Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
File: xYe5zadWA-sNnjdxZ79-DI5EBAM.mft (raw, json)
Hash identifier: M6Aq4EVzaGliAL3iaMaaW0MbSn/ICd8TMXZF28mV4Vs=
Subject key identifier: 8A:22:52:01:63:AD:F2:5C:39:FF:73:3E:F6:3B:98:37:91:A1:3F:21
Authority key identifier: C5:87:B9:CD:A7:56:03:EB:0D:9E:37:71:67:BF:7E:0C:8E:44:04:03
Certificate issuer: /CN=c587b9cda75603eb0d9e377167bf7e0c8e440403
Certificate serial: 019D394143145D3FF7DB9FFB66D59F7BB098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
Manifest number: 11BD
Signing time: Sun 29 Mar 2026 11:01:11 +0000
Manifest this update: Sun 29 Mar 2026 11:01:11 +0000
Manifest next update: Mon 30 Mar 2026 11:01:11 +0000
Files and hashes: 1: ZmvGPOp_1qrvVkC55KMPvnEbYj8.roa (hash: PAyaFkNXlsk7gSyWBxSONv2o7kwM1R1bojPLp2ngilE=)
2: xYe5zadWA-sNnjdxZ79-DI5EBAM.crl (hash: OHPzqFw1ryV0eLpwg/+IEAZuUsN/idi64ALr40Y+GNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:43:14:5d:3f:f7:db:9f:fb:66:d5:9f:7b:b0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c587b9cda75603eb0d9e377167bf7e0c8e440403
Validity
Not Before: Mar 29 11:01:11 2026 GMT
Not After : Mar 30 11:01:11 2026 GMT
Subject: CN=8a22520163adf25c39ff733ef63b983791a13f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9c:fb:45:d6:58:af:c6:c1:d6:70:02:5f:1b:
f0:73:ef:09:8c:69:c0:5b:5d:f7:84:6e:45:30:26:
2e:8b:ce:44:af:67:74:76:39:1a:7c:75:d9:ba:78:
f8:07:a3:c5:c4:b9:d1:a5:a7:bc:e1:e0:92:b9:eb:
a0:41:09:1d:9f:a9:2a:76:23:60:3b:9a:00:22:f0:
46:8d:02:20:12:68:44:c4:1e:ca:6c:24:b8:1d:70:
44:b2:93:dc:cc:aa:c4:0d:60:c3:75:a7:15:65:ef:
10:43:57:49:ba:d6:41:9c:28:d6:56:8a:41:25:ee:
c9:ad:3d:ab:5d:52:25:89:36:5b:2c:9c:5a:3a:ef:
5c:fb:38:83:10:f4:84:a4:9f:16:40:d2:92:e1:ff:
46:25:eb:2e:dd:38:73:d8:b2:80:47:d5:81:bd:c2:
c1:a8:41:a1:b4:e6:69:c0:92:c2:ff:e0:fe:1e:4f:
1c:3f:39:d2:6b:10:40:a0:45:c1:4c:5d:94:0d:70:
8a:c5:73:47:a1:f6:6b:8f:6d:31:de:36:2b:d9:21:
77:73:d8:8d:94:9c:07:80:57:c8:b8:75:ee:77:8b:
fb:c9:58:0a:97:58:8f:bc:3b:ff:f6:4e:e8:29:ef:
5a:dd:f8:cd:17:98:b6:8a:af:cc:47:93:e1:97:c6:
60:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:22:52:01:63:AD:F2:5C:39:FF:73:3E:F6:3B:98:37:91:A1:3F:21
X509v3 Authority Key Identifier:
keyid:C5:87:B9:CD:A7:56:03:EB:0D:9E:37:71:67:BF:7E:0C:8E:44:04:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:85:6a:16:22:54:3b:a5:a3:f9:b9:0a:32:c5:94:65:82:2b:
61:bc:8b:9b:81:b4:d9:52:bf:a4:1e:ca:95:55:5f:61:64:28:
5c:d2:f6:bf:d6:23:7a:72:cf:d6:3e:02:79:dd:8b:a4:ce:2d:
8f:8c:cd:32:55:5d:21:22:0a:f6:35:9a:b8:6c:5d:e2:1c:09:
06:33:40:5b:c3:31:74:96:07:d9:c8:31:00:cf:28:ab:22:85:
d1:81:4b:17:b9:5b:23:14:97:64:01:3b:d6:b5:e1:19:7c:c1:
7b:96:57:a8:a6:f3:bd:8e:90:9f:7c:d9:3e:40:f4:57:08:54:
d0:6a:10:d6:38:81:24:f9:84:00:6f:22:b8:b2:5c:ed:5b:c1:
75:9a:63:38:17:86:e0:23:5d:17:39:20:06:62:f0:1d:3e:94:
39:6a:ff:b0:51:c0:ab:70:2a:e9:ce:3a:eb:9d:47:10:2c:43:
f5:3d:08:ba:0b:8d:15:03:c9:7a:3a:0a:b8:be:77:02:8d:3e:
80:9f:a9:ec:ae:40:83:41:b7:3c:cf:4f:48:cc:63:7e:6d:51:
b5:f3:d0:04:b9:47:65:f6:92:cc:e5:1d:98:47:fc:45:7c:3f:
fa:08:58:ab:0c:29:13:20:b8:41:66:37:5d:0d:e5:4e:4a:5f:
8e:cd:2a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:00 2026 by rpki-client