Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
File: X5PadXwX_jig5s1wJ1xzyMaciW4.mft (raw, json)
Hash identifier: /E2Wm8iCCzVlFaG1u/o9uXdjw4ThXHLTT179WGj8uew=
Subject key identifier: DD:41:89:33:B0:53:06:93:48:4E:4B:CB:4A:DA:C9:D5:D1:49:2F:FC
Authority key identifier: 5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E
Certificate issuer: /CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e
Certificate serial: 019D38D2FF2C47729B99DD60B5A68239E778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
Manifest number: 0C5B
Signing time: Sun 29 Mar 2026 09:00:44 +0000
Manifest this update: Sun 29 Mar 2026 09:00:44 +0000
Manifest next update: Mon 30 Mar 2026 09:00:44 +0000
Files and hashes: 1: EhpMBlG4nDKvcGQKRYPAEZtRdEU.roa (hash: 00M7VIQ9njSy4l1huIv3bbpiOTYXp7U9IOJHNMG4ZKk=)
2: X5PadXwX_jig5s1wJ1xzyMaciW4.crl (hash: UBz+f7X5ayhZf/pb7JMvcnIG3cKyCXh+NvX7MdO8YBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 09:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ff:2c:47:72:9b:99:dd:60:b5:a6:82:39:e7:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e
Validity
Not Before: Mar 29 09:00:44 2026 GMT
Not After : Mar 30 09:00:44 2026 GMT
Subject: CN=dd418933b0530693484e4bcb4adac9d5d1492ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:64:d7:3d:b1:a0:83:c4:31:4b:d3:4e:61:4e:
2e:6d:c6:12:86:65:e2:11:62:74:2e:b3:6a:85:ac:
74:6d:1d:45:22:ef:8b:60:1b:d1:18:ee:02:d5:79:
55:b8:88:32:fb:4c:86:2d:b3:7f:e8:8e:ba:39:5a:
a5:7f:46:04:11:3d:80:1c:03:2f:89:29:18:f4:b6:
ba:cd:b7:b0:9c:a7:4f:0c:16:af:71:04:5b:ef:3e:
94:2a:0e:bc:0e:d2:89:66:63:b7:50:53:c6:af:30:
cd:eb:3e:25:c2:09:03:aa:b5:d3:29:9b:c7:93:8e:
45:c8:50:06:aa:fe:79:e9:b5:85:90:7b:1d:aa:9c:
c1:07:25:71:38:a0:35:4d:3a:39:18:4b:63:bd:66:
25:6b:48:64:54:cc:2c:53:3a:39:22:fa:66:97:94:
4b:7c:0d:f6:fd:42:bc:cc:04:94:d8:d8:9f:d1:3d:
71:60:96:27:be:f5:91:a5:a4:57:67:b7:fa:3f:8a:
fa:42:85:be:a9:63:14:e1:58:eb:cc:7d:dd:5f:cd:
48:ec:33:c2:48:f9:ac:12:2e:89:fa:52:ab:ac:b9:
69:c7:18:70:39:e0:c6:58:29:3e:1d:c4:43:c8:a5:
c4:40:ce:da:f4:19:a0:85:82:b3:41:0b:a5:57:5a:
51:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:41:89:33:B0:53:06:93:48:4E:4B:CB:4A:DA:C9:D5:D1:49:2F:FC
X509v3 Authority Key Identifier:
keyid:5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c6:ff:0f:dd:60:da:b4:0e:01:64:db:c1:97:d2:5f:93:d8:
37:0a:bc:a7:1b:f4:a5:fd:86:62:b5:d8:d1:5e:e0:6f:75:04:
26:89:27:61:e5:70:aa:2a:c8:6f:bc:79:b3:a2:9d:35:80:58:
c6:5b:22:c5:e3:dc:15:05:b9:e0:4d:c9:97:42:3c:2d:d3:7d:
d8:de:b8:0c:a7:b3:6b:f8:f2:a9:f8:05:d0:7e:86:20:ff:a3:
ac:df:a0:bb:de:10:2f:e6:5a:ad:50:72:79:d5:bf:b7:40:50:
00:9d:ef:a8:ad:f0:41:92:6b:63:62:77:83:40:51:0d:89:c2:
f8:0d:92:45:81:10:0a:cb:82:58:62:22:27:04:13:b6:a9:d1:
27:f0:c9:e9:67:a4:45:a9:ff:4b:1e:27:94:e1:82:7b:51:b3:
4b:0e:b8:4b:71:a7:f6:75:51:bd:5f:68:f1:2d:db:3a:69:50:
00:c9:06:15:b8:38:89:02:92:25:41:6c:24:29:5d:ef:2a:2f:
86:ad:31:4d:ea:38:cd:a2:0c:8f:eb:93:37:d1:84:ce:5a:dc:
12:96:a9:fe:8a:50:49:c5:09:a0:fb:7c:31:85:95:73:58:63:
39:d3:6c:f3:ac:0d:54:51:60:2c:43:d1:5c:28:ed:bc:76:be:
21:60:4d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:04:42 2026 by rpki-client