Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft
File: X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft (raw, json)
Hash identifier: FIEDrRBIa9pMcuYDh61qCH49G28yBk11k55Job7c3ZE=
Subject key identifier: 65:8B:EF:DF:E3:C8:F3:FB:3F:66:B2:16:FC:27:25:8D:52:94:E0:AF
Authority key identifier: 5F:45:B1:34:C0:91:41:0E:31:42:3E:AC:2C:CA:D0:AE:DB:8A:6E:C5
Certificate issuer: /CN=5f45b134c091410e31423eac2ccad0aedb8a6ec5
Certificate serial: 019D390A120064ACEADF204956E29784CA3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft
Manifest number: 0FB8
Signing time: Sun 29 Mar 2026 10:00:54 +0000
Manifest this update: Sun 29 Mar 2026 10:00:54 +0000
Manifest next update: Mon 30 Mar 2026 10:00:54 +0000
Files and hashes: 1: X0WxNMCRQQ4xQj6sLMrQrtuKbsU.crl (hash: sFdCJISp6dRXUxJq47zDRYjXO+Fa0kirG7tRwWbVUDw=)
2: w0awLyAE7bpppRvJ-JMjMZHR1kw.roa (hash: 980Uh/mGmlulr/4a0C22VsIGO0hmRCY1rYF5n7rPjaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:12:00:64:ac:ea:df:20:49:56:e2:97:84:ca:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f45b134c091410e31423eac2ccad0aedb8a6ec5
Validity
Not Before: Mar 29 10:00:54 2026 GMT
Not After : Mar 30 10:00:54 2026 GMT
Subject: CN=658befdfe3c8f3fb3f66b216fc27258d5294e0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:02:32:be:0f:9b:9b:89:6a:99:77:8c:74:6e:
01:5b:1e:0a:9e:0c:45:49:65:84:0f:f4:40:18:ca:
ef:a7:7d:ac:f2:e0:cc:e0:90:48:f6:df:3b:64:04:
80:c4:14:34:8b:20:5f:5d:bf:93:32:1a:24:6e:80:
4a:35:9b:bb:e3:a9:5c:d8:33:a4:2d:92:75:f5:20:
23:e6:74:a8:a1:ef:ce:ee:ea:3c:08:32:fa:80:bd:
5c:bb:76:28:3a:09:d5:2b:31:32:a1:b6:ef:8a:23:
48:92:64:8e:13:10:3d:3f:36:39:6b:0e:b8:5e:13:
cd:df:9c:f4:4d:91:8b:8a:6f:5e:10:2d:33:11:0d:
42:90:00:ce:fd:d7:ef:6d:10:3a:76:ce:5b:1d:f3:
7e:b2:bc:e0:5a:1a:be:b7:24:8a:d6:f2:e2:44:87:
c6:cb:27:7f:f2:cb:c4:eb:8d:f1:4a:e5:01:b7:77:
6d:ed:58:ee:d6:6c:ae:45:c9:12:0c:f4:4d:94:27:
ab:9c:5a:4f:40:91:64:63:0c:37:8c:d8:bf:04:ab:
ff:61:1f:a5:8e:80:c5:84:c9:c5:8b:76:2c:f5:f7:
71:e8:c5:8b:b3:ea:00:93:18:b5:0c:69:31:5c:11:
a5:35:95:9e:c9:dd:11:86:c2:99:30:c0:3c:0e:50:
39:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:8B:EF:DF:E3:C8:F3:FB:3F:66:B2:16:FC:27:25:8D:52:94:E0:AF
X509v3 Authority Key Identifier:
keyid:5F:45:B1:34:C0:91:41:0E:31:42:3E:AC:2C:CA:D0:AE:DB:8A:6E:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:8f:5b:63:9a:9b:15:73:b0:d6:0e:3f:ba:73:90:aa:f2:c6:
00:f6:5c:e5:c7:37:87:48:2d:e3:dd:26:8d:a5:9b:e7:3c:44:
8e:94:ca:2d:1b:d8:01:d9:28:cd:f2:8d:b0:84:2f:ef:06:55:
a9:75:96:f1:9b:01:46:6d:34:5e:6b:97:28:a9:91:55:f6:11:
4a:26:7f:1a:e4:86:4a:a3:b5:aa:2d:7d:33:8e:f5:19:f7:aa:
32:2b:7e:57:2d:41:59:49:a5:54:d2:cc:52:49:f1:23:ee:b9:
2f:4a:1e:cc:eb:94:15:92:ce:95:d7:6f:7c:b7:d8:82:74:87:
3b:e2:14:21:37:c1:79:7b:22:eb:b5:7e:68:a1:d4:8f:27:14:
d8:bd:c7:60:16:71:93:aa:c6:60:7a:58:1e:4d:91:a3:3d:ca:
42:20:c5:e2:f3:46:37:aa:c4:4e:38:bc:f8:9d:58:e6:f5:62:
93:a1:04:21:0e:d3:f3:4d:dd:ce:6d:89:c1:3f:dc:7a:5b:82:
37:9a:96:d0:69:0d:b0:3e:6d:32:8d:88:96:ff:13:0b:dc:fc:
5c:b7:69:a6:86:5e:fb:dc:83:0e:9c:4e:d6:e7:53:4b:5a:f8:
f9:9f:0c:e0:d9:fd:dd:5a:60:72:81:35:c6:1a:e8:b6:d9:1a:
a7:f5:f2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:06 2026 by rpki-client