Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
File: X4KumjBKwILBiiiRZm9kzugdXKg.mft (raw, json)
Hash identifier: afwcZirH2nRLxV3jgcSZdcu/0mobEEtpzme82B/32NE=
Subject key identifier: FE:ED:4D:D2:13:EF:6D:70:62:BB:5B:E1:FB:A1:64:58:F5:83:45:3E
Authority key identifier: 5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
Certificate issuer: /CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Certificate serial: 019D389C0A85BDF53E2CE90B605E84C1C0C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
Manifest number: 0FF5
Signing time: Sun 29 Mar 2026 08:00:43 +0000
Manifest this update: Sun 29 Mar 2026 08:00:43 +0000
Manifest next update: Mon 30 Mar 2026 08:00:43 +0000
Files and hashes: 1: FpMR3_wbyPoQ3SpLC3msQFuHBCc.roa (hash: mnRTyPfeR1b8jfxG5BpoCLK6zLk4lmp1OJjO9At2igc=)
2: X4KumjBKwILBiiiRZm9kzugdXKg.crl (hash: o7HJEm20y1A1BVR3s9+s8nIc3TYH4VjygdB6WXDFFsE=)
3: YcE6ReHh6unnU83H-TjyslkyeUw.roa (hash: McwZCMtZVwtttRxvoSUbvLr+7AkamJmadn/zlM3onqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:0a:85:bd:f5:3e:2c:e9:0b:60:5e:84:c1:c0:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Validity
Not Before: Mar 29 08:00:43 2026 GMT
Not After : Mar 30 08:00:43 2026 GMT
Subject: CN=feed4dd213ef6d7062bb5be1fba16458f583453e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cd:c0:2d:8d:b2:27:55:f1:56:c2:b3:1c:6e:
75:cd:1e:a9:31:5a:9e:65:6e:dc:8a:70:81:86:2f:
57:64:6b:fc:7f:20:49:c1:91:01:1c:bb:0a:b2:f7:
99:13:c7:b2:79:ea:d5:33:2c:c6:1f:68:9d:be:27:
13:98:fd:09:e2:48:ff:18:f2:3f:97:3f:b3:52:6b:
b3:94:81:77:24:ea:d6:04:7b:4b:58:16:79:9c:ed:
cf:0c:5d:55:80:1f:b6:71:af:ee:50:58:91:80:a0:
53:b0:ad:63:7d:2b:4d:53:73:d9:02:d9:44:78:f8:
a1:2a:38:69:aa:cd:01:d3:b7:00:5f:14:65:cb:b2:
5d:23:3b:61:d5:43:24:9e:fe:6f:6d:26:79:08:0e:
10:48:20:20:88:71:e8:2d:d0:ef:5b:2c:78:dc:b7:
b8:84:53:08:4d:7f:98:3c:1a:02:7c:40:62:f5:4d:
7b:28:6f:e4:11:5c:d5:81:93:6c:15:6d:0a:ad:f7:
75:8e:40:3c:be:88:0a:3a:46:d5:14:1d:ab:3c:b6:
52:6b:09:8f:be:1e:26:2e:9b:7b:f3:7f:1b:e6:f1:
19:6f:32:db:92:26:c1:1a:fa:c5:25:63:9e:a8:73:
36:b6:df:11:6c:c1:47:64:d4:6d:9f:f6:46:2b:f7:
41:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:ED:4D:D2:13:EF:6D:70:62:BB:5B:E1:FB:A1:64:58:F5:83:45:3E
X509v3 Authority Key Identifier:
keyid:5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e7:61:f0:2b:22:6b:81:9e:f9:89:ba:44:e6:1f:ea:e5:04:
3a:8b:5c:af:ff:41:25:63:a3:0d:15:c2:b2:08:4f:08:bb:d0:
24:de:bb:28:ec:e7:6d:43:e6:2f:cf:23:99:8b:fd:e0:67:9c:
6e:25:a5:25:39:04:d2:bf:eb:53:bb:b5:1a:2b:5c:8f:32:38:
bd:43:8e:be:af:12:f6:9c:51:e2:72:65:4a:79:eb:8f:39:cc:
3f:9a:10:c9:be:bf:99:4b:c0:17:a1:f8:53:4a:f5:45:1a:69:
0b:84:25:fe:2a:54:11:08:b5:d5:99:f9:4a:f3:e6:7e:60:d7:
b3:a4:71:05:a6:94:e5:d9:ba:7d:1b:80:26:74:8a:ac:68:ca:
0d:e4:e0:44:9c:0c:46:cd:96:30:40:e0:27:b9:d3:e1:d1:96:
c8:04:ee:b3:cd:b0:14:d2:ba:27:eb:d7:1d:77:5c:26:0d:d1:
df:7c:a1:c5:d4:29:fb:de:a0:1d:74:c0:1d:2c:e6:c1:15:5d:
90:12:1c:99:71:01:f1:70:34:c4:39:52:c6:fd:a8:7b:4e:2d:
11:86:30:47:55:31:6e:5c:a9:66:30:3e:3a:a4:7a:fe:b8:5d:
5a:91:f7:08:9f:4e:cd:38:ae:24:45:1a:5e:ff:53:60:17:d8:
fd:37:8c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:19 2026 by rpki-client