Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
File: X8JHQzBLf9mgZdIs2JzalQReJpw.mft (raw, json)
Hash identifier: +A3uZ8VyumHvi3jnghPNgeRk+nWG9FkhVNYw8GGGRgk=
Subject key identifier: 0A:0A:88:78:E0:35:D4:4F:AB:F7:97:FA:D3:19:DA:85:83:FD:74:EC
Authority key identifier: 5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
Certificate issuer: /CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Certificate serial: 019D39AEC93B364502C53A67A4189FADD150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 13:00:49 +0000
Manifest this update: Sun 29 Mar 2026 13:00:49 +0000
Manifest next update: Mon 30 Mar 2026 13:00:49 +0000
Files and hashes: 1: X8JHQzBLf9mgZdIs2JzalQReJpw.crl (hash: 553nz+ZyrwdBc9taepsDyM5gtmrSwVJO+XDoKjui/rU=)
2: mde2iraZFBwTbp97_tvjs2IMwjU.roa (hash: Q0iRTXsb5myu//hBM4zbKFOJNKJsTWjqhNvukcS55wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:c9:3b:36:45:02:c5:3a:67:a4:18:9f:ad:d1:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Validity
Not Before: Mar 29 13:00:49 2026 GMT
Not After : Mar 30 13:00:49 2026 GMT
Subject: CN=0a0a8878e035d44fabf797fad319da8583fd74ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:91:3b:01:a1:93:6c:fd:8e:72:cd:f7:2d:c5:
d4:2e:15:02:8d:35:ba:36:e3:23:d8:2a:73:a4:af:
4f:7b:a0:b4:96:ab:22:af:8c:8e:03:58:0b:a4:3e:
3e:9a:ca:7f:e5:82:c5:04:aa:59:0e:57:63:45:70:
d4:6d:22:26:73:7f:25:05:cb:19:27:4c:04:9a:b9:
3b:c9:f5:41:a8:81:b1:c8:78:b3:0c:a6:2c:21:76:
52:97:27:4c:96:b8:28:bf:d5:9e:38:47:41:1c:9f:
24:79:95:43:30:2a:39:07:63:d1:17:76:46:21:02:
55:74:f0:59:38:3f:cd:a5:24:2f:77:7c:7f:96:8c:
d5:dc:61:da:5f:ea:7d:4d:0b:c8:1d:d6:dc:98:99:
b3:67:8e:d7:d0:8a:9c:3b:b8:9a:96:07:9b:f9:6e:
de:f1:b4:71:28:c9:92:2f:01:0a:fb:aa:f9:ea:28:
e3:ff:f4:c7:4d:75:f4:10:d7:c8:cb:aa:9f:df:3c:
04:c3:c9:37:e9:78:17:2b:cf:2c:3f:98:70:b4:9b:
ee:48:df:ab:d8:cc:86:8e:b3:0a:9f:69:c1:23:97:
dc:43:5d:56:d9:02:8d:53:c9:8c:a2:27:b5:a4:59:
e6:48:d9:fe:d7:44:c2:1a:aa:f0:ac:f2:17:91:fa:
87:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0A:88:78:E0:35:D4:4F:AB:F7:97:FA:D3:19:DA:85:83:FD:74:EC
X509v3 Authority Key Identifier:
keyid:5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d9:d1:94:44:fc:e6:6e:74:d6:62:78:fb:73:51:e9:93:a1:
1d:66:82:e8:93:c6:cd:2a:b7:41:c7:f6:39:cf:8e:4c:e6:e8:
17:2f:11:83:22:6b:09:fd:c3:bc:9f:21:7d:a2:0d:fd:c0:62:
44:d7:57:23:1f:93:2a:f5:31:d0:fd:d6:23:29:87:bd:84:7c:
2f:60:cb:7a:dd:d3:1f:23:46:e2:c5:16:94:5e:96:b5:dc:eb:
f4:22:fc:e5:c6:28:45:d5:e6:d7:04:da:bc:81:f1:e8:4b:53:
80:f7:12:ed:dd:e0:90:c0:07:8d:a9:da:3a:0f:d6:9f:50:ab:
ad:fd:ad:f7:bb:bf:14:de:cc:4f:89:ac:ee:18:bd:20:5b:3f:
77:59:68:62:63:9e:1d:61:f0:a7:e4:ab:b5:12:04:b6:a9:55:
bc:60:9b:99:f0:bf:fe:f8:a1:10:3c:f9:09:30:d1:a9:cb:eb:
d4:41:d4:ce:17:f2:53:96:56:d8:28:48:6f:3b:30:1f:1a:43:
0c:0b:fd:25:9e:90:2b:27:52:09:3f:5d:16:76:38:0a:9d:e0:
ea:e9:df:b0:84:b5:62:4f:bd:cc:b5:3d:8f:e7:9d:3f:6f:66:
a0:35:44:f8:d2:ed:3f:12:ea:91:48:3d:7d:9b:60:13:da:0e:
a1:a4:37:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:27:31 2026 by rpki-client