Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft
File: Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft (raw, json)
Hash identifier: IWZ7ejbVtGpWCQMxh28hdCBMlxu3utYZZeYymRBOZEc=
Subject key identifier: 07:E6:19:D3:48:02:65:E0:14:8F:E5:10:B0:B2:F7:58:80:D3:81:8E
Authority key identifier: 5E:9E:D9:91:EE:6B:C4:BB:48:A8:B7:50:11:D0:48:19:17:E0:F3:F7
Certificate issuer: /CN=5e9ed991ee6bc4bb48a8b75011d0481917e0f3f7
Certificate serial: 019D38D30ED4162862520147B8EFB27F213E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 09:00:49 +0000
Manifest this update: Sun 29 Mar 2026 09:00:49 +0000
Manifest next update: Mon 30 Mar 2026 09:00:49 +0000
Files and hashes: 1: SyWTiReTZTnBDg5JyysBSj2Ylo4.roa (hash: fZ2UZHiHpOuYHZzSoYWZDivGjx4cM7k5nd9px5ySpG0=)
2: Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl (hash: fQ6K5Q/QOdkd7ptmFu7yUqB5csE72dKuyAKsgZjr18s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:0e:d4:16:28:62:52:01:47:b8:ef:b2:7f:21:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9ed991ee6bc4bb48a8b75011d0481917e0f3f7
Validity
Not Before: Mar 29 09:00:49 2026 GMT
Not After : Mar 30 09:00:49 2026 GMT
Subject: CN=07e619d3480265e0148fe510b0b2f75880d3818e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:76:9b:5e:43:74:cb:1d:51:7f:96:2a:ff:b8:
db:70:62:83:8d:70:c3:0e:28:1e:09:97:b9:90:3e:
bc:ef:6e:ae:50:a9:44:94:33:98:f2:7c:7c:bf:4a:
ab:2e:9f:19:67:1f:64:d8:6b:94:69:76:f1:6a:54:
8f:a5:6e:55:19:3a:1c:02:01:e0:88:fb:c0:54:f3:
21:e8:03:85:eb:be:d8:af:36:4b:2a:db:a9:11:29:
0a:cb:61:84:28:ea:79:03:58:4e:ba:07:02:ee:80:
f4:a1:53:51:b7:22:3b:b4:93:e9:82:0e:b7:3b:02:
89:c5:4f:22:52:75:a8:16:b6:dc:29:ba:52:e9:66:
ea:14:5b:f6:61:b2:c8:9d:87:80:df:6c:19:b1:84:
1f:3f:72:bb:17:28:0c:6f:f6:ea:83:11:28:cb:bd:
c4:89:9f:fa:02:46:74:b8:af:9b:e9:b6:4f:fb:be:
f6:9f:15:f7:02:59:b9:30:76:d0:ab:53:cf:b6:af:
b3:09:e4:ab:28:ed:5b:85:38:8b:8f:f1:9c:c4:24:
41:f0:e9:75:6d:70:55:3c:39:79:69:e2:b4:6c:bc:
64:3f:0d:40:e5:95:a0:7d:41:cc:fa:54:0e:94:b7:
40:43:17:47:7b:6e:f0:da:2a:40:52:a4:a4:72:57:
52:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E6:19:D3:48:02:65:E0:14:8F:E5:10:B0:B2:F7:58:80:D3:81:8E
X509v3 Authority Key Identifier:
keyid:5E:9E:D9:91:EE:6B:C4:BB:48:A8:B7:50:11:D0:48:19:17:E0:F3:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:42:a0:49:b0:1f:a0:f8:1f:e8:67:fc:5f:c5:b3:2d:fd:4e:
00:9d:1d:aa:1f:67:74:90:94:29:37:9f:f6:db:ef:de:80:3c:
1c:2c:f3:39:79:ae:ef:ae:8e:1f:8a:0a:db:22:73:16:c1:28:
e1:67:49:23:e5:ec:46:21:87:d9:78:ff:bc:b9:19:3c:4c:45:
95:e1:68:1f:a6:22:9c:c0:bd:ab:8f:02:40:c8:b2:fb:27:cc:
90:f9:49:f9:cd:02:1e:a3:4f:d8:58:00:90:16:07:fa:c4:a5:
4f:cd:76:26:22:ae:cf:2e:e6:90:e6:43:07:c1:02:ea:33:b1:
20:9a:75:b7:f7:b0:bb:a9:3c:ba:5f:a3:f1:6b:be:69:12:97:
7b:41:12:2e:bd:e2:da:fb:0c:4c:28:7f:fe:53:69:fa:60:15:
bd:27:8a:06:82:84:c1:dd:21:cf:62:ce:78:9a:d4:be:3b:48:
77:13:1c:0c:8d:52:88:1e:a8:b2:2d:6f:a6:65:8b:34:34:56:
59:59:07:66:3e:cf:db:89:c0:89:2a:98:3d:aa:02:f8:ff:18:
aa:d5:36:05:2e:e6:b8:67:36:89:98:ed:d8:17:2a:2d:45:ee:
bd:aa:0d:7d:c4:2f:a1:80:fe:80:ea:5e:68:19:b7:7e:2c:7b:
30:87:5d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:23 2026 by rpki-client