Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft
File: XOMWuo-zBWfOy8cnBR02QA4lH8c.mft (raw, json)
Hash identifier: 6HMN+lfEbDOQgAa0RzDDLOo1UhCZygCEKxHB0ZRMGgc=
Subject key identifier: 1B:66:C6:3A:29:ED:D6:3E:E8:03:96:8F:77:83:66:FF:22:D6:54:DB
Authority key identifier: 5C:E3:16:BA:8F:B3:05:67:CE:CB:C7:27:05:1D:36:40:0E:25:1F:C7
Certificate issuer: /CN=5ce316ba8fb30567cecbc727051d36400e251fc7
Certificate serial: 019D390984B403AECF3A79985B21F0834F7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOMWuo-zBWfOy8cnBR02QA4lH8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft
Manifest number: 0667
Signing time: Sun 29 Mar 2026 10:00:18 +0000
Manifest this update: Sun 29 Mar 2026 10:00:18 +0000
Manifest next update: Mon 30 Mar 2026 10:00:18 +0000
Files and hashes: 1: XOMWuo-zBWfOy8cnBR02QA4lH8c.crl (hash: pfbh3j9J2AgI8bVBKilzGDS1ISngTAEgUadB2bDkryM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/XOMWuo-zBWfOy8cnBR02QA4lH8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:84:b4:03:ae:cf:3a:79:98:5b:21:f0:83:4f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ce316ba8fb30567cecbc727051d36400e251fc7
Validity
Not Before: Mar 29 10:00:18 2026 GMT
Not After : Mar 30 10:00:18 2026 GMT
Subject: CN=1b66c63a29edd63ee803968f778366ff22d654db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:41:c1:be:85:04:c3:6d:03:4e:1d:d3:a8:3a:
90:22:2a:95:fd:7f:50:d6:22:c7:e6:41:b3:76:2f:
fd:9f:1e:9e:c6:fa:f3:59:db:ab:68:2f:0b:48:21:
3d:02:f9:38:4a:2c:8e:16:e9:f1:c7:ee:3f:82:18:
21:7f:79:56:e5:59:70:b7:28:13:fa:98:68:1f:d5:
87:3d:fa:65:fd:28:e0:c1:90:5d:5b:0a:9e:2b:cc:
11:51:69:b1:f9:58:43:06:e7:f9:63:ca:de:4e:1d:
c4:2b:a8:5c:4f:8c:77:49:04:3e:52:66:24:76:03:
2d:22:57:c5:94:78:3d:f8:2e:9f:73:f1:be:6e:f0:
48:de:4b:5b:b2:ee:3e:c6:0b:13:75:08:8c:91:aa:
8b:dc:3b:91:3c:72:a5:da:e3:7c:19:83:2f:b0:1c:
4c:e4:be:07:71:d2:2e:8a:70:7b:24:b5:9e:af:2e:
5b:00:f4:0f:87:cc:b6:0c:be:8e:1f:c4:e7:41:a6:
d4:90:be:e9:65:c8:91:a2:24:4c:a3:ca:9e:30:fc:
44:69:a3:05:17:85:73:17:0c:61:b0:7b:09:96:bd:
36:b1:01:ba:87:bd:86:bc:73:98:e0:06:6d:2e:5a:
b2:67:ae:55:24:8d:7f:59:33:f3:98:d2:1f:d8:a2:
96:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:66:C6:3A:29:ED:D6:3E:E8:03:96:8F:77:83:66:FF:22:D6:54:DB
X509v3 Authority Key Identifier:
keyid:5C:E3:16:BA:8F:B3:05:67:CE:CB:C7:27:05:1D:36:40:0E:25:1F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOMWuo-zBWfOy8cnBR02QA4lH8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c1:f7:fe:03:c3:ac:0d:38:01:47:45:48:d5:54:96:6f:3c:
69:0e:79:15:67:e0:22:0d:14:a4:83:47:03:fb:5a:64:37:c0:
83:02:c7:af:aa:f0:69:33:a4:89:52:5f:c8:2b:22:61:fb:8a:
cd:4c:9b:81:24:47:e3:6a:03:b7:d9:a5:d7:4f:3a:cf:7d:07:
60:b3:33:04:0c:2f:c8:c3:fd:ad:5a:c1:8c:c2:51:83:3d:1f:
64:bc:d5:14:8f:3c:49:a2:f5:34:3c:ce:41:55:10:d5:9a:04:
30:aa:38:94:c7:da:68:61:e3:ab:c4:ca:7b:36:83:fd:ac:66:
62:c6:fa:5c:84:f1:dd:a0:65:de:d8:86:e2:67:e1:43:81:70:
96:24:49:8d:6f:f9:98:a2:c2:54:ae:89:f5:b7:39:10:19:be:
d6:f4:c9:e9:00:8d:00:ec:77:b5:47:94:21:57:d8:5d:66:a2:
f6:ee:e3:8d:c4:9c:37:d0:d1:ca:74:a3:2a:d4:45:54:cd:51:
a7:a3:9b:f1:83:9c:9b:73:10:1a:b2:8b:a8:ba:f9:28:f4:59:
f1:d3:f0:da:e4:fc:89:dd:2d:4b:f0:3b:32:64:ea:f0:45:d5:
5f:1a:4a:dd:32:81:fb:a6:23:a3:a5:9f:f0:4d:4d:c2:18:01:
cd:a0:7b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:24 2026 by rpki-client