Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
File: X4anFB9vt7TCi84xRGe2FU4Pk3c.mft (raw, json)
Hash identifier: WpXLGifEBIFJnypOCrK7hLYOLdLPiNTRyTLRLCelBHw=
Subject key identifier: 2F:E8:F8:D8:18:5E:D0:C5:98:A3:07:23:74:88:DE:84:D7:CB:C4:1E
Authority key identifier: 5F:86:A7:14:1F:6F:B7:B4:C2:8B:CE:31:44:67:B6:15:4E:0F:93:77
Certificate issuer: /CN=5f86a7141f6fb7b4c28bce314467b6154e0f9377
Certificate serial: 019D37C0F4BD1040BA56761D2CB02C603C3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
Manifest number: 1029
Signing time: Sun 29 Mar 2026 04:01:25 +0000
Manifest this update: Sun 29 Mar 2026 04:01:25 +0000
Manifest next update: Mon 30 Mar 2026 04:01:25 +0000
Files and hashes: 1: X4anFB9vt7TCi84xRGe2FU4Pk3c.crl (hash: 8cSTLKJJbE4NEDHV1WbH0sJlvdzRKC6iHgD95nhoCxQ=)
2: o10KDQLCNX_eEti6B07ro4cJyK8.roa (hash: hy+4KJvTq+cRULOZkT8/acKHvswCR6Ar2bCCrvuaUxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:f4:bd:10:40:ba:56:76:1d:2c:b0:2c:60:3c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f86a7141f6fb7b4c28bce314467b6154e0f9377
Validity
Not Before: Mar 29 04:01:25 2026 GMT
Not After : Mar 30 04:01:25 2026 GMT
Subject: CN=2fe8f8d8185ed0c598a307237488de84d7cbc41e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ec:44:e8:db:51:93:d2:08:68:f2:0f:93:b6:
c3:84:fc:42:50:03:12:c2:4b:34:a5:2b:a7:27:af:
3b:95:b8:5b:52:ce:47:9f:dc:09:64:39:f6:94:c3:
bf:a2:c0:3f:3b:c6:6d:1f:14:1b:75:1c:f8:1b:c9:
75:04:16:c6:f8:21:36:24:2c:a7:04:36:f5:66:4b:
d7:68:66:19:68:df:59:32:e1:04:4b:0f:35:da:fb:
e1:1a:75:c5:f9:8a:ed:8d:13:c5:1f:07:a4:58:b3:
86:f1:e3:1b:a7:3f:1b:cf:87:49:5d:49:ce:68:4a:
69:24:9a:0f:3d:c9:83:7b:3a:83:99:06:43:dc:87:
fa:ae:ea:eb:23:b0:05:a8:c6:da:2d:3c:bd:88:1e:
26:94:10:be:85:c6:ba:63:8b:de:54:ca:28:a1:a5:
32:15:c2:53:0e:67:d0:7d:b0:b2:5e:ef:dc:28:4a:
9a:78:84:52:bc:a3:bf:82:4a:f0:e4:1a:a6:83:2e:
9f:63:96:22:27:6f:49:8f:6d:dc:a0:57:0a:09:44:
05:5e:9a:a7:66:04:5e:66:c9:92:41:c2:29:89:6c:
90:03:b1:72:d4:72:0c:37:85:96:81:99:54:99:9b:
43:a7:25:94:45:56:32:bd:f8:1a:cb:a3:10:c3:f5:
c8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E8:F8:D8:18:5E:D0:C5:98:A3:07:23:74:88:DE:84:D7:CB:C4:1E
X509v3 Authority Key Identifier:
keyid:5F:86:A7:14:1F:6F:B7:B4:C2:8B:CE:31:44:67:B6:15:4E:0F:93:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:7d:d7:8d:2f:98:1d:d8:ab:c3:6e:fd:1d:a1:39:62:42:fa:
53:a9:26:80:af:2d:ba:21:35:eb:c4:f4:47:ab:da:73:dc:d2:
18:26:ad:3c:20:17:fb:a3:80:03:fc:02:a3:6b:76:05:d0:41:
c8:f7:f8:1b:5f:48:f7:09:07:b2:44:49:e7:49:ca:b3:74:a7:
a6:d4:93:12:64:c6:57:63:75:99:43:b4:d4:17:63:2e:b3:d8:
c9:86:c3:2c:f9:2d:7f:83:8f:ab:fd:a6:c6:b2:4b:9a:87:43:
ea:79:ed:c6:3f:51:5e:8c:38:38:18:71:f0:c3:ad:22:6d:3b:
61:87:76:51:35:3a:0b:6b:50:47:c7:6f:ca:8e:a0:47:68:f8:
ea:e6:16:0a:44:ab:5c:b9:f8:ba:ee:14:db:90:70:26:d9:62:
8e:dd:71:ca:00:80:08:94:42:f8:7d:b1:7a:42:f1:7d:e8:22:
03:48:91:ce:7c:28:2c:3b:62:44:50:36:4b:a2:ec:1c:20:16:
a0:a0:04:05:f6:03:93:51:41:c2:7a:1e:d2:0d:7f:93:0f:6e:
0b:47:95:d3:a8:84:ac:9e:c9:fc:fa:55:92:de:f3:d8:c5:87:
ba:69:05:76:a2:e0:4d:74:9a:87:da:66:05:d9:be:a1:c4:d7:
ab:54:65:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:30 2026 by rpki-client