Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
File: xFvSa8XYHu6cjhotDXjRDarggZU.mft (raw, json)
Hash identifier: MJ2gj1i8HRHZo5lEl3ynxT8HArGqvGtXzZpqzXZf8I4=
Subject key identifier: D4:FB:57:4E:C3:56:DB:40:01:8F:AD:6E:51:39:96:77:B9:04:3C:C9
Authority key identifier: C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
Certificate issuer: /CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Certificate serial: 019CE2C7182820324866021CA89953CE994A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
Manifest number: 1865
Signing time: Thu 12 Mar 2026 16:00:24 +0000
Manifest this update: Thu 12 Mar 2026 16:00:24 +0000
Manifest next update: Fri 13 Mar 2026 16:00:24 +0000
Files and hashes: 1: FX91S7TqeS_5eNXFwkhAJLeDMDY.roa (hash: 7/g0n2srHScQb2lUJNavUfjGDwgVOP/uF61M1Zy+4aU=)
2: xFvSa8XYHu6cjhotDXjRDarggZU.crl (hash: bViu+Bv4Hw1yQi9dbow0Eic8aaXeW/FrRNk3htARHRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 16:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:c7:18:28:20:32:48:66:02:1c:a8:99:53:ce:99:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Validity
Not Before: Mar 12 16:00:24 2026 GMT
Not After : Mar 13 16:00:24 2026 GMT
Subject: CN=d4fb574ec356db40018fad6e51399677b9043cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7c:bb:e9:08:d5:06:22:6f:24:e2:84:a6:85:
6a:bd:c2:2b:b5:86:96:23:42:3a:f9:3a:f8:4c:d2:
2f:95:7d:4e:45:86:66:e1:34:ba:93:50:85:7f:05:
23:ec:97:8c:36:38:66:9b:a5:df:18:a5:aa:80:23:
74:6d:a4:27:0f:3f:ad:a5:00:a2:0c:b6:27:66:e3:
d4:22:05:f0:60:ad:68:03:64:f1:f6:e4:cb:34:17:
96:c0:33:22:33:f7:0c:82:7f:8d:c5:1e:98:c4:cb:
38:e9:2d:54:6d:e9:e3:13:ed:4d:a8:35:f2:5b:09:
77:bc:89:55:1a:5e:f6:e5:9e:7d:18:7b:ab:56:ce:
39:da:80:2c:c1:f9:85:48:aa:6f:cc:2d:47:ee:bf:
86:62:42:c3:62:7c:36:60:5d:85:53:d2:46:35:48:
cc:f2:33:bb:f2:b7:b3:43:93:53:b2:48:bd:84:18:
4f:f4:2f:a5:e1:5a:2e:cb:1a:49:e3:05:b0:2e:66:
d3:6b:31:b0:1c:00:0a:b6:99:e5:6f:68:59:c9:ce:
4d:cd:6f:52:07:24:ae:f8:02:7e:a3:7e:08:67:a7:
fa:02:11:1b:f0:f9:fd:cf:77:a2:0a:db:2b:f0:ea:
2f:0c:80:15:d3:0b:74:d4:3e:8e:41:4f:41:54:ee:
67:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:FB:57:4E:C3:56:DB:40:01:8F:AD:6E:51:39:96:77:B9:04:3C:C9
X509v3 Authority Key Identifier:
keyid:C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:41:f9:21:bc:28:00:3c:d7:23:1f:16:14:3a:54:49:0b:01:
da:fa:5c:c9:35:79:f9:29:a1:90:73:e6:6e:5b:19:8f:1b:4d:
5c:59:66:a8:b4:66:f5:6a:5d:c1:1f:81:a8:20:6f:0e:f2:b9:
80:77:56:c4:0b:f4:c8:ee:20:4d:57:8e:4f:02:32:21:b7:ee:
bb:45:f7:ac:3d:2d:89:35:8d:d4:e3:5f:65:4d:8e:00:a0:e0:
a9:ef:1a:3e:0a:00:89:fa:42:b6:8a:46:38:fd:00:a0:0b:31:
33:54:ab:3f:b6:a4:23:eb:4c:4d:b4:66:fb:ad:52:12:bc:f6:
22:7c:0d:bf:d2:a0:46:ed:24:3b:13:50:3b:10:16:38:15:1a:
1d:9e:ea:aa:59:11:5f:5c:9f:59:95:19:21:95:ba:fb:33:ef:
26:8f:08:5b:72:2c:c8:43:8c:a6:93:75:67:32:6f:75:df:fd:
a2:89:01:dd:6f:fc:b6:19:5d:9c:f1:a4:77:05:94:f0:11:6a:
6d:5a:81:00:c8:e0:1f:3e:f0:9d:49:c3:0b:59:8d:b8:61:21:
b7:cb:e2:2e:43:82:83:f2:03:71:e0:f8:04:9a:ca:bf:ad:4c:
4c:39:37:92:55:50:a3:1e:b3:33:58:c7:af:8c:8a:68:29:dc:
98:65:32:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 01:28:22 2026 by rpki-client