Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft
File: XaewUFU8jungWrTDf9l9KCEha0E.mft (raw, json)
Hash identifier: egW1W8wlvH/4P53iBxhAZ2UNNBe7yC0ueCfcfp6reWc=
Subject key identifier: 6F:1B:07:BB:33:62:BF:C3:BA:77:4E:5C:67:8D:1D:C8:6E:21:AE:C9
Authority key identifier: 5D:A7:B0:50:55:3C:8E:E9:E0:5A:B4:C3:7F:D9:7D:28:21:21:6B:41
Certificate issuer: /CN=5da7b050553c8ee9e05ab4c37fd97d2821216b41
Certificate serial: 019D389BAF6B2EAB454E20FE35E32EC5C550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaewUFU8jungWrTDf9l9KCEha0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 08:00:20 +0000
Manifest this update: Sun 29 Mar 2026 08:00:20 +0000
Manifest next update: Mon 30 Mar 2026 08:00:20 +0000
Files and hashes: 1: XaewUFU8jungWrTDf9l9KCEha0E.crl (hash: O3z1nvkyxvmh+r764bLLuT8k+S/G4m9WSGX2uEFO9DY=)
2: b_miJDSe2X7LNQkUXBeBnfQ9NzY.roa (hash: 4d/0HZTRX3AwdeZwWVGFlksAKBE1o2Mvc3JLliWqra8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XaewUFU8jungWrTDf9l9KCEha0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:af:6b:2e:ab:45:4e:20:fe:35:e3:2e:c5:c5:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da7b050553c8ee9e05ab4c37fd97d2821216b41
Validity
Not Before: Mar 29 08:00:20 2026 GMT
Not After : Mar 30 08:00:20 2026 GMT
Subject: CN=6f1b07bb3362bfc3ba774e5c678d1dc86e21aec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c0:8b:27:9a:69:25:bc:ea:fc:7c:d1:ce:59:
6c:55:c0:f3:ab:4c:96:a2:ab:d0:86:0e:3d:bb:79:
84:da:86:af:8e:5f:a9:c2:77:96:71:16:8d:c6:1b:
a2:e8:20:94:7c:c3:de:d7:6a:31:22:fe:34:84:77:
64:11:6c:99:5b:17:e8:96:2e:bc:de:44:fd:42:55:
ba:76:fd:7d:16:ea:67:91:d1:a2:ff:a7:be:a6:73:
c9:b4:99:ba:94:21:d0:08:2b:a2:25:66:2e:7c:2b:
68:cc:7a:c5:d9:47:3d:34:2d:52:f7:a2:9c:be:ad:
ba:b5:39:d2:29:e4:41:dd:df:74:1e:ef:dc:61:44:
d4:6c:b6:68:65:c2:28:2b:b7:72:31:f1:9b:68:4d:
3e:a0:3b:52:ab:ba:63:b7:7c:0b:2e:39:05:34:47:
20:00:75:63:85:53:cc:42:73:ee:f0:0c:bc:45:3a:
3f:2b:dd:ec:ce:99:1c:35:07:de:c2:16:b2:ca:c7:
02:d7:03:5c:c0:b6:f1:da:0e:09:25:69:d7:bf:a0:
4a:b4:1f:67:61:18:e7:ef:da:2d:d9:9f:f6:52:0a:
c6:d4:17:46:b8:0c:5d:fb:10:c4:3d:a0:e0:e0:94:
11:14:a3:0f:b1:6f:0b:48:f4:dd:14:71:43:cc:92:
ee:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1B:07:BB:33:62:BF:C3:BA:77:4E:5C:67:8D:1D:C8:6E:21:AE:C9
X509v3 Authority Key Identifier:
keyid:5D:A7:B0:50:55:3C:8E:E9:E0:5A:B4:C3:7F:D9:7D:28:21:21:6B:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaewUFU8jungWrTDf9l9KCEha0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:76:52:92:e1:d4:25:20:b8:8f:27:f8:ec:83:91:c4:fc:40:
6d:c5:8d:aa:95:0b:99:c5:c2:68:4d:c4:c4:b2:57:33:ce:22:
29:10:8f:68:40:58:91:c2:8c:50:ef:49:94:1a:9c:d4:b1:f4:
14:91:68:ca:35:66:16:5d:b2:cb:9a:b4:1c:8d:fe:59:4c:6e:
f6:f0:d0:03:39:16:f9:07:3e:93:1d:ff:cb:c4:e2:97:3c:c6:
84:2c:53:3b:e7:c9:7b:d2:d2:22:93:99:ac:5e:16:67:82:1a:
1a:d0:47:38:d8:8e:41:05:cd:55:13:6d:f9:bc:07:4d:1e:e8:
f5:a0:0b:a6:06:48:01:5c:bd:4e:0d:6d:c1:03:68:b2:ac:90:
25:b2:c0:10:1e:0b:31:64:d4:c6:e0:6f:d7:56:1d:9a:a2:fb:
01:26:78:a2:a4:b6:69:0b:f8:61:8b:b0:89:74:d6:9c:e9:f8:
e7:9d:12:d1:6a:a7:19:6b:e9:41:19:f2:b4:68:2d:d1:26:23:
46:ec:7f:7c:e6:ae:da:51:b7:83:7b:64:c9:4b:e0:f7:db:2f:
07:a9:42:ba:2d:46:af:67:b1:ba:03:3c:e9:bd:e2:58:d3:81:
b9:ff:2e:d5:52:8e:0b:66:fb:58:57:a7:bd:28:c4:a7:58:27:
a5:02:e8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:15 2026 by rpki-client