Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft
File: XqFlPhd6opVUAIBcjHW9DWhYOvw.mft (raw, json)
Hash identifier: 0neHfygjINOrwM3OXbLhmAQOXfj4XEshGDN6ibdksgU=
Subject key identifier: 9D:46:92:CE:AA:CD:3A:C2:0B:6B:22:94:4C:B1:85:40:C7:95:A9:AF
Authority key identifier: 5E:A1:65:3E:17:7A:A2:95:54:00:80:5C:8C:75:BD:0D:68:58:3A:FC
Certificate issuer: /CN=5ea1653e177aa2955400805c8c75bd0d68583afc
Certificate serial: 019D39AEB05EE8CFDABB0B8F411925450A4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqFlPhd6opVUAIBcjHW9DWhYOvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft
Manifest number: 0D20
Signing time: Sun 29 Mar 2026 13:00:42 +0000
Manifest this update: Sun 29 Mar 2026 13:00:42 +0000
Manifest next update: Mon 30 Mar 2026 13:00:42 +0000
Files and hashes: 1: Cj5zwQGWSYblCJRXKaQKctud0XU.roa (hash: xmUDvaYQWawK9zhBWUIaHZpPsBr12uVNC2m3+pJz1gA=)
2: XqFlPhd6opVUAIBcjHW9DWhYOvw.crl (hash: fGZsXisWTjPA4npL6ihtDGEWx26M78rkBtCFb/tMphI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XqFlPhd6opVUAIBcjHW9DWhYOvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:b0:5e:e8:cf:da:bb:0b:8f:41:19:25:45:0a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea1653e177aa2955400805c8c75bd0d68583afc
Validity
Not Before: Mar 29 13:00:42 2026 GMT
Not After : Mar 30 13:00:42 2026 GMT
Subject: CN=9d4692ceaacd3ac20b6b22944cb18540c795a9af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:23:8a:03:38:b2:d4:c5:4c:d9:98:e1:cb:ed:
0b:71:36:33:b3:fd:7c:6c:cd:86:c7:a0:69:d8:c4:
a6:6f:b9:79:3b:55:43:9f:17:25:d3:13:01:6d:d8:
23:06:02:f0:8e:d1:22:43:34:2b:3d:9b:33:de:bd:
8f:6c:14:d8:d8:a5:fa:32:be:f1:2e:09:a7:23:b2:
22:1c:5c:0b:b6:49:7f:a6:a1:6a:3b:42:93:9f:04:
e0:7d:db:32:10:4d:02:53:29:96:fd:c9:e1:fe:fa:
23:61:22:ff:a5:e3:14:0f:4f:1e:e9:5f:d6:3e:01:
41:c4:0e:5f:4c:00:06:2c:c9:a4:92:d5:16:77:8f:
fe:98:76:b7:cb:9b:c1:d2:d6:6c:6a:ba:86:f9:39:
8b:42:f0:1a:c8:56:53:77:55:2c:9b:02:8b:53:b1:
96:16:c1:f2:f4:ee:33:80:b6:a1:fd:e9:fb:c6:00:
48:68:45:67:3e:50:15:0c:a5:b4:4c:f6:68:be:0a:
3b:ad:ae:eb:0f:c7:9b:f4:cf:57:b0:79:f5:16:ec:
ad:33:da:55:8f:0b:cb:e6:a7:38:d7:9c:6f:d4:83:
cb:c7:58:5a:cf:15:34:1f:6f:79:1f:6d:23:f4:f1:
f5:2b:73:92:62:a7:19:70:63:00:7e:f9:ed:7a:83:
b2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:46:92:CE:AA:CD:3A:C2:0B:6B:22:94:4C:B1:85:40:C7:95:A9:AF
X509v3 Authority Key Identifier:
keyid:5E:A1:65:3E:17:7A:A2:95:54:00:80:5C:8C:75:BD:0D:68:58:3A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqFlPhd6opVUAIBcjHW9DWhYOvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b8:a5:36:3d:4f:31:7e:4d:ae:a3:e4:b2:4f:e0:ff:1f:82:
50:cf:d4:f2:66:50:9e:d5:4a:72:2b:4f:1e:b3:d8:66:5b:bc:
7c:ad:dd:32:9b:cb:9f:a5:ed:f1:e0:7c:a6:a0:90:0c:eb:49:
52:e3:9e:f7:2c:a8:68:0e:47:3a:a5:2d:4e:70:8c:97:53:16:
59:b0:6e:45:06:0c:7d:c4:13:54:0b:9b:a9:b9:dc:0c:fc:93:
fc:f6:bd:5a:26:5c:1f:c0:fd:0b:a5:95:92:6e:d8:b8:84:99:
18:d7:f3:9f:e3:8b:b7:10:62:32:f5:ee:51:a9:ec:d6:c3:61:
58:48:c7:71:37:1f:61:50:1a:f5:0a:2a:3c:b3:e4:ff:14:94:
42:de:83:bf:4f:bb:b2:b4:d2:19:e1:df:d9:c1:b6:c5:27:43:
f2:2a:03:be:80:2f:60:da:88:b0:4e:19:49:7e:35:f8:a1:94:
af:0b:96:4f:62:70:f0:50:a5:6b:e7:86:75:21:f4:f0:33:e2:
f7:50:67:f3:bc:e6:84:0c:41:dd:9a:40:f2:6f:f6:1f:c8:99:
a6:3f:05:9c:ff:44:e6:bc:6c:c9:34:71:6d:9c:90:af:86:1c:
cc:4c:a0:b2:af:3b:db:7a:a8:9c:77:2d:79:19:1a:83:b1:29:
8a:c6:bc:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:14 2026 by rpki-client