Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
File: x2omXKitcnOooTChdjKD0v8bTdo.mft (raw, json)
Hash identifier: Mq5tfXKM0r+7LMF84iQAbTaBOUWclMxWxzuRDz6jOBw=
Subject key identifier: 4B:5B:5B:0D:09:1E:AB:E0:38:F9:2A:AB:11:62:44:C3:06:15:92:79
Authority key identifier: C7:6A:26:5C:A8:AD:72:73:A8:A1:30:A1:76:32:83:D2:FF:1B:4D:DA
Certificate issuer: /CN=c76a265ca8ad7273a8a130a1763283d2ff1b4dda
Certificate serial: 019D37F76845D0AA927C044B74C95A755A35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
Manifest number: 16B5
Signing time: Sun 29 Mar 2026 05:00:54 +0000
Manifest this update: Sun 29 Mar 2026 05:00:54 +0000
Manifest next update: Mon 30 Mar 2026 05:00:54 +0000
Files and hashes: 1: 2NacgtrTAmPDVQ9lKq5CE6Ehhnw.asa (hash: MpQCPMnmPtD2sJGqmtD1rBnmiwGX8J1+k78/7G1N5Nw=)
2: IjN9w9R69yDRWNftVupxbr7ls4w.roa (hash: POnTpPRSP8kUYsMd04EyebP2yODd3r/J3rLB1OAAgGs=)
3: x2omXKitcnOooTChdjKD0v8bTdo.crl (hash: KbdxaVqyHDnouaoMmialbM5Gb+KYm3wkm+VafZUoadA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:68:45:d0:aa:92:7c:04:4b:74:c9:5a:75:5a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76a265ca8ad7273a8a130a1763283d2ff1b4dda
Validity
Not Before: Mar 29 05:00:54 2026 GMT
Not After : Mar 30 05:00:54 2026 GMT
Subject: CN=4b5b5b0d091eabe038f92aab116244c306159279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1e:f2:0f:5e:c8:68:f6:e3:91:2c:49:e8:d5:
d3:d7:32:06:1d:37:c5:f4:c4:5f:a3:07:50:44:2c:
38:52:7a:a6:64:9b:35:86:54:96:dc:a8:22:55:87:
f1:d8:ba:4c:5e:35:bc:87:04:f0:c5:f3:be:e0:ec:
f0:82:c8:00:5b:48:6e:9a:a9:26:61:c6:72:4c:b3:
fc:e6:26:9b:57:52:70:67:8c:b6:48:c8:e3:78:2c:
77:a4:58:e1:7a:1e:6f:f8:56:e9:db:12:19:49:3d:
ad:8c:9b:29:81:c6:a2:21:43:00:d5:51:2c:7b:99:
67:79:bf:29:54:b4:fa:42:cd:26:cd:44:b3:5e:6c:
9f:37:34:61:8a:85:56:ed:cb:95:47:fc:76:a7:b0:
ea:09:f9:33:eb:6e:a6:5f:a1:3e:07:cc:ca:16:eb:
d1:d3:f5:58:20:1a:08:8b:c9:e6:38:38:8a:12:55:
4c:bd:1f:52:7f:5e:13:88:48:e1:4e:99:89:5c:73:
72:19:05:bc:55:16:97:5d:08:4f:0c:41:b6:88:30:
cb:bb:15:3f:10:53:61:4d:34:a4:40:e9:fb:32:cb:
71:c7:bf:f9:cf:18:a3:b1:4c:1b:cd:51:12:18:e6:
2a:8d:34:80:7d:32:43:e8:f3:63:80:fd:b4:fe:1c:
9a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5B:5B:0D:09:1E:AB:E0:38:F9:2A:AB:11:62:44:C3:06:15:92:79
X509v3 Authority Key Identifier:
keyid:C7:6A:26:5C:A8:AD:72:73:A8:A1:30:A1:76:32:83:D2:FF:1B:4D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:63:79:64:1a:9d:5b:82:25:67:15:d4:53:bd:6a:54:ff:cd:
c2:2c:56:4d:97:5e:98:df:37:6d:2a:0b:4d:11:2a:69:a1:0e:
69:00:5d:bf:c0:e3:c5:b8:2f:88:51:e4:c2:4e:c6:12:fa:76:
21:cb:09:3b:51:c6:41:e5:de:1c:70:3f:1b:76:6c:dc:24:dd:
fc:36:39:fd:0b:ea:d3:ba:a7:1c:b2:53:f3:ae:e3:7e:32:d4:
f9:87:7d:45:f8:3d:a0:53:ca:84:1f:c5:90:33:1b:80:b5:de:
1b:85:2b:60:ad:6d:bb:e1:d3:60:66:80:df:7e:2e:44:21:1a:
dc:70:28:1d:3e:b3:88:75:10:8d:6f:fa:e7:22:3b:c9:5f:20:
e3:87:61:28:44:93:4d:ac:d2:71:19:24:09:a0:67:ce:7d:74:
03:54:0e:bb:b5:f0:86:d9:98:24:4b:bc:99:16:ab:04:b1:3f:
98:23:9d:2d:ef:e6:b7:a4:72:97:0a:23:7c:33:43:49:f7:04:
8c:50:b1:e8:e7:5f:53:5f:36:d5:7c:18:45:69:9f:e3:b2:92:
99:fb:98:b4:a8:c0:b7:7f:9b:42:84:15:48:bb:c7:67:e4:e9:
50:80:0d:2a:7f:c5:4f:d2:59:60:ad:cd:34:db:3c:d4:37:61:
26:08:e2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:09 2026 by rpki-client