Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
File: XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft (raw, json)
Hash identifier: RuIECQt7d63ORhZnT9JpnZmpAlZu/FuSqTX/I+SKH+g=
Subject key identifier: E7:DD:B9:E5:1B:B8:C3:E5:6A:96:CA:BE:65:A3:95:66:BB:4B:9B:FE
Authority key identifier: 5E:86:8B:02:E5:19:DD:7E:69:4C:7A:F1:E7:08:BD:D6:63:69:BD:DF
Certificate issuer: /CN=5e868b02e519dd7e694c7af1e708bdd66369bddf
Certificate serial: 019D390A1CCECBFD0A71C0E1E99F2AB83F38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
Manifest number: 0E04
Signing time: Sun 29 Mar 2026 10:00:57 +0000
Manifest this update: Sun 29 Mar 2026 10:00:57 +0000
Manifest next update: Mon 30 Mar 2026 10:00:57 +0000
Files and hashes: 1: XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl (hash: b1wMpmSbCh7UVwhKsGkqAbvjTEI0M/Vstm9Q4qKMnaY=)
2: xhCelkdkFdTsIHpEDmjN2bruQr8.roa (hash: +AqQAgHYDXWjRd+5q4R8GrL4JFr5uaVtEUtnJ3XI5Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:1c:ce:cb:fd:0a:71:c0:e1:e9:9f:2a:b8:3f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e868b02e519dd7e694c7af1e708bdd66369bddf
Validity
Not Before: Mar 29 10:00:57 2026 GMT
Not After : Mar 30 10:00:57 2026 GMT
Subject: CN=e7ddb9e51bb8c3e56a96cabe65a39566bb4b9bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e8:57:de:79:9f:a5:59:7e:e2:5d:18:3f:7e:
3c:b2:b0:23:54:18:4e:a4:2c:da:28:d4:3d:47:40:
63:86:14:44:7d:3b:44:b3:86:a4:03:ab:15:da:47:
d9:7a:42:10:39:c6:02:dd:73:05:37:5b:e9:09:08:
fa:0f:33:3f:02:0e:80:28:c3:30:e2:45:db:84:97:
f1:85:fd:53:1a:5d:7c:b8:16:48:49:39:0a:65:4c:
d2:8d:45:88:34:c9:c1:aa:ed:be:d2:e4:63:f7:ae:
39:8c:21:8f:2b:a7:a1:bc:ed:20:a8:80:3e:a8:6d:
5c:38:6d:62:13:6b:87:38:74:91:f0:31:cf:e4:27:
24:96:bc:3d:fe:7b:bc:ed:11:ef:4a:d7:eb:27:f8:
a8:5a:b9:fe:68:99:6f:87:ab:05:6c:bf:4f:25:ce:
7c:e9:f0:f5:fe:e2:cc:70:12:bc:da:96:66:f5:02:
7d:ab:b3:4a:e1:cf:36:27:bf:8c:6f:3b:21:18:c1:
ad:63:2a:ec:20:fa:90:d1:23:fd:41:2b:e7:5f:90:
ad:18:cd:67:19:f8:21:34:ae:44:08:10:3b:62:23:
9f:d4:6c:f1:ed:ce:84:bc:55:6a:14:8b:e3:41:7e:
c5:22:61:77:52:49:67:5b:19:8b:5f:23:e3:36:28:
8d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DD:B9:E5:1B:B8:C3:E5:6A:96:CA:BE:65:A3:95:66:BB:4B:9B:FE
X509v3 Authority Key Identifier:
keyid:5E:86:8B:02:E5:19:DD:7E:69:4C:7A:F1:E7:08:BD:D6:63:69:BD:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:e3:78:8d:7a:15:be:71:74:80:85:bc:89:b0:86:87:0e:76:
bf:77:7a:d5:2b:19:93:74:af:8d:4f:87:0b:cb:eb:61:f4:f1:
35:dd:e0:e7:25:8b:ec:0d:bb:25:8d:9a:3e:11:69:3f:f3:f2:
49:fd:5e:f5:59:a5:af:d9:f6:c5:a8:35:fb:b4:e8:8d:64:6a:
3a:83:5e:13:10:31:5f:c7:89:79:1b:90:31:8d:b8:4c:25:a0:
62:4a:2c:b4:9a:56:ec:a3:d7:05:cf:92:4b:0c:32:99:a6:14:
81:8e:25:e4:7e:4c:d1:f3:3a:14:05:24:a9:4c:84:d6:30:6b:
31:a6:30:01:e6:08:3e:b8:20:02:ce:ec:61:d8:e6:6e:7b:a3:
bf:de:b3:45:5f:08:e8:45:6c:14:db:98:a2:82:35:db:12:7c:
91:93:99:dd:12:e4:3b:42:86:d6:44:c2:ac:c2:b9:09:e4:9d:
03:25:d2:fa:01:62:1f:40:38:51:0a:ab:7f:5a:62:5b:53:97:
dd:fa:13:01:db:b2:0b:be:12:9d:88:d7:c0:12:78:9d:a4:56:
e6:cf:54:a8:f5:ce:55:64:16:52:b4:5e:5d:78:3d:bc:b8:72:
a7:a1:59:29:ac:1f:da:c8:5f:23:30:e9:83:19:08:ba:83:9c:
86:af:14:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:42 2026 by rpki-client