Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
File: XNTi_CtB6FbbpbpiI1umQaDYG0g.mft (raw, json)
Hash identifier: PTaUuDEgykMoyHx0GU5yxd0d6LWVSdyclismocSaucc=
Subject key identifier: A6:6F:62:6B:87:59:78:E9:C3:7D:D2:BD:64:28:1F:C3:71:8F:51:79
Authority key identifier: 5C:D4:E2:FC:2B:41:E8:56:DB:A5:BA:62:23:5B:A6:41:A0:D8:1B:48
Certificate issuer: /CN=5cd4e2fc2b41e856dba5ba62235ba641a0d81b48
Certificate serial: 019D3941605397F15D783149FBECC1B98F77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
Manifest number: 1823
Signing time: Sun 29 Mar 2026 11:01:18 +0000
Manifest this update: Sun 29 Mar 2026 11:01:18 +0000
Manifest next update: Mon 30 Mar 2026 11:01:18 +0000
Files and hashes: 1: V8ZoCsWD9muj8NjFFgc6JWYGaJQ.roa (hash: ry1QmNgsoyY18ZwPnwsZ1kzSR5GRuG7sj4PvQ3AErOM=)
2: XNTi_CtB6FbbpbpiI1umQaDYG0g.crl (hash: +TkdmpRX2RYmsxm7uegSXef6Iq0RJWeZ8QdSDf9Ndvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:60:53:97:f1:5d:78:31:49:fb:ec:c1:b9:8f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd4e2fc2b41e856dba5ba62235ba641a0d81b48
Validity
Not Before: Mar 29 11:01:18 2026 GMT
Not After : Mar 30 11:01:18 2026 GMT
Subject: CN=a66f626b875978e9c37dd2bd64281fc3718f5179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f7:a3:8d:9f:61:45:70:09:40:d5:6e:87:2e:
0e:57:f4:70:c8:c4:cd:7b:e7:46:16:1e:df:ed:3a:
0a:f6:28:58:46:97:e6:07:36:8b:27:65:35:75:51:
01:9b:c6:6a:e6:2f:fc:5a:59:bd:f3:3d:6b:36:1c:
5e:f5:4e:34:8a:46:59:50:eb:0b:d3:45:c9:77:c0:
6b:93:72:d3:d5:f4:73:37:f2:4a:fa:08:14:2b:79:
b1:a6:9e:4b:0d:f9:14:4d:ae:de:11:ca:46:04:df:
c4:2c:a3:02:2e:75:66:e4:79:b6:cf:c6:fa:fa:04:
6f:b5:3d:3f:8b:65:fc:01:fa:93:a9:a9:b4:12:d5:
81:72:62:aa:01:6d:78:90:7e:11:00:c6:1c:48:c1:
b5:53:8c:7b:1b:99:a5:f1:50:a4:fd:f5:25:c4:1c:
ee:e0:de:21:9e:86:31:3d:ec:67:6d:b4:ec:d7:bd:
39:c5:b7:2e:9d:4b:f1:3e:f4:e5:c4:cf:9b:ad:af:
14:f7:e7:6e:cf:24:3e:02:8d:9d:48:29:2c:84:df:
34:17:08:36:bf:ec:70:78:e9:fa:88:6e:a9:98:b5:
49:59:48:54:2e:0c:c4:c3:d8:8e:d4:20:d7:02:c5:
1e:34:fd:87:e6:33:3e:99:6e:ce:ef:1f:53:ac:9b:
39:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6F:62:6B:87:59:78:E9:C3:7D:D2:BD:64:28:1F:C3:71:8F:51:79
X509v3 Authority Key Identifier:
keyid:5C:D4:E2:FC:2B:41:E8:56:DB:A5:BA:62:23:5B:A6:41:A0:D8:1B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:c9:f4:3f:a4:a8:1e:d5:2d:83:9c:0f:a5:6b:80:87:78:96:
9f:06:68:b7:db:00:44:7f:8e:cb:e1:c1:75:aa:fc:a4:13:8a:
59:5a:f7:56:e7:92:9c:46:3b:02:ce:1f:e3:20:d2:f8:91:36:
31:be:86:d6:83:b8:aa:3b:65:e9:b4:f1:d7:a7:4a:6e:2d:ea:
91:5c:96:6d:e2:ca:64:a5:16:97:a5:17:8f:24:4a:ae:9e:aa:
d1:73:63:f4:44:28:7d:0a:8b:14:11:13:20:1c:86:bf:e9:63:
70:fd:f1:91:d2:cc:02:63:8e:81:ef:51:d9:c2:f0:bc:43:a3:
c2:e0:47:4a:10:19:95:ad:70:a7:f0:13:5f:b0:40:5d:7e:2e:
fe:ae:8f:68:fc:c5:98:74:98:ba:f0:ef:84:1f:cd:6e:72:f6:
4e:9e:c8:f4:bf:17:54:b9:0f:17:ac:18:5b:d0:0a:c4:25:be:
58:dd:80:ea:c3:d8:3f:e3:51:e6:24:ec:21:59:d1:b1:23:14:
6c:36:bf:34:19:84:61:79:25:64:87:7c:df:4a:b6:25:62:75:
9b:b9:20:c7:c8:74:9a:5a:5d:41:9a:de:3e:44:8d:39:a9:aa:
b8:0e:cc:b0:b9:3b:f7:ca:b8:dc:f2:a9:da:53:29:b7:ad:35:
eb:47:22:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:33 2026 by rpki-client