Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
File: XeFelYoRQmpVYoXiiuNA8KJdKgM.mft (raw, json)
Hash identifier: cOEzyp/IEhisBdfz+M4enzEbjAEGZGZygqZsU3vZD6s=
Subject key identifier: F2:D4:19:47:70:2B:3F:C3:33:BD:15:CE:AC:74:C5:CE:71:72:D2:6A
Authority key identifier: 5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03
Certificate issuer: /CN=5de15e958a11426a556285e28ae340f0a25d2a03
Certificate serial: 019D3977EC25A2F70F2FCD4EB28D0027452C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
Manifest number: 045E
Signing time: Sun 29 Mar 2026 12:00:53 +0000
Manifest this update: Sun 29 Mar 2026 12:00:53 +0000
Manifest next update: Mon 30 Mar 2026 12:00:53 +0000
Files and hashes: 1: RKz3IJpK3tLGmxT3W9hM3i7PGMs.roa (hash: RoVqVK5DIJNCCPA2hRYkxQFyuiyebRh/F8G7DU407FU=)
2: XeFelYoRQmpVYoXiiuNA8KJdKgM.crl (hash: H2Otp4EZQoS3cR+AxA7n2axl5BECByw5mlYOfFQg75g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:ec:25:a2:f7:0f:2f:cd:4e:b2:8d:00:27:45:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de15e958a11426a556285e28ae340f0a25d2a03
Validity
Not Before: Mar 29 12:00:53 2026 GMT
Not After : Mar 30 12:00:53 2026 GMT
Subject: CN=f2d41947702b3fc333bd15ceac74c5ce7172d26a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c1:dd:07:6b:4b:73:a5:b3:16:28:74:30:50:
85:0c:f1:2d:86:4b:17:2b:4c:72:d9:d4:90:30:fd:
40:5e:42:c3:76:97:63:e5:f2:d4:d0:59:6f:44:16:
a2:14:b3:f3:e1:a4:f7:4e:c3:ad:3b:49:10:40:a8:
f6:65:f0:c3:c6:d3:b1:d9:e6:31:c1:80:35:77:3c:
4d:92:6f:b3:7b:85:69:42:89:b6:63:b5:fc:68:6c:
5e:96:08:01:b3:19:f2:84:a4:33:00:7a:cf:45:20:
cd:bd:67:aa:51:ae:5b:23:b2:07:62:be:5f:b4:c6:
4a:ba:13:bb:da:29:1b:ef:a6:d4:20:b6:6b:a0:69:
e4:59:df:b2:3e:55:db:04:99:d7:44:47:f5:58:c5:
c1:fd:73:8b:da:a6:0d:52:be:b7:16:38:c5:29:4f:
0e:4c:b3:9a:13:2a:f2:46:b0:35:2f:d4:2a:86:5f:
99:cf:72:f6:6f:14:c2:c7:95:0f:ab:f8:c1:57:70:
87:d3:c5:ec:23:20:81:f6:0b:dc:45:02:bb:78:d1:
08:13:cb:92:bf:52:82:49:b9:b2:b0:ea:2e:96:30:
9b:cb:9d:aa:55:cc:88:db:1a:a5:22:32:23:0a:e9:
c8:e3:8f:8b:61:67:fb:26:7a:7a:66:cf:9b:7e:59:
f4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D4:19:47:70:2B:3F:C3:33:BD:15:CE:AC:74:C5:CE:71:72:D2:6A
X509v3 Authority Key Identifier:
keyid:5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:8d:fc:4c:3c:44:3f:f2:f7:4f:f1:d6:45:d6:fd:60:1c:14:
27:76:7a:f7:2c:65:79:e9:a9:a1:77:53:a3:4d:e5:08:27:25:
ca:f6:5d:e9:0c:02:35:0a:7d:2e:b8:0a:77:1d:79:bf:99:e1:
bf:8b:5b:ea:d4:26:f1:9c:2a:89:46:df:fb:42:47:10:5d:43:
86:90:c7:fb:20:02:fa:8a:ae:b0:b9:0b:df:36:9d:71:ae:2b:
31:35:e5:fc:b2:ee:ca:f1:51:5b:a7:42:a9:43:1e:6e:b6:35:
64:49:b6:4b:aa:8e:f0:86:00:fd:0d:8a:d1:4c:a0:68:58:1a:
34:97:53:cb:52:2c:a0:b2:b6:09:b2:cf:44:8c:bb:c3:01:36:
98:2d:18:87:53:64:79:41:e9:d1:b7:9d:42:ca:d2:84:bd:f8:
06:e8:ce:03:e9:46:37:10:63:20:e0:58:7f:cf:96:ed:a7:eb:
53:6b:7f:83:2e:7c:b2:30:90:f2:1e:60:99:d4:25:2a:5f:b3:
e1:83:39:2c:84:3e:fa:e1:33:74:14:b1:83:68:95:aa:51:94:
93:83:33:46:1d:4d:bb:43:3d:7a:2b:fb:a5:89:77:ff:55:e1:
8a:52:a4:3a:c4:cf:01:84:9a:bf:45:37:8e:38:4e:41:99:af:
6f:24:7f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:50:13 2026 by rpki-client