Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
File: XQoNOW92k2k2XyuYPFMa_sqXEKc.mft (raw, json)
Hash identifier: kaNvWmbeD9uFnjLAgx4C77xlyPd3yXBau5/D8b3PH34=
Subject key identifier: 2B:13:7D:F3:1D:E8:4F:C0:41:A4:87:7C:7C:4A:D3:E4:57:B9:84:5F
Authority key identifier: 5D:0A:0D:39:6F:76:93:69:36:5F:2B:98:3C:53:1A:FE:CA:97:10:A7
Certificate issuer: /CN=5d0a0d396f769369365f2b983c531afeca9710a7
Certificate serial: 019D3909A87C39101A7CF76310FEA8B2EEA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
Manifest number: 0758
Signing time: Sun 29 Mar 2026 10:00:27 +0000
Manifest this update: Sun 29 Mar 2026 10:00:27 +0000
Manifest next update: Mon 30 Mar 2026 10:00:27 +0000
Files and hashes: 1: XQoNOW92k2k2XyuYPFMa_sqXEKc.crl (hash: 1eUW8FYKlzrJSbd+MdDHMhYez30NWSFijxIwEn1plac=)
2: fbgFYZOUj66PVAQpKUGgeHpzr24.roa (hash: SB3DJT334kxLqXYnE2DumDnn0I2NFlsBAqoFvdcBUgQ=)
3: uvHSWAI-yPchOFqjOVqKQlz8aVo.roa (hash: cnbvGF8AmLyRmJzV1rqVqz51KAWpBPpAaC9YvKK6e5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:a8:7c:39:10:1a:7c:f7:63:10:fe:a8:b2:ee:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d0a0d396f769369365f2b983c531afeca9710a7
Validity
Not Before: Mar 29 10:00:27 2026 GMT
Not After : Mar 30 10:00:27 2026 GMT
Subject: CN=2b137df31de84fc041a4877c7c4ad3e457b9845f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:97:af:e1:f5:d1:3d:8a:46:e8:4b:db:c0:e0:
70:29:39:41:22:fe:7d:cf:6a:06:82:db:2d:84:d4:
c1:63:0c:e0:a8:31:8f:dc:b6:5b:05:fc:65:6b:84:
11:d8:13:a5:51:73:52:c3:a3:df:df:f3:ec:6e:e9:
65:26:60:9b:72:a6:1f:7f:5e:d5:c8:fe:fe:6d:d6:
37:e0:f9:93:69:2d:60:e3:63:57:80:f6:b8:3e:d2:
81:86:35:2a:5d:24:99:4c:d9:9f:93:be:a5:54:da:
e0:ba:b3:e6:91:b1:92:51:a1:31:b3:48:a2:c2:df:
60:cc:64:14:b0:e5:1b:30:5a:52:54:66:b9:8d:27:
e9:0b:0a:d2:e5:5a:5c:31:34:4d:60:e6:e0:b8:0f:
80:54:8f:16:d9:87:db:fd:3f:21:c8:11:71:83:3f:
45:66:84:a6:a5:52:33:73:e1:f2:6b:1d:a3:88:b2:
25:34:2b:64:61:0c:32:2b:40:94:bf:dd:d9:fc:9e:
bc:41:85:87:3f:af:5d:08:9b:0d:e9:ef:0e:39:85:
29:e5:8b:2d:b3:bc:f3:91:61:a8:47:d5:cd:b8:72:
44:a2:99:cf:a5:b1:bc:01:4d:88:16:fb:89:8a:24:
69:75:3e:65:07:df:1b:0b:e3:d3:20:9e:57:2a:45:
92:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:13:7D:F3:1D:E8:4F:C0:41:A4:87:7C:7C:4A:D3:E4:57:B9:84:5F
X509v3 Authority Key Identifier:
keyid:5D:0A:0D:39:6F:76:93:69:36:5F:2B:98:3C:53:1A:FE:CA:97:10:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:89:6d:83:64:01:da:c2:73:bb:3f:e4:09:d4:cb:33:8e:f4:
14:e4:7a:f7:33:59:44:d7:92:f1:9a:42:59:57:23:83:3f:36:
82:14:1c:ae:b1:1d:bb:c9:dc:a9:39:a9:f7:b4:df:72:cf:84:
c7:b8:bf:27:58:97:57:71:1e:54:0c:2f:2e:2d:a4:49:c3:dc:
c8:97:9b:3f:bf:79:bd:59:87:8c:8f:16:95:a2:cd:71:71:74:
b2:86:03:ac:d4:c0:c7:a2:ac:25:78:03:48:6d:7a:30:fe:02:
f3:5f:e8:7d:de:65:50:ed:64:07:e8:7a:05:b2:80:46:ab:bf:
d5:90:e5:6b:3e:94:af:4e:06:47:0b:25:3d:31:23:72:b3:f4:
c0:b9:37:b4:5e:58:4a:5e:62:6d:9c:09:eb:ea:2b:5c:08:15:
2f:12:46:20:09:08:fa:98:d9:97:48:b8:bb:b3:68:61:7c:d0:
20:c2:02:d7:a8:22:3a:9a:ca:a1:ad:45:aa:fc:c1:92:ed:28:
4a:38:9d:9c:f2:dc:6d:78:37:00:b1:60:40:4c:f3:3b:3d:b9:
f6:13:d7:cf:bc:f2:1b:63:5a:ed:10:13:49:a1:df:6f:90:d1:
af:58:cb:71:a7:54:49:a4:62:b7:09:c2:87:6a:4e:0c:f1:5e:
df:e9:50:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:39:11 2026 by rpki-client