Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
File: xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft (raw, json)
Hash identifier: Z6QWNFGoGfvESIwe65ycmr6w32LhcVL5ibhMFzrkHdw=
Subject key identifier: A4:FE:A5:1C:4B:7A:9C:E4:ED:FF:5E:89:E3:90:00:2B:0F:E2:E5:65
Authority key identifier: C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
Certificate issuer: /CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Certificate serial: 019D3865F7659D1AC45F566ADF838ACE7D09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
Manifest number: 16DC
Signing time: Sun 29 Mar 2026 07:01:39 +0000
Manifest this update: Sun 29 Mar 2026 07:01:39 +0000
Manifest next update: Mon 30 Mar 2026 07:01:39 +0000
Files and hashes: 1: vAqm-n6lOJmboBYQxwCWXscToCI.roa (hash: eddQmjFbutaY0t3+KjyZXIhwzLmKmB/bUbWp/1/h8vE=)
2: xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl (hash: yaSh1/Ftgts6sD6mCCTg8n9bNMbGjNwpqskAn+W9oYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:f7:65:9d:1a:c4:5f:56:6a:df:83:8a:ce:7d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Validity
Not Before: Mar 29 07:01:39 2026 GMT
Not After : Mar 30 07:01:39 2026 GMT
Subject: CN=a4fea51c4b7a9ce4edff5e89e390002b0fe2e565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:65:98:7b:3f:93:14:e4:43:e3:22:9a:25:23:
c4:df:c8:b9:aa:b8:32:25:7e:48:94:88:fe:b9:c9:
fb:e4:c1:02:ad:43:40:b9:3c:b0:2e:18:d1:86:60:
da:ce:98:72:a1:30:0d:75:4c:d4:5b:68:d9:be:c8:
f7:d1:64:28:77:a0:18:91:42:2f:c6:fd:af:72:93:
61:2a:0f:74:80:68:cd:7c:8d:a0:15:f5:a3:44:8c:
41:fb:c1:87:da:10:3a:b5:33:59:cb:a3:b7:32:d3:
29:49:3f:cb:1b:f9:54:bb:ab:06:de:b0:8e:0e:2c:
67:72:14:bf:33:1d:9a:86:59:79:fd:3a:9b:23:e8:
82:dd:79:e4:8b:c1:21:f3:60:75:7c:22:4a:53:1f:
ba:cf:92:a6:ab:7f:40:ac:56:8a:09:89:60:1a:de:
71:26:3b:c4:29:26:0e:37:99:d9:e8:09:51:bc:03:
75:6d:f4:f6:10:23:f0:83:c5:8c:31:34:c2:79:e3:
3d:aa:d7:26:42:32:9e:88:78:d3:63:81:43:6b:c6:
7e:73:9d:63:01:91:0a:9d:cc:74:16:da:93:12:9e:
57:e0:af:78:5d:42:db:9d:28:40:f6:20:5f:31:43:
89:a7:5c:6e:6d:60:07:8a:de:c3:a0:30:8d:50:3f:
bb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FE:A5:1C:4B:7A:9C:E4:ED:FF:5E:89:E3:90:00:2B:0F:E2:E5:65
X509v3 Authority Key Identifier:
keyid:C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ee:a7:18:77:23:ad:84:4d:e1:43:10:cd:cc:51:f1:10:93:
30:4f:71:9a:54:01:d9:f7:09:1b:84:88:9f:d7:7f:ed:78:8f:
cc:10:33:b3:d7:f3:f4:ec:fe:75:f5:16:84:fd:3b:d3:94:f7:
99:f8:74:d4:20:e9:0c:c7:0e:cf:aa:c3:93:f3:44:ce:59:d0:
d0:cb:69:af:af:3e:8e:2c:20:f2:0a:45:7f:1f:29:af:5e:35:
7a:1e:ca:7e:fc:f7:f2:0a:14:a1:a0:c6:1f:96:91:21:da:5c:
af:9a:0b:00:5d:00:a7:c3:5d:80:f1:b5:f4:e5:a3:56:c2:f9:
91:a6:a6:02:b3:dd:06:ac:69:db:bf:15:a7:cc:fc:90:31:e3:
2e:ea:8b:98:67:b4:22:e6:15:15:1a:b0:9d:a4:fa:ac:f6:7b:
44:3a:a4:49:37:0c:c6:f8:ce:99:81:ed:61:70:61:33:39:e0:
e7:ce:24:2e:dd:45:19:4a:b8:00:57:37:c1:f0:f9:5d:39:dd:
41:3f:c7:16:8f:ce:c7:6c:65:c2:16:c1:ca:0b:23:69:89:16:
bc:1d:c5:18:d3:c2:70:3b:de:10:19:ad:f3:ed:42:56:72:85:
82:6f:80:41:ab:f4:ff:ed:c6:d0:78:ce:3d:34:19:cf:c9:79:
22:ff:5b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:10 2026 by rpki-client