Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
File: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft (raw, json)
Hash identifier: kLAjPIsoON4SfS+mJsAgr8n2x1Seyw96s8eh5fzRk9g=
Subject key identifier: 22:B4:5D:B3:7A:3D:BD:7A:1C:0E:7C:E0:68:16:7C:D5:E2:AA:F7:89
Authority key identifier: FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2
Certificate issuer: /CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
Certificate serial: 019D382E17F3B63D20FDE1B3D0BB34362751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
Manifest number: 1058
Signing time: Sun 29 Mar 2026 06:00:37 +0000
Manifest this update: Sun 29 Mar 2026 06:00:37 +0000
Manifest next update: Mon 30 Mar 2026 06:00:37 +0000
Files and hashes: 1: XfPxNqw04f4ysUNycil0EQofl1M.roa (hash: JClRzQorRQbXDP0L/PC7A7JxisEaLLPV1aRUiLTnBv8=)
2: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl (hash: 1cCO784jTKMp7yUxRaiQFaGc5OUHuO57hVN5cPioFdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:17:f3:b6:3d:20:fd:e1:b3:d0:bb:34:36:27:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
Validity
Not Before: Mar 29 06:00:37 2026 GMT
Not After : Mar 30 06:00:37 2026 GMT
Subject: CN=22b45db37a3dbd7a1c0e7ce068167cd5e2aaf789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:dc:4a:da:c5:06:f2:8f:3f:dc:ae:fd:4d:21:
cd:90:ab:34:ea:ad:bf:5c:80:d4:77:5c:a8:40:f6:
6c:64:5a:45:3b:8d:7e:c6:77:bf:2a:bf:c8:8c:94:
32:e8:e8:2d:22:8c:cb:bb:41:d1:3f:59:37:04:67:
fb:ae:ee:0e:e8:a6:d2:f7:13:cd:df:3e:a3:6b:a9:
96:5f:6a:c4:c7:5b:27:7e:f7:45:20:03:66:68:a0:
4c:86:a0:61:a0:78:b9:fa:52:5a:46:e4:2d:81:16:
6a:e7:34:f6:55:22:25:73:3f:fd:9f:37:f8:a6:2f:
35:47:58:cd:bd:4f:0d:18:31:77:a2:1f:8a:bb:82:
50:68:f8:0c:20:ba:33:b0:3a:d6:90:b3:0d:be:f5:
eb:a9:c2:5e:bf:98:21:2a:a8:22:98:43:c0:96:6f:
c5:a6:55:6e:16:7d:a0:bd:dd:02:c5:9f:5c:15:aa:
81:c6:da:e7:5d:e2:f7:a2:39:48:4f:d8:1f:67:3a:
f9:ba:df:81:36:39:d7:96:0f:26:a4:35:a6:94:be:
92:0c:9d:f9:fa:b9:80:5e:04:34:8a:4f:3c:eb:99:
00:9f:05:46:b8:e8:61:f0:30:f3:c9:89:8d:0b:b2:
46:37:66:3c:b9:4a:88:66:53:db:96:ed:7e:61:46:
23:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B4:5D:B3:7A:3D:BD:7A:1C:0E:7C:E0:68:16:7C:D5:E2:AA:F7:89
X509v3 Authority Key Identifier:
keyid:FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b9:4a:c1:bd:9f:dd:90:bb:dd:ad:3f:d8:d2:b1:60:10:5c:
23:6f:9f:21:e2:9d:53:6f:9a:7d:92:48:b6:d8:ce:47:9d:88:
c7:b0:cb:8c:66:ff:01:83:f2:4c:94:83:17:09:aa:11:9d:46:
15:41:eb:14:d5:58:2e:f8:d5:e3:85:90:2f:e9:65:3f:00:94:
f7:af:0d:ee:b1:af:52:b9:c7:44:74:80:aa:1e:b1:74:f1:07:
43:a4:14:2c:12:9e:ba:ae:16:73:a0:5c:6d:a7:4a:35:fb:af:
05:0e:9a:29:a1:44:31:34:fb:93:d0:89:d5:f2:38:5a:77:8e:
83:cf:9b:2f:a1:33:6f:f2:76:48:4e:e1:2b:c5:24:b5:b9:bc:
12:95:c0:83:e2:d8:b5:a2:39:7a:29:08:26:71:4e:4e:33:22:
1a:29:89:39:45:e6:56:f9:ce:ec:de:82:f0:b3:f9:52:ad:81:
ec:41:c6:cf:fa:57:a2:a2:99:ec:05:93:b0:f1:db:62:f3:6f:
0c:cd:f0:c6:0e:47:64:8f:64:0d:fe:bc:d1:46:78:73:21:16:
b7:9d:d4:72:06:0d:99:b5:02:fd:b5:5d:49:9b:e0:e3:5d:95:
f5:cb:ca:20:35:a2:7f:79:c0:9c:3d:5b:c8:d9:fa:8f:1f:ce:
84:0b:49:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:55 2026 by rpki-client