Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
File: XinALSYfkT6lv4PCvHwzQUpCvMo.mft (raw, json)
Hash identifier: ZW9fMi6Fr95fzWBHV3f/LLs94W4YP2lAHXuJAvA9Q8A=
Subject key identifier: 32:D7:51:89:1D:9A:0B:BB:AF:47:8C:D9:80:85:D0:D3:5E:0F:17:0E
Authority key identifier: 5E:29:C0:2D:26:1F:91:3E:A5:BF:83:C2:BC:7C:33:41:4A:42:BC:CA
Certificate issuer: /CN=5e29c02d261f913ea5bf83c2bc7c33414a42bcca
Certificate serial: 019D3A1CA8F765AAA10C9CDCAA7DFFD6A91F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
Manifest number: 0F78
Signing time: Sun 29 Mar 2026 15:00:49 +0000
Manifest this update: Sun 29 Mar 2026 15:00:49 +0000
Manifest next update: Mon 30 Mar 2026 15:00:49 +0000
Files and hashes: 1: XinALSYfkT6lv4PCvHwzQUpCvMo.crl (hash: 5tuJvf4w/SjYas9LKuz6+vLp55wqRgYRoWlbGGNynWQ=)
2: _4iBeTs5cxfGTAtYktUUrEwV_VA.roa (hash: N664oCzOfQ38VT4ESVgwevGf4XPQ0H5eTMOYBDJq9m0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:a8:f7:65:aa:a1:0c:9c:dc:aa:7d:ff:d6:a9:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e29c02d261f913ea5bf83c2bc7c33414a42bcca
Validity
Not Before: Mar 29 15:00:49 2026 GMT
Not After : Mar 30 15:00:49 2026 GMT
Subject: CN=32d751891d9a0bbbaf478cd98085d0d35e0f170e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f0:53:dc:69:02:54:9c:17:83:5f:f2:e0:36:
39:dd:8e:44:d7:21:6f:30:80:79:fb:2d:56:33:c7:
5b:a5:6b:58:1e:56:31:e2:91:6a:84:2f:73:e9:6e:
80:b1:95:1a:23:9e:5d:22:d6:2b:b0:d8:67:c5:64:
81:6b:47:6e:f0:bd:c2:f4:a5:39:9c:d0:36:86:e3:
8a:b2:20:d0:d3:ad:ce:23:be:c2:fd:2d:7b:31:80:
dd:64:2f:31:53:56:d6:19:00:4f:ee:71:25:c4:d6:
0c:ea:96:e4:48:26:c2:9b:84:39:e9:b1:38:9b:e5:
d8:5b:22:bb:fa:f7:e3:08:71:2a:cc:2d:8e:9e:a0:
5e:a4:ec:43:17:ef:c1:56:ea:fc:88:ea:37:06:ee:
7e:ea:52:88:52:a9:45:88:37:5d:c3:d1:61:1d:e9:
9b:da:df:ba:a3:59:57:53:e3:89:46:86:b4:f8:8e:
ff:c9:da:77:f7:88:5e:31:e0:ac:01:9d:d7:85:68:
34:f9:98:90:7a:a1:6b:3d:8a:de:07:e2:11:f4:09:
01:74:61:3e:95:4b:65:74:55:f5:0f:fe:36:c1:1e:
5b:11:ac:ab:af:36:42:e8:6b:68:e4:b6:e0:b4:1d:
56:00:7e:29:23:e8:49:27:3c:2c:2b:9e:03:6e:1c:
a9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D7:51:89:1D:9A:0B:BB:AF:47:8C:D9:80:85:D0:D3:5E:0F:17:0E
X509v3 Authority Key Identifier:
keyid:5E:29:C0:2D:26:1F:91:3E:A5:BF:83:C2:BC:7C:33:41:4A:42:BC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d4:4d:97:70:7d:c0:0d:30:85:66:19:0e:2a:a2:9a:bc:83:
c1:45:e8:79:56:c8:cc:22:d4:d9:6d:6e:5d:ee:c6:0b:f4:72:
50:e6:22:15:cb:67:39:69:5e:29:cc:fc:0d:d8:f6:76:dd:b6:
9b:8a:fe:87:95:81:53:21:5f:eb:6e:b9:03:d5:40:fc:6a:a3:
09:5f:69:77:13:81:52:9e:41:2c:14:21:fc:05:89:de:c3:26:
bf:9d:16:9f:75:30:23:93:5d:f9:ad:5f:1d:60:0c:a4:8e:c7:
78:3e:e8:3d:c1:18:b6:d7:85:93:b9:86:35:33:e1:e3:6b:9d:
f5:e1:0d:c2:a4:bb:69:bf:41:cc:4f:6c:94:37:7a:40:cb:c1:
5e:a6:1d:d0:0b:63:1b:df:b7:26:67:bf:f3:a9:83:52:53:bc:
3a:5c:3b:a8:fe:e9:3a:33:c7:1f:38:d7:f0:10:c7:f7:c7:62:
8f:f3:3c:9f:03:8a:9e:ea:59:2c:ad:5d:d3:b5:7f:1d:ed:94:
d8:97:7c:b0:9a:3b:d3:0d:f3:86:98:ef:4d:66:1b:95:b2:b3:
ca:5b:89:9c:9f:61:7c:7e:49:8f:bf:5b:70:c1:c3:40:31:80:
c0:d3:76:e4:c2:a9:d9:f4:ef:8c:5f:19:01:50:1d:bd:5e:52:
6c:6e:7f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:24:18 2026 by rpki-client