Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
File: XY9AsSSN49pfXWCX-BBoKTxL7vc.mft (raw, json)
Hash identifier: ZZZZ7NM3K/bdTLs6suHzrp4RpImBgU607Xtodem2spA=
Subject key identifier: 61:D5:3E:59:45:16:D8:D8:89:BF:57:36:CB:04:E0:C9:CE:EB:BC:A5
Authority key identifier: 5D:8F:40:B1:24:8D:E3:DA:5F:5D:60:97:F8:10:68:29:3C:4B:EE:F7
Certificate issuer: /CN=5d8f40b1248de3da5f5d6097f81068293c4beef7
Certificate serial: 019D39AED0145794DBF80CA61B588CE06AB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
Manifest number: 01BB
Signing time: Sun 29 Mar 2026 13:00:50 +0000
Manifest this update: Sun 29 Mar 2026 13:00:50 +0000
Manifest next update: Mon 30 Mar 2026 13:00:50 +0000
Files and hashes: 1: XY9AsSSN49pfXWCX-BBoKTxL7vc.crl (hash: ZUwlFkzkK4FvTtRTZ7U7a/2wBQETmvHmjFKtPdkyEq8=)
2: _a7gNZLlQxgHn1SWkyljxM4Vp8E.roa (hash: riqb9ZgtO6K145lOcaQYpYRovN3sqPG5Tn86hViYkIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:d0:14:57:94:db:f8:0c:a6:1b:58:8c:e0:6a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d8f40b1248de3da5f5d6097f81068293c4beef7
Validity
Not Before: Mar 29 13:00:50 2026 GMT
Not After : Mar 30 13:00:50 2026 GMT
Subject: CN=61d53e594516d8d889bf5736cb04e0c9ceebbca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:71:c8:6a:2d:0a:3a:ce:cc:d4:f4:43:c8:37:
c5:a4:29:3d:5e:c6:34:a6:f9:ff:48:b2:10:3e:1f:
ca:88:fd:6b:5b:cb:6f:f1:25:6b:b4:68:1d:b2:cb:
17:ef:91:90:e0:02:58:d8:e3:58:1b:79:66:76:19:
d4:b6:4c:3a:d1:8d:22:63:21:d0:b8:54:a7:52:a2:
2d:0f:a6:77:a7:cc:55:24:b5:a6:55:bb:b8:b7:b2:
9e:e6:fe:80:c9:c8:26:db:55:eb:6c:81:9f:41:46:
e8:f4:dd:f1:5c:a2:7f:2d:86:8b:b7:a8:fa:de:89:
c2:8a:28:36:45:0c:75:44:d4:0c:4b:ec:4e:39:74:
4b:69:a5:de:11:41:16:f0:f8:68:9e:37:c3:ac:c7:
0a:aa:22:f8:d0:cb:5f:67:14:65:aa:78:32:28:0e:
fe:af:8b:8b:ec:2e:3f:38:e3:af:e3:0c:66:ff:b4:
34:ce:b4:ab:5c:1c:f7:db:8b:2a:0b:78:59:57:14:
ea:fe:26:01:42:6c:1c:d3:97:84:65:96:47:2b:bc:
d6:11:20:d9:b7:f6:ff:c3:26:f3:b1:fc:10:b2:d6:
6b:cd:93:25:04:47:cb:67:fb:80:f2:d3:c2:c2:db:
5c:c7:de:f1:de:c8:1c:72:a2:aa:27:74:97:0e:95:
82:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D5:3E:59:45:16:D8:D8:89:BF:57:36:CB:04:E0:C9:CE:EB:BC:A5
X509v3 Authority Key Identifier:
keyid:5D:8F:40:B1:24:8D:E3:DA:5F:5D:60:97:F8:10:68:29:3C:4B:EE:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:11:97:81:bf:ef:13:32:ec:f1:d4:19:2a:28:ad:6a:ed:58:
59:20:71:4f:90:c0:3e:16:ac:e9:87:47:4a:3d:7e:0b:c2:15:
89:b6:43:b2:72:0c:57:11:e5:79:2f:97:e3:0a:cb:2f:12:f1:
43:7a:cd:50:a4:84:50:49:ae:c6:d0:38:d4:3d:44:a5:6a:a7:
5c:ef:60:de:55:ba:59:a1:1d:54:88:b4:75:d8:62:38:91:41:
49:0e:1a:e3:9e:28:e1:d6:56:49:f0:79:32:5b:a0:84:e4:1f:
89:ab:0b:c5:09:e7:f0:14:bb:9a:a1:80:25:3d:f1:72:bb:35:
47:c3:26:bb:ea:aa:43:f0:6d:2a:ac:02:32:0b:ea:9d:b3:cc:
9f:fc:ec:52:14:f4:33:f1:76:28:80:03:39:fc:fb:af:b9:d6:
bd:87:62:d2:97:08:09:88:73:6c:e7:42:fc:4b:ec:c7:f1:cb:
7a:ee:7b:ef:6b:56:0d:6d:2a:89:fc:e8:9a:10:41:db:0a:15:
78:78:23:11:8f:00:7d:83:e6:21:9d:63:a8:18:63:c3:cd:32:
fc:dc:b8:a5:b3:23:33:2f:31:53:db:50:1a:b5:13:91:05:30:
70:7e:16:3f:ad:fa:51:44:d6:1d:65:2a:c0:b8:61:c5:71:dc:
59:f7:98:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:55 2026 by rpki-client