Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.mft
File: XEO9wLtU-4ae6Dor2L2Hc5iTpCw.mft (raw, json)
Hash identifier: fnmQiZTwfLPzYbAoi78utFxGkfT+sdg8dfnTPxIPnvU=
Subject key identifier: 63:7A:BA:0A:98:2B:C1:E3:CD:0F:D7:90:2A:FE:A5:FE:5B:25:0B:25
Authority key identifier: 5C:43:BD:C0:BB:54:FB:86:9E:E8:3A:2B:D8:BD:87:73:98:93:A4:2C
Certificate issuer: /CN=5c43bdc0bb54fb869ee83a2bd8bd87739893a42c
Certificate serial: 019D38D2FFCDEB7A72403F5255159CE8173B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.mft
Manifest number: 0110
Signing time: Sun 29 Mar 2026 09:00:45 +0000
Manifest this update: Sun 29 Mar 2026 09:00:45 +0000
Manifest next update: Mon 30 Mar 2026 09:00:45 +0000
Files and hashes: 1: XEO9wLtU-4ae6Dor2L2Hc5iTpCw.crl (hash: Tz5WJWJBME/JjQ93Vw5jEAts+eEKAVLz0DQRvLtcEsk=)
2: pPahSaeBPta7w6VOnQkraRmUcA0.asa (hash: FCTya6t/QqQMoFaMDmatYCTAuidSm61Lv7qwKelhC5E=)
3: rXJCBpwtYShFouVpouU47HymwWo.roa (hash: z0tPKD9etDZny3IDTZR0T2qHlWP90XZw84nhExsH4jI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ff:cd:eb:7a:72:40:3f:52:55:15:9c:e8:17:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c43bdc0bb54fb869ee83a2bd8bd87739893a42c
Validity
Not Before: Mar 29 09:00:45 2026 GMT
Not After : Mar 30 09:00:45 2026 GMT
Subject: CN=637aba0a982bc1e3cd0fd7902afea5fe5b250b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a4:8a:9b:de:01:3e:b6:a5:78:3b:50:57:f8:
de:22:46:69:94:2f:26:2a:1c:27:d7:04:5a:66:b0:
be:08:b2:f8:1e:29:b0:a7:26:ed:26:63:e8:da:82:
f1:81:3f:14:4d:df:45:8b:0d:9f:94:71:d3:6f:b1:
59:48:a3:53:fa:cc:d7:61:11:74:8b:a3:e4:59:44:
b0:63:5e:8a:4c:c9:08:ab:fc:12:cf:2a:c4:14:41:
78:e7:cc:f9:59:9f:d7:21:f8:cd:0e:f3:c6:ec:84:
0a:4c:2b:f4:f4:f5:de:5a:3f:73:ab:4f:90:01:b0:
05:cd:53:2c:41:73:1b:da:83:ef:e6:d6:e7:b9:ac:
b1:b3:e4:f5:cb:0c:34:e4:e7:10:6c:57:b0:2f:23:
a8:71:7c:a3:ef:cf:91:60:b8:bd:52:42:ac:b7:cb:
ec:7a:dd:e7:41:60:d8:b2:1f:60:47:9f:d2:ec:b2:
40:32:6a:da:32:67:7d:d8:50:1e:17:ab:09:4c:c2:
20:4a:6d:3f:a2:dc:98:54:93:01:b8:0c:35:98:dd:
b5:2e:70:c8:ef:54:e3:4a:d2:07:37:5a:64:28:70:
0e:ad:fd:ff:ce:eb:ea:c1:cf:f9:1e:e7:01:9d:05:
84:e7:7c:2d:35:a3:a5:f2:65:91:e2:9c:43:9f:31:
b3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:7A:BA:0A:98:2B:C1:E3:CD:0F:D7:90:2A:FE:A5:FE:5B:25:0B:25
X509v3 Authority Key Identifier:
keyid:5C:43:BD:C0:BB:54:FB:86:9E:E8:3A:2B:D8:BD:87:73:98:93:A4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e8:59:31:14:5f:cb:88:16:f0:f8:5d:42:da:4c:b4:3b:99:
5a:09:60:d0:a3:b1:5b:10:43:de:7b:20:5b:d1:96:5a:6a:87:
43:13:27:81:65:d6:a2:a8:82:83:d9:43:26:03:1c:e1:bc:99:
87:4f:e4:61:4d:e6:d6:2f:94:5b:c7:c0:9a:62:cd:16:b6:8e:
fc:c5:fa:01:42:3b:81:3a:6c:2a:47:41:19:1b:e9:43:96:55:
72:8f:a7:9d:13:c3:0a:81:65:2a:06:45:df:1a:37:e2:63:36:
d1:92:82:1e:99:4b:e3:d6:a6:f3:f4:93:49:8d:25:eb:87:04:
bd:f2:05:36:03:15:b3:bb:e4:13:2b:bc:ba:a9:11:34:f1:a5:
25:91:b6:77:21:52:a2:ef:8a:63:7a:80:0a:c9:ba:01:fb:7d:
27:c9:23:da:5e:69:59:7a:22:58:19:cc:eb:56:a7:d9:70:64:
eb:08:6b:ef:9f:64:9f:90:56:cc:f5:26:72:f3:ed:74:76:79:
39:c8:72:c8:d7:00:36:58:a1:ee:9d:2b:b8:07:f2:ef:20:75:
71:c6:07:a3:94:a3:44:3d:90:81:d0:26:58:02:09:26:3b:67:
68:8a:bf:a2:f5:c5:c0:4f:c0:d3:aa:ae:1d:33:6a:f9:e4:e2:
ca:32:4b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:36 2026 by rpki-client