6:6C
X509v3 Authority Key Identifier:
keyid:C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:02:90:25:72:23:ff:e1:47:ed:3c:b1:31:4c:89:9b:26:55:
6b:b2:68:59:7b:f7:09:66:e8:00:bf:77:5d:ec:e5:a2:63:b0:
af:30:c9:2b:9b:ff:90:f5:f3:06:13:d5:6e:60:eb:ee:cc:45:
90:50:a1:d3:24:6b:2d:6c:f6:90:cf:26:7c:51:58:cb:01:90:
74:1b:ea:c8:50:fb:4e:92:d6:c7:dc:45:e6:e5:4f:ce:2f:e5:
c0:95:a3:10:4a:aa:b5:fe:bd:04:e3:82:1b:b5:58:3b:1a:d9:
b1:ff:57:b0:1a:d9:23:1a:0f:4c:5a:eb:20:39:58:2d:d3:74:
8b:c3:cb:9a:3e:11:76:d3:df:45:18:cf:11:99:ba:5f:0e:cc:
78:b4:ba:28:be:ee:71:f1:b3:37:9d:22:b3:62:d4:37:77:e9:
b5:e9:ec:ac:9a:7c:eb:b1:42:68:9a:c3:f3:52:4b:70:a5:c7:
ad:ae:64:2c:ef:31:e7:24:cf:48:bd:42:97:a5:b0:d7:cb:b2:
f9:78:5f:84:8c:42:25:11:a4:6b:6d:2e:9f:7c:24:ec:81:ed:
2b:9f:83:c0:26:1e:ed:f4:f3:8f:dc:3e:ac:55:b2:61:31:0f:
53:31:ec:71:9a:15:06:27:f7:e9:28:97:f8:ff:44:95:00:b9:
c9:19:16:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:24:13 2026 by rpki-client