Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
File: XTcKSLWfuBFJXxHElzRILyKxo5I.mft (raw, json)
Hash identifier: vB0QY1wIyE5R6zAECxGQXOfACHvYOWfp9GJ8XgeboCs=
Subject key identifier: C0:D8:87:3D:B1:46:76:7F:76:78:87:FF:F8:FF:0B:57:3D:E4:27:EE
Authority key identifier: 5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92
Certificate issuer: /CN=5d370a48b59fb811495f11c49734482f22b1a392
Certificate serial: 019CCBD235E90FDE245931A3E8D13E431D86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
Manifest number: 1560
Signing time: Sun 08 Mar 2026 05:01:17 +0000
Manifest this update: Sun 08 Mar 2026 05:01:17 +0000
Manifest next update: Mon 09 Mar 2026 05:01:17 +0000
Files and hashes: 1: IcvWLfVUU_qQmUluK1ZJPZKwDUE.roa (hash: 5KtWCkiCc0spLueO4XERS0KkPgjFXkSMZZzwBDaPptQ=)
2: XTcKSLWfuBFJXxHElzRILyKxo5I.crl (hash: KRiQr0uvqVft9gLdEaXOJH9FQEtU1YCt9KSMl1vHKPw=)
3: iTA00PhnwnNaKrIdb7Sf-BOFNWU.roa (hash: VqBJga5+IchMfnf1RmPYAK4MIX90SZMIG8XmiqppDnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 22:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:cb:d2:35:e9:0f:de:24:59:31:a3:e8:d1:3e:43:1d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d370a48b59fb811495f11c49734482f22b1a392
Validity
Not Before: Mar 8 05:01:17 2026 GMT
Not After : Mar 9 05:01:17 2026 GMT
Subject: CN=c0d8873db146767f767887fff8ff0b573de427ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:20:50:fe:71:53:c0:23:76:fe:90:1e:20:78:
96:bb:23:c4:e6:a8:a1:36:b4:6c:76:2c:18:22:e0:
3b:ef:ca:c4:49:7e:09:61:b9:c4:9e:21:2e:5b:64:
db:68:90:d1:ad:52:dc:b6:ce:e2:32:09:a3:ab:4f:
7b:2b:9a:7b:37:20:d3:33:1d:d8:4a:51:5f:bc:b5:
89:a5:90:40:4d:e7:d0:7e:cd:79:0e:c0:f7:bd:49:
9a:c9:c3:66:2d:ec:e2:0e:29:b0:e0:e2:79:bf:af:
71:4c:a3:fb:07:0d:17:af:fe:f6:fd:9f:c3:84:ef:
a8:ab:94:53:a7:ad:20:77:64:13:e0:fe:8e:0f:83:
0f:93:50:f0:68:07:6c:5a:8b:31:cb:25:e9:d8:55:
76:c0:95:6f:aa:a5:c6:5f:7d:95:62:aa:77:f5:b6:
46:bd:c8:88:0e:c4:3c:af:d3:06:4f:c6:b1:da:37:
f2:c4:22:bb:4b:10:9d:90:08:0f:67:be:15:8a:81:
d6:44:3a:eb:f8:7c:44:b9:70:21:b6:ba:f0:f6:64:
2e:f8:3b:07:1c:ff:4b:ff:7c:28:ee:bf:15:37:b8:
17:3b:e5:54:4f:ad:50:93:b1:82:eb:43:da:06:6a:
32:67:41:a5:6e:c1:da:8b:ba:2c:df:eb:0d:09:65:
8b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D8:87:3D:B1:46:76:7F:76:78:87:FF:F8:FF:0B:57:3D:E4:27:EE
X509v3 Authority Key Identifier:
keyid:5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ec:85:af:84:61:69:c4:84:ae:9f:f7:b0:fa:66:aa:da:6c:
93:b9:3a:78:23:36:46:c4:be:47:a4:d2:21:c8:10:08:8a:6a:
6d:80:66:1d:00:e9:81:7b:d5:e7:02:2e:1b:9f:3e:c1:4b:c0:
70:89:63:81:00:49:cb:b3:37:38:0b:c4:bf:fb:f8:de:c9:a8:
3c:6d:ad:cb:be:ec:39:0d:34:fd:c9:60:3c:f2:bb:94:97:ef:
11:c3:56:a0:b7:04:56:4e:ab:46:c4:5a:33:35:a6:fd:a3:d0:
27:46:70:4e:82:15:6c:c2:50:55:c4:31:67:96:cf:da:bf:3c:
07:b6:03:7a:a2:b0:23:80:5e:df:e7:f8:2c:32:8d:8c:b4:5c:
b4:f2:48:b8:4a:19:78:23:79:95:ae:e1:f0:ba:e1:a4:ab:17:
5d:0a:84:21:d8:07:c5:65:0a:60:45:f3:11:4c:6d:d8:f6:9a:
2e:50:20:aa:a8:42:3b:28:df:78:74:84:b2:19:3b:1b:d5:43:
d1:7b:f7:c2:4a:aa:9a:a0:09:d9:e8:43:84:68:91:30:16:78:
44:15:0a:05:11:5f:ce:2e:18:4f:2f:62:b1:4b:17:46:e8:9a:
76:5e:58:58:a6:b0:02:0a:b7:8a:0c:20:71:e2:1f:ef:d8:b1:
dd:95:22:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 07:36:36 2026 by rpki-client