Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
File: Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft (raw, json)
Hash identifier: LO3WrJIoucvFVzT7bfbM1fay9yUfk54RYiTeW3KbgPA=
Subject key identifier: 5C:32:F0:75:EB:60:8A:71:23:95:1B:32:03:F0:BE:08:37:28:19:60
Authority key identifier: 5E:6C:64:FC:20:CE:1D:97:2F:5E:34:74:31:90:48:A2:AC:65:6D:F1
Certificate issuer: /CN=5e6c64fc20ce1d972f5e3474319048a2ac656df1
Certificate serial: 019D390A6393E49E88F15F964118682D4EAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
Manifest number: 116A
Signing time: Sun 29 Mar 2026 10:01:15 +0000
Manifest this update: Sun 29 Mar 2026 10:01:15 +0000
Manifest next update: Mon 30 Mar 2026 10:01:15 +0000
Files and hashes: 1: 6biWQQnc0CHW4mM9TF1Zeg3Rxuc.roa (hash: Pat5YGIm4+fu7xYnIi8/71KV0EL/f5Y/ZCFPyi82ugo=)
2: Xmxk_CDOHZcvXjR0MZBIoqxlbfE.crl (hash: rcDNEqMfMBwdRDHMG4YeCTKx4pTnOMc9qvNsLNT8hzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:63:93:e4:9e:88:f1:5f:96:41:18:68:2d:4e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6c64fc20ce1d972f5e3474319048a2ac656df1
Validity
Not Before: Mar 29 10:01:15 2026 GMT
Not After : Mar 30 10:01:15 2026 GMT
Subject: CN=5c32f075eb608a7123951b3203f0be0837281960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:32:24:7e:1e:24:6c:32:cf:63:88:62:45:c2:
b1:4a:42:5b:0f:67:8c:cf:f2:d5:04:2f:93:57:34:
29:e0:2c:37:a2:97:58:ab:e7:e4:b9:ab:08:41:cf:
97:e7:d1:9a:7a:2a:29:92:6c:40:53:c4:06:99:57:
66:02:52:0c:6d:ad:66:8d:e9:e1:96:fb:08:fb:6f:
59:c7:84:e2:83:3b:ce:50:a7:73:b3:c0:78:d1:8e:
53:66:53:18:be:56:3d:63:69:de:28:d8:4e:d4:cd:
f1:52:12:85:23:9e:15:6c:9a:7e:3e:fb:56:82:45:
6b:39:bc:20:cd:64:c4:74:53:c3:be:86:ce:25:8d:
aa:07:07:c9:a4:1e:34:8b:39:c5:54:20:3a:99:c1:
02:47:57:3b:d0:53:0e:0f:b3:f4:33:42:28:7c:d0:
b4:c9:cd:26:be:49:16:15:9a:d3:6d:b7:86:f7:0f:
c1:97:31:6e:ad:6d:85:5e:c4:8e:4c:37:4a:57:6d:
d9:aa:2d:eb:45:f4:8d:a1:81:9f:c7:36:60:56:7f:
10:4c:5b:1f:6f:29:bc:54:d2:b2:bd:d7:91:1f:4e:
7e:d5:6b:02:e4:86:8a:5f:d1:34:13:ea:41:4a:08:
1c:ca:61:36:09:8e:de:8c:8c:dd:3b:ca:11:54:0b:
2b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:32:F0:75:EB:60:8A:71:23:95:1B:32:03:F0:BE:08:37:28:19:60
X509v3 Authority Key Identifier:
keyid:5E:6C:64:FC:20:CE:1D:97:2F:5E:34:74:31:90:48:A2:AC:65:6D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ea:8c:2e:fb:8e:7d:f0:f3:7c:b9:07:91:86:38:3c:75:8d:
06:ed:56:c4:90:0e:77:ea:bb:ca:37:b1:61:73:05:e2:f3:5c:
7e:63:f0:38:c6:16:e8:0e:10:eb:5b:18:7c:dc:7f:26:9e:b3:
6d:3d:62:c4:d9:9e:3c:e0:ca:06:5c:f6:99:f5:6f:98:40:76:
71:8c:7a:60:88:d2:10:30:a0:6f:24:ce:49:4a:05:cb:b2:69:
44:27:2b:51:b7:e9:7a:7f:bf:7c:08:b9:84:b6:9f:20:02:e2:
e2:72:ae:cc:d4:06:ce:be:c4:8a:30:1e:5e:34:3c:ad:f2:9f:
33:df:0b:4a:6a:ff:9f:27:f4:5f:87:2a:39:28:98:e0:42:b6:
a5:f9:ed:75:8a:6c:c4:2d:c7:ef:4f:5c:d3:87:ad:4c:af:f9:
9c:7f:1f:6d:01:0e:cd:d1:a3:d6:c8:e1:2d:68:bf:32:92:a7:
b2:86:03:22:c1:f4:db:62:3e:86:a2:b3:35:d7:4d:66:73:2e:
48:67:78:cb:ff:44:85:bf:a6:ba:fb:c8:49:b4:b0:62:2f:e4:
91:89:f3:d3:28:78:ea:10:80:09:bf:1d:dc:66:2a:c6:73:b4:
2f:2c:da:26:3a:dd:57:e1:e3:95:16:07:f2:de:b5:0e:94:0e:
61:e5:ab:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:00:27 2026 by rpki-client