Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
File: xe6WP4Kg-whm1CVTszeFl9nz72g.mft (raw, json)
Hash identifier: uLvUT978313nWRBVS0+UGAcLK7dVnXQq969ZybLOSxQ=
Subject key identifier: 29:9E:FA:99:03:7D:9D:7E:86:85:16:50:08:D4:D6:AF:A0:D2:6C:71
Authority key identifier: C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
Certificate issuer: /CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Certificate serial: 019D375296075C2D370F1EC6D602E94ECBAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
Manifest number: 1435
Signing time: Sun 29 Mar 2026 02:00:52 +0000
Manifest this update: Sun 29 Mar 2026 02:00:52 +0000
Manifest next update: Mon 30 Mar 2026 02:00:52 +0000
Files and hashes: 1: Cw_CJ5OIoHGbk_LBH69lh1CZovM.roa (hash: yuy/Yr+PAF0sScRAiUSYVsMjWEF5R7acxEyN+jKmOa4=)
2: GUYAfSyAe_7KoSF2zNniTR86G3o.asa (hash: QJFS4MThTD8AoeTU4o5zhEg8FJRAThUcCKNx9GenoTY=)
3: e1vkUB4hW3aB_edwhYTI6Nlcy0A.roa (hash: izbr6DXAEGnVX5rmj+RODLmoS4n5mXvbk+24OOXQV7s=)
4: xe6WP4Kg-whm1CVTszeFl9nz72g.crl (hash: 1swO9GJHAUXMTeLTXUGUozEceVHG6BWXSksCjnhs0sY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:96:07:5c:2d:37:0f:1e:c6:d6:02:e9:4e:cb:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Validity
Not Before: Mar 29 02:00:52 2026 GMT
Not After : Mar 30 02:00:52 2026 GMT
Subject: CN=299efa99037d9d7e8685165008d4d6afa0d26c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:21:31:1f:94:78:65:07:16:53:a8:b0:25:f6:
e3:20:f0:9e:66:71:d8:18:c4:50:b4:62:32:44:ce:
1f:14:16:be:3d:e4:80:ca:aa:97:6d:bb:74:8c:82:
85:15:67:c6:8e:f4:a9:78:4d:ea:87:b6:72:10:b2:
9c:66:c6:7d:e2:ff:6d:4b:d3:a8:cf:58:08:9d:55:
9c:ef:25:1d:e1:e7:cd:b9:8f:fc:3f:b5:ba:a9:41:
9d:d4:19:fc:d8:d0:12:8f:f5:45:81:eb:3e:a1:66:
90:c4:82:93:b0:06:98:a2:10:62:5f:3c:86:d5:2a:
6f:a9:7b:bb:2f:a3:c6:c9:68:93:ac:df:db:23:ca:
88:b5:c0:94:e0:37:7c:16:43:f3:cb:36:d0:c0:c9:
4b:ef:97:e1:d8:b0:5c:3d:fd:f6:32:43:1f:00:76:
fe:e1:3d:4e:78:f5:23:6f:62:b2:22:50:6b:bd:0e:
74:73:63:e9:ed:8b:c8:17:30:3b:4a:a2:c3:40:42:
eb:0f:c3:8d:52:79:33:f4:8d:53:7f:5d:20:43:43:
32:8a:9b:15:d6:a8:a4:d1:0c:08:88:4f:d1:b2:1a:
25:a8:86:ed:21:3f:7a:e5:14:3f:d4:ba:82:8a:a0:
5c:46:29:02:4b:93:d4:11:bb:1e:6f:e7:8f:30:f8:
4c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9E:FA:99:03:7D:9D:7E:86:85:16:50:08:D4:D6:AF:A0:D2:6C:71
X509v3 Authority Key Identifier:
keyid:C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:5c:fc:16:83:db:c7:ad:f8:66:bf:61:97:b1:86:41:95:00:
e4:0e:fa:36:ff:4a:c0:01:00:12:82:b3:21:ba:89:10:a6:13:
06:ed:15:dd:ae:cf:7a:ec:f2:b9:51:19:3d:35:04:ae:50:bb:
d5:01:86:3d:67:e9:8e:43:2a:7d:11:46:c1:c6:60:ad:34:62:
cc:f2:3c:2a:76:d0:ee:ca:39:9d:26:7c:79:a3:26:90:da:93:
57:fd:32:c4:df:77:45:56:d5:54:07:c5:1c:c7:07:f6:04:47:
ce:c7:53:59:b8:3a:5a:b6:e0:51:f7:72:5f:40:36:25:d2:ee:
c7:f7:45:0f:33:e3:95:6b:db:3c:a1:81:2d:bf:e7:d6:59:76:
51:ac:69:dd:9b:17:75:06:9b:a6:3d:3a:8a:73:68:6f:f1:ba:
e4:80:2b:a1:0b:07:eb:37:2f:8b:c8:1a:fb:1c:cc:2b:be:24:
67:4a:f5:c2:92:b8:99:5e:20:54:21:b4:41:6f:f1:c0:4f:b4:
a9:7f:1d:19:b0:f7:39:01:9b:6e:ef:12:dd:af:94:9e:3f:d6:
1d:6c:30:d8:68:e3:85:ec:b7:ff:86:55:99:fc:dd:e6:7d:6c:
56:79:cb:48:14:be:8b:de:05:5c:70:f2:24:67:c3:b7:30:74:
db:46:33:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:25 2026 by rpki-client