Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
File: Xw3wyOXRsjU4vrXszDqxKGXffqo.mft (raw, json)
Hash identifier: +L5pPfxBcxOV+FYFz8fwL8jWgj+2doAF6knwyRJYmcc=
Subject key identifier: 15:A8:9C:F5:2B:66:76:AF:F7:85:9C:7F:F4:B0:F6:6E:52:DA:F3:25
Authority key identifier: 5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA
Certificate issuer: /CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa
Certificate serial: 019CE47EC9BC3935F4C89B1F37E751FC0B78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
Manifest number: 0A28
Signing time: Fri 13 Mar 2026 00:00:40 +0000
Manifest this update: Fri 13 Mar 2026 00:00:40 +0000
Manifest next update: Sat 14 Mar 2026 00:00:40 +0000
Files and hashes: 1: Xw3wyOXRsjU4vrXszDqxKGXffqo.crl (hash: gvKrto6MQZsDc+m7HT0cKyME3SCbUjvr34nasKpHKQ0=)
2: ez3ZuiMIYx6XAooxqgacpm5fhZg.roa (hash: vk/HfV9yv0+3WHPw2z2Am2j60UpVLAvpD1nYGFaREig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:7e:c9:bc:39:35:f4:c8:9b:1f:37:e7:51:fc:0b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa
Validity
Not Before: Mar 13 00:00:40 2026 GMT
Not After : Mar 14 00:00:40 2026 GMT
Subject: CN=15a89cf52b6676aff7859c7ff4b0f66e52daf325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a7:40:f1:65:94:60:7b:bd:ba:9d:d5:a2:01:
f6:5e:e0:e0:d3:15:5c:61:97:03:10:6d:1d:46:93:
63:ce:82:a7:8a:2a:1b:0e:89:92:1c:42:b2:2a:b6:
0a:6d:1c:b1:82:da:53:28:73:1b:39:86:e4:14:61:
e2:46:a4:4a:fe:16:5f:76:9e:a7:b8:28:64:45:1e:
9f:59:47:b2:ba:94:9c:f9:cb:03:4c:8b:fa:32:e9:
28:dd:bb:c4:2e:78:85:31:7a:03:74:5d:fc:23:81:
b3:c6:e1:1d:d3:b6:fe:c5:99:01:fa:e1:88:1d:ad:
06:43:5e:26:ea:0b:4d:bf:56:7d:17:6b:72:40:d7:
e9:5b:9a:ad:9b:be:e4:d6:cc:04:b4:bb:ef:41:96:
a7:bb:7b:96:36:b7:1a:ef:78:8d:a7:11:0c:df:d4:
94:af:ff:cd:84:ae:bd:8e:e7:23:e9:07:10:18:08:
cd:53:00:96:e7:cb:0d:ab:91:98:f9:89:80:99:9a:
f4:fa:bd:07:ba:5c:d4:67:a5:f9:b0:b8:11:fd:60:
75:17:64:3b:ff:67:87:29:f3:ca:af:9a:0b:2e:c4:
01:99:1b:1e:f9:3f:0a:f9:2c:43:52:f8:2f:32:fb:
f4:5b:60:f3:6b:9b:16:31:62:4d:b6:d1:ba:75:0c:
8b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A8:9C:F5:2B:66:76:AF:F7:85:9C:7F:F4:B0:F6:6E:52:DA:F3:25
X509v3 Authority Key Identifier:
keyid:5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:0e:0b:74:e2:88:a0:92:b4:69:66:ea:a3:be:fd:a1:f0:50:
b7:e6:92:9a:bf:9a:56:8f:48:6b:c3:38:af:62:6a:56:a3:bf:
63:60:57:1f:00:9f:8a:81:2c:49:71:38:97:aa:dc:14:7e:a6:
b0:41:34:f3:19:fa:13:20:73:19:c5:c9:d4:34:de:b1:40:99:
2f:4f:65:c8:85:b4:78:d9:7d:fd:de:ab:3e:df:17:92:08:d4:
0a:7a:c3:ed:6b:5f:05:da:10:5b:62:3d:d2:3d:70:b5:3f:2d:
d1:bc:6b:c9:3f:43:b9:76:fa:dd:39:54:1a:42:7f:eb:46:d5:
6b:e3:f3:c3:d7:6d:12:63:97:3d:b2:81:e8:72:f4:64:f3:11:
5c:d9:e0:04:54:7f:00:80:76:a3:2f:f1:a8:dc:75:84:9e:5f:
67:a9:f1:cd:9d:7f:32:39:cc:9f:7e:0d:aa:e4:49:9a:f2:7d:
a4:04:b6:27:a7:34:ad:57:0c:69:cc:80:b2:35:f4:b7:b9:f4:
0a:fd:22:e8:a9:b1:c5:ff:22:69:71:cd:28:95:c2:07:bf:ff:
3a:93:da:2c:50:df:0d:ad:3f:2e:a8:0d:ae:8f:8b:55:8b:89:
74:dc:1f:8f:e5:7a:ac:5e:6b:e6:c5:c8:e4:96:1d:6c:4c:81:
65:84:87:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:27:42 2026 by rpki-client