Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
File: XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft (raw, json)
Hash identifier: sgO50i0xnJn3ox68vns7M3rHL7Lxv0wz5lxUcdAyfMA=
Subject key identifier: 60:99:F8:F9:62:77:87:AD:F0:0A:C7:32:EB:92:C8:D8:CC:91:ED:EB
Authority key identifier: 5E:C0:44:B4:B9:6F:21:FA:9A:84:64:5B:D5:E3:A9:E1:97:23:08:2D
Certificate issuer: /CN=5ec044b4b96f21fa9a84645bd5e3a9e19723082d
Certificate serial: 019D3A1CDFFC2BE99201637AB961EDCDD558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
Manifest number: 15CB
Signing time: Sun 29 Mar 2026 15:01:03 +0000
Manifest this update: Sun 29 Mar 2026 15:01:03 +0000
Manifest next update: Mon 30 Mar 2026 15:01:03 +0000
Files and hashes: 1: HIhz8pdIXgjK-XvqEHJKRiDVUZU.roa (hash: 9IgTkOouc4NOjiZYiPyRk/fd3ULM88kb+ZAbPFTN9oU=)
2: XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl (hash: XNMUuzc1aS+w+3PH5c9sfzAbKjjbxhBVLQXGaOoqHsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:df:fc:2b:e9:92:01:63:7a:b9:61:ed:cd:d5:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec044b4b96f21fa9a84645bd5e3a9e19723082d
Validity
Not Before: Mar 29 15:01:03 2026 GMT
Not After : Mar 30 15:01:03 2026 GMT
Subject: CN=6099f8f9627787adf00ac732eb92c8d8cc91edeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:66:0f:5f:5c:f1:91:39:71:9a:6f:6a:ff:e3:
81:a0:c3:62:6e:1c:c2:55:be:a1:a8:9e:0e:55:d1:
9a:d2:5e:4f:57:66:7d:ae:a6:2f:5f:4c:8b:a5:9b:
b1:e7:ef:2b:0e:7e:2d:82:a7:55:15:5c:15:dc:50:
1f:ff:ea:db:c9:00:92:00:5e:4c:c1:50:e1:b2:0a:
28:a5:5a:6c:a8:6c:b2:e6:f6:4e:8f:91:ee:ab:2f:
79:64:f3:fa:fe:0f:39:ad:b1:86:fd:8d:b3:aa:0e:
32:c0:bb:e5:39:a4:9f:5b:70:42:cd:78:54:a0:ef:
d1:47:69:5d:5e:5a:36:66:52:73:c7:6b:4b:10:19:
96:f5:d6:02:d1:18:28:d8:08:ac:97:e1:a0:54:64:
e1:8a:1a:00:d2:39:8a:08:5d:f7:3b:ae:ba:bf:f2:
7a:e3:15:03:8a:0d:f9:0b:c3:45:b6:3d:4a:8a:2f:
01:70:e0:96:86:a8:52:1e:0e:cf:8b:c3:18:39:74:
6d:5f:77:89:30:0f:0c:73:44:e5:98:29:04:8c:2d:
a9:1d:55:61:b2:18:c1:14:8f:8b:1d:30:94:df:d8:
cc:01:79:46:86:17:bd:9e:19:fc:6a:62:48:5d:3f:
56:81:0d:6b:6c:92:c6:e5:43:75:62:b0:18:1f:ae:
bd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:99:F8:F9:62:77:87:AD:F0:0A:C7:32:EB:92:C8:D8:CC:91:ED:EB
X509v3 Authority Key Identifier:
keyid:5E:C0:44:B4:B9:6F:21:FA:9A:84:64:5B:D5:E3:A9:E1:97:23:08:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b7:e8:8b:fe:c7:8e:ba:c0:e6:f6:5e:f8:d8:e0:41:37:0a:
bb:ff:e6:cb:9b:ad:e5:3d:49:36:b8:e0:7e:3e:cf:49:48:ea:
df:41:df:31:5c:d3:df:29:a2:fa:cd:fd:20:f0:ee:6f:28:0d:
c7:99:0b:4c:e6:ef:12:05:4c:fd:41:81:4e:a8:fb:3e:da:26:
89:88:9e:fd:63:a2:45:26:e2:7e:88:ba:a6:89:f5:fc:49:86:
fb:fa:ed:3b:23:89:ae:85:a7:a4:d9:5d:71:93:f5:47:98:b2:
be:74:c4:f2:34:37:89:fd:9c:ba:c6:e1:57:57:b0:19:89:bb:
e7:a8:45:aa:bb:02:55:9a:89:14:ec:37:9c:6a:3a:96:36:6f:
27:a0:ff:a8:7c:07:ce:1f:76:b6:f7:c2:dc:9f:8d:67:a8:71:
98:90:57:88:47:3a:7b:71:5f:c8:c5:9e:c7:bb:dc:2a:90:2d:
40:96:86:44:91:e2:d8:11:6d:75:2a:cc:45:e3:59:5b:a2:3d:
ed:57:3d:82:b7:c9:ee:ca:67:99:25:90:18:30:ec:73:73:61:
bc:da:dc:d7:a5:c0:74:e1:39:44:73:c5:19:88:da:6b:4b:f4:
9c:3c:74:b4:78:db:37:6f:8a:89:f2:93:f1:f0:17:f2:9e:78:
54:73:4f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:25:31 2026 by rpki-client