Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
File: Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft (raw, json)
Hash identifier: akafQYaXtoHs3wlQW9vHUeAp3MLJZO8mkZmoVlBnVEI=
Subject key identifier: E9:77:16:33:71:80:72:B5:A1:C8:53:10:7B:99:E2:14:96:26:44:E9
Authority key identifier: 5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93
Certificate issuer: /CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93
Certificate serial: 019D39AE66DB9C12AB2860A3E2FB4EB179E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 13:00:23 +0000
Manifest this update: Sun 29 Mar 2026 13:00:23 +0000
Manifest next update: Mon 30 Mar 2026 13:00:23 +0000
Files and hashes: 1: 1-KKEOWBhq-Xin1u07sp8fmHrvqc.roa (hash: PYl3rvHgnbdTXI4oGxGWGnIZl/efX3OeaWnZ83sqU1U=)
2: Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl (hash: Yin7Tp08fW/i8ZsrWm3Spw4VrA7A5BADiTJUc3VsRWs=)
3: hRCE6LdZkeQzF92rmCQdMQvaaL8.roa (hash: UB0DT/MFY2dNlWf8e/9nwn7NarMnjJ7fyxrd+zzOII8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:66:db:9c:12:ab:28:60:a3:e2:fb:4e:b1:79:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93
Validity
Not Before: Mar 29 13:00:23 2026 GMT
Not After : Mar 30 13:00:23 2026 GMT
Subject: CN=e9771633718072b5a1c853107b99e214962644e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:de:e2:77:15:df:99:c9:ec:b7:bf:8d:6f:2f:
0d:ea:b5:a2:b1:d1:e9:4b:02:93:0e:f0:9a:90:2b:
75:7b:d9:2e:a9:f8:ff:e5:a1:97:59:4e:e6:2f:ba:
02:97:f5:ce:98:3f:6b:9a:36:ff:be:e3:95:50:ca:
21:8a:14:38:e0:7e:8b:7e:7e:8f:f0:df:78:97:dc:
e7:ab:4b:e5:4b:7a:3c:40:8e:ae:b7:30:99:30:67:
3b:51:89:90:79:ce:b4:5b:19:e6:d6:62:d2:20:35:
3e:52:2f:ad:51:01:71:ad:05:3e:66:29:15:67:27:
83:c4:af:b9:8c:59:1e:f5:7d:e7:30:17:77:a9:83:
8d:c6:ab:c4:14:27:99:e9:28:c7:8e:a7:5a:32:f1:
67:dd:e3:31:5c:54:11:98:6b:0d:7b:c5:ae:a4:4e:
31:ae:45:65:13:0a:f7:85:12:01:0d:8b:1d:4a:88:
45:ca:37:83:fe:bd:2f:4d:95:be:ed:4c:9a:ca:62:
5f:42:f0:7e:65:6b:52:43:ce:8a:e8:48:ad:c0:32:
61:ef:52:0c:ff:b3:a9:fa:8a:87:0d:a3:98:e4:36:
85:bc:60:c5:86:36:32:ef:0c:a7:57:61:f1:e5:2d:
59:e6:89:8b:a2:f6:d4:2f:1d:a9:31:26:65:0c:e6:
00:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:77:16:33:71:80:72:B5:A1:C8:53:10:7B:99:E2:14:96:26:44:E9
X509v3 Authority Key Identifier:
keyid:5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b1:ac:20:9b:37:65:ef:35:7c:9f:c9:25:e2:b3:67:de:69:
bf:0a:2b:ef:fd:b7:cd:2d:42:9c:9f:87:a1:0a:c7:72:9c:c3:
d2:92:39:01:20:6c:91:0d:d8:12:ce:61:66:f5:e6:c7:32:b7:
8b:57:80:e9:52:55:86:37:11:af:2d:b1:76:87:e4:e3:89:58:
a8:ac:bd:1a:15:d2:c8:e2:7d:9c:c3:94:96:d9:1c:82:b5:7a:
c2:31:b6:6e:b2:40:69:b7:ea:3d:5d:3b:f3:2e:22:c5:0c:ed:
70:4f:03:d3:b2:4f:5c:a0:9c:38:62:f2:f8:e2:60:5e:4c:8a:
cd:1e:45:34:e4:0e:5c:14:42:5b:e3:33:1d:8a:09:36:3d:8c:
0f:4b:c0:ba:ae:f0:a7:5f:9b:11:07:39:bd:f9:5d:75:e1:28:
42:22:fa:a9:ba:e3:06:34:1d:b7:00:14:36:c7:8c:76:5a:87:
fa:ea:b9:82:c4:dd:a0:60:3f:da:6b:61:ef:81:2a:05:de:24:
f5:90:13:e6:bc:1e:f0:e8:63:35:c8:a3:61:e8:6c:36:8d:e7:
ef:f2:6d:bd:94:cc:af:3a:a8:66:e2:5a:1f:be:66:a1:03:e0:
5c:ba:84:8a:8a:70:a2:2d:9a:bc:8c:f8:fa:09:07:06:12:b5:
39:6e:cb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:53:52 2026 by rpki-client