Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft
File: Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft (raw, json)
Hash identifier: KKnN+eojSCMkxpxyrGyL6WhtYM09JriSENG8Q6viH70=
Subject key identifier: BB:AD:89:86:55:59:74:BF:89:7D:04:59:28:33:63:71:7A:04:C6:96
Authority key identifier: 5E:4F:1A:32:A3:7E:08:39:00:AB:A5:61:70:8E:52:AB:23:4E:3A:38
Certificate issuer: /CN=5e4f1a32a37e083900aba561708e52ab234e3a38
Certificate serial: 019D39AF4945B19A10F664A9A2FF5D0B090A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft
Manifest number: 084E
Signing time: Sun 29 Mar 2026 13:01:21 +0000
Manifest this update: Sun 29 Mar 2026 13:01:21 +0000
Manifest next update: Mon 30 Mar 2026 13:01:21 +0000
Files and hashes: 1: LI8mfoguQg_wE6aQfHZYVjBGEwA.roa (hash: ZNCQmm2JmdPCyWjwNoC7wMjJStghkA3kdN5AbD7KwIA=)
2: Xk8aMqN-CDkAq6VhcI5SqyNOOjg.crl (hash: /FDaHrHzm8H3EevjcLmKl9uk7aaNOaDnqI5oGVbioF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:49:45:b1:9a:10:f6:64:a9:a2:ff:5d:0b:09:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e4f1a32a37e083900aba561708e52ab234e3a38
Validity
Not Before: Mar 29 13:01:21 2026 GMT
Not After : Mar 30 13:01:21 2026 GMT
Subject: CN=bbad8986555974bf897d0459283363717a04c696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:98:e2:cf:f8:2b:28:77:b7:77:e1:3a:6d:5b:
6a:37:8e:b2:21:32:41:01:d0:2f:5c:eb:c1:4e:ad:
6f:ac:c0:39:7c:ed:38:80:d6:65:f6:5a:c9:00:fc:
5a:a8:4b:48:e2:9a:a0:93:39:61:00:c2:9c:81:38:
9a:47:b1:fd:bb:30:88:9b:8d:e1:cd:60:c5:f4:eb:
35:2d:bf:aa:9d:14:94:1d:c3:e6:d4:0c:c7:24:3f:
91:3b:60:4d:4d:6a:b0:27:b8:e0:53:42:35:41:2e:
e0:21:28:a1:38:16:b4:ee:57:f3:fb:cf:d5:a6:47:
ea:0f:2a:05:03:40:6c:06:c0:59:bf:93:3b:2f:0a:
df:e2:c6:bd:b9:e6:ce:ed:68:04:9f:97:3f:6a:b3:
24:32:38:26:75:be:39:c7:85:bf:4f:1f:65:74:f5:
73:d5:57:11:29:5f:8e:b2:17:b9:7b:69:aa:38:24:
5f:d2:5c:3f:17:ff:b6:75:11:13:ab:0a:5d:c3:6a:
5b:e2:70:38:c3:a0:74:af:ec:94:0f:04:ac:f3:96:
e6:be:2c:e9:7d:bc:d6:d8:ab:65:80:6b:03:a9:87:
6d:fb:ec:11:13:c0:a8:cc:3f:29:24:ff:22:cf:6a:
fe:2a:20:85:7e:63:5c:8a:2b:49:3a:b5:e3:a4:6c:
62:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AD:89:86:55:59:74:BF:89:7D:04:59:28:33:63:71:7A:04:C6:96
X509v3 Authority Key Identifier:
keyid:5E:4F:1A:32:A3:7E:08:39:00:AB:A5:61:70:8E:52:AB:23:4E:3A:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ba:77:bd:0e:cb:6e:cf:be:12:d8:74:77:0d:a4:eb:a9:42:
94:2d:0a:4e:2f:05:0d:5a:27:53:e1:e4:00:05:ba:4c:56:36:
3b:7b:82:52:91:56:af:02:f1:d5:5e:7e:36:7b:26:3a:95:36:
ab:41:74:32:29:94:e4:63:49:d0:3b:23:d3:5d:b5:5e:15:5b:
7e:b9:f0:03:09:b6:16:83:56:e8:4e:43:b8:25:cb:84:a3:91:
86:4c:75:04:6c:c1:a5:3a:aa:6e:cc:6f:14:2f:2e:77:1d:6f:
ad:f8:26:42:0e:81:1a:7f:8c:70:74:e5:dc:b2:c3:7d:47:e5:
c0:f3:48:23:cd:0b:36:14:8a:08:84:6c:79:60:75:b7:a6:71:
bf:5e:ae:7d:8d:2d:14:cd:15:c2:45:2e:9a:f7:28:93:ad:45:
19:d3:0a:a8:88:2a:57:cf:71:c6:71:c5:58:02:b9:66:70:64:
71:99:91:10:4c:b0:5c:e7:6b:c8:01:dc:e7:4b:06:b6:a2:d5:
89:d7:40:1f:8a:ef:dc:25:e5:f6:39:2f:d2:b3:3e:b8:32:b4:
e1:04:af:24:47:b4:b9:e2:82:00:b7:44:13:8c:1b:7a:09:66:
98:d1:da:e6:99:b5:ac:c2:5c:95:57:a4:b0:74:83:47:a5:a6:
c9:6b:47:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:01:43 2026 by rpki-client