Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
File: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft (raw, json)
Hash identifier: fsqt5euio3O6LiZh0c0Hm785cOff0KsCtl4xdFYUh8U=
Subject key identifier: 9D:F2:7F:7F:C6:F2:D8:F8:DF:C2:E1:9F:78:3E:0C:23:FD:DD:58:9E
Authority key identifier: 5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
Certificate issuer: /CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Certificate serial: 019CB84BCB2BD76242E240F68216674DC9F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
Manifest number: 1853
Signing time: Wed 04 Mar 2026 10:01:40 +0000
Manifest this update: Wed 04 Mar 2026 10:01:40 +0000
Manifest next update: Thu 05 Mar 2026 10:01:40 +0000
Files and hashes: 1: 2oiBg97yJfcku7AZ1xtBGexIP9I.roa (hash: ZkJc6vel+43QcyypXskCAIYVCyw1+ndC8Q1LjIoI34g=)
2: GWcwAEGL8dWNpctIdaHLmJt2F-M.roa (hash: icoIbE+7HxZrn6cToVlzjrHBi9MeFRezSthDAS8pPcs=)
3: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl (hash: /QqE5rZd56R0Fq15Jnfp9Z7CmT/xlZjBv89QjsZ6fh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 10:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b8:4b:cb:2b:d7:62:42:e2:40:f6:82:16:67:4d:c9:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Validity
Not Before: Mar 4 10:01:40 2026 GMT
Not After : Mar 5 10:01:40 2026 GMT
Subject: CN=9df27f7fc6f2d8f8dfc2e19f783e0c23fddd589e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:7d:0a:12:7e:5b:de:1c:5a:37:a1:ec:50:78:
ed:08:25:0a:5a:ae:a8:26:1a:5b:ce:87:26:7a:f2:
7c:4c:81:38:95:d5:76:0d:a5:6b:d2:e7:92:15:30:
97:39:65:ea:8d:3d:8a:45:7e:ed:61:2a:00:60:7f:
63:37:29:72:ca:ff:16:86:59:38:56:27:aa:40:09:
70:33:b1:d6:9a:c9:94:e6:0a:4b:4c:62:d1:63:a4:
e4:a9:5a:32:ca:40:ec:8a:76:8a:7e:b9:d7:cd:0e:
d0:42:8a:d1:f3:5f:b6:f0:b5:8d:58:fd:a1:90:7c:
ad:c6:8e:68:5f:ab:3c:f2:f5:68:6f:74:21:0e:f1:
60:31:46:e1:e4:14:0b:1c:50:b9:e1:1b:30:d0:ab:
00:8b:af:73:a1:f9:39:35:2d:35:91:0b:fb:aa:3b:
72:68:18:9e:85:a2:05:7f:ff:52:f3:20:77:a3:2d:
53:cc:b6:0f:7d:e2:8a:a8:85:3f:b6:be:9e:92:5a:
af:ee:88:b7:8b:b3:51:5c:05:f4:73:a7:4a:26:09:
c2:59:54:b8:4e:a0:07:8f:76:2d:cd:27:83:b7:89:
e0:ef:45:81:4a:a6:11:44:ea:28:0f:d4:10:f1:d9:
38:16:ce:81:3d:76:9f:99:d7:d2:df:c0:2a:7e:e1:
f2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F2:7F:7F:C6:F2:D8:F8:DF:C2:E1:9F:78:3E:0C:23:FD:DD:58:9E
X509v3 Authority Key Identifier:
keyid:5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f4:af:f3:c3:3d:78:11:88:d0:c9:fd:fc:5a:d2:c9:52:97:
d8:4f:77:b1:59:74:e5:b2:07:e3:94:2b:71:f3:a4:77:69:2c:
b2:02:dd:b7:1b:61:bb:d9:47:cf:85:8e:a4:18:9f:de:0d:87:
5b:05:23:40:dc:8e:60:24:f5:a0:9e:8b:eb:87:5f:c1:52:00:
06:05:20:66:0d:30:d4:cc:f8:a9:91:6e:11:e5:14:c8:55:18:
25:14:97:ef:b7:f5:14:88:9d:49:c1:45:5b:12:cb:4a:44:84:
ab:fa:f1:e4:70:a2:87:95:fb:4d:1d:a8:fa:ec:06:67:78:0f:
02:04:d1:3f:8e:ab:ac:f8:9c:ab:6e:76:89:53:73:74:cf:a2:
a9:86:e9:aa:22:79:7f:4b:76:d3:8c:f3:85:ef:a0:17:85:f7:
d7:d8:20:0b:59:e5:e0:37:63:87:a5:0f:7c:b9:e9:bf:dc:c7:
32:6c:61:72:d0:cd:9f:86:83:01:78:d9:53:ac:6a:35:e0:10:
7a:1c:d6:ef:e2:44:0c:87:50:54:dd:c9:bc:e1:43:43:94:76:
f5:3f:3e:4a:cf:6b:f4:5d:06:78:e9:ff:3a:ac:46:f3:01:8d:
9a:75:ec:c0:d1:1f:77:e5:c6:6a:29:13:49:af:3a:ad:98:20:
1b:20:d7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 17:48:23 2026 by rpki-client