Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
File: Xw3wyOXRsjU4vrXszDqxKGXffqo.mft (raw, json)
Hash identifier: yWRQMQ9vw/Set0JqP++eHb15wZDrn6UlSnvdBinmhm4=
Subject key identifier: 24:04:98:25:F9:72:F5:AD:F1:74:D4:E3:42:F0:17:C9:4A:E2:D9:32
Authority key identifier: 5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA
Certificate issuer: /CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa
Certificate serial: 019DCE2B79AD6B18EB004367E13F8CA8AD80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
Manifest number: 0AA1
Signing time: Mon 27 Apr 2026 09:00:48 +0000
Manifest this update: Mon 27 Apr 2026 09:00:48 +0000
Manifest next update: Tue 28 Apr 2026 09:00:48 +0000
Files and hashes: 1: Xw3wyOXRsjU4vrXszDqxKGXffqo.crl (hash: O6FYlbN8RtJGfiDmpwJOJIoh0Qg8D+1zAjC/r3SrgSg=)
2: ez3ZuiMIYx6XAooxqgacpm5fhZg.roa (hash: vk/HfV9yv0+3WHPw2z2Am2j60UpVLAvpD1nYGFaREig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:79:ad:6b:18:eb:00:43:67:e1:3f:8c:a8:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa
Validity
Not Before: Apr 27 09:00:48 2026 GMT
Not After : Apr 28 09:00:48 2026 GMT
Subject: CN=24049825f972f5adf174d4e342f017c94ae2d932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:27:9e:3d:c5:cf:38:91:88:fb:c0:30:0f:22:
2e:f8:f8:ca:4e:f2:92:6e:6a:b0:1c:60:a4:1d:f2:
6e:ae:95:ba:05:52:f7:2d:ea:c5:88:ab:f7:ff:d4:
3d:2a:51:d3:0d:d8:9f:b9:21:63:47:58:44:89:4b:
01:df:02:b2:82:91:fc:51:de:d7:2f:f2:6d:0a:e5:
f8:ea:54:99:70:81:58:9d:04:82:5c:db:16:c3:a1:
bb:68:30:bb:10:3b:5d:b0:dc:d8:3a:8f:55:2f:9a:
b9:98:87:19:7f:07:f2:ac:4e:30:c8:0d:1d:03:6a:
be:6a:76:7a:59:20:2c:24:a9:2f:16:f5:03:44:90:
02:4f:eb:da:c3:96:47:5d:d4:ed:ec:f0:9b:3d:f7:
fd:6f:eb:56:2e:44:6f:e3:34:13:a0:1c:4e:e5:59:
0e:28:e6:6c:04:ee:be:59:0f:24:e8:f1:4a:94:3c:
3b:d7:36:ef:f0:08:fc:e7:7f:d8:36:6f:5c:c2:d5:
d5:c3:d0:76:2e:f8:7c:66:76:32:42:85:4f:4f:cc:
10:c3:61:25:2a:a2:94:88:b8:dd:43:f7:05:23:e4:
66:86:0f:1d:10:98:3c:3a:56:36:11:f0:62:8e:fd:
bf:24:5e:cf:bf:94:29:d4:b9:23:01:ad:9f:f4:58:
62:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:04:98:25:F9:72:F5:AD:F1:74:D4:E3:42:F0:17:C9:4A:E2:D9:32
X509v3 Authority Key Identifier:
keyid:5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:be:3e:84:5a:64:68:55:79:83:c9:fe:f0:87:e0:72:06:c9:
8f:ad:99:55:eb:f6:99:63:8c:f5:0e:da:9e:cf:6b:d9:3e:5f:
dc:1d:1a:46:8f:c3:59:d8:60:ac:b8:a1:36:1c:b3:08:6d:3d:
27:75:00:f4:b3:43:6c:a5:2d:ec:26:15:fb:9f:a0:65:4a:b3:
48:69:11:b3:aa:fe:35:38:36:58:96:b4:a5:33:ef:d7:ef:30:
16:a2:e4:2d:47:6d:cb:6d:e6:db:52:f3:94:be:ab:02:88:b7:
3c:dd:8c:ad:1d:fc:ca:4a:0e:41:ed:ab:e9:e4:12:4d:ea:93:
01:4d:c7:0a:3f:8f:f2:6d:fa:9e:42:95:0b:50:1d:89:e8:0b:
aa:da:07:b1:02:df:b2:d5:26:b5:ac:99:2c:c3:08:cb:e3:d3:
06:36:7c:3f:7d:e8:d0:3b:42:4d:6b:25:01:d5:6c:b5:9a:52:
54:d3:6c:3f:d1:72:d5:ca:f7:44:31:55:03:26:5f:63:dd:d1:
e2:d5:a0:1a:4f:f7:88:20:02:61:be:77:c9:79:5e:8e:3a:9f:
94:7d:74:27:d0:80:90:db:a5:62:3e:86:f9:97:f1:53:0a:7a:
c1:bd:6f:3a:50:e1:68:6b:2f:b3:1a:76:40:ee:e6:34:c5:27:
f8:db:e2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:38:37 2026 by rpki-client