Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
File: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft (raw, json)
Hash identifier: t0REUlMYSsP7seoBVm1bqrAaAeIyp/Nsp2kqzK+R9KU=
Subject key identifier: 26:00:87:81:98:D2:B9:50:7B:13:30:A5:CA:C9:54:AB:83:9B:DC:D5
Authority key identifier: 5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
Certificate issuer: /CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Certificate serial: 019D37BFF75E379B6180AEC167009C3C5F48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
Manifest number: 12F3
Signing time: Sun 29 Mar 2026 04:00:20 +0000
Manifest this update: Sun 29 Mar 2026 04:00:20 +0000
Manifest next update: Mon 30 Mar 2026 04:00:20 +0000
Files and hashes: 1: Tj86XfWCuCApPHfYX3OGv6qhNv0.roa (hash: KavhnQrG+XPERodqs0bRhCLXxZdjDwTVYFBmFO2dVKc=)
2: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl (hash: mGACNEMpEhDokJwSBXUacMhO8O/zag3We2272NOTJjE=)
3: lz8LsNgX1D_wsrCHWat-j5v2uVI.roa (hash: vw9y4aHyYuZp50dhE6CiKPwsukwzG4Dv5+i3W21W3u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:f7:5e:37:9b:61:80:ae:c1:67:00:9c:3c:5f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Validity
Not Before: Mar 29 04:00:20 2026 GMT
Not After : Mar 30 04:00:20 2026 GMT
Subject: CN=2600878198d2b9507b1330a5cac954ab839bdcd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:be:d5:48:a3:f2:59:97:9d:83:be:86:43:e8:
b5:e2:e1:ad:32:70:92:77:96:f2:28:9b:5c:31:01:
47:a1:05:5c:b8:0b:7c:26:dc:9a:ba:a2:14:89:6f:
52:4c:d6:2e:9f:85:a7:ac:40:f2:e3:a4:0c:60:4d:
4a:b9:11:36:1d:34:63:76:ef:70:58:5e:71:28:63:
cd:fc:a8:58:92:75:ca:8c:08:e3:70:31:bb:8f:76:
fc:53:d2:9f:65:05:b2:2b:c2:20:b0:b6:ba:8f:96:
a2:11:c8:00:bb:21:b6:fd:b3:61:f3:82:98:9d:55:
b9:d3:69:f0:f4:f0:1b:a7:55:d0:58:83:16:68:5a:
24:66:3b:25:61:59:d8:bc:84:a6:17:c8:fb:ee:7a:
ed:29:ba:f5:5d:27:0a:c3:9d:67:8a:6f:0f:fe:db:
68:d3:87:92:cc:99:72:be:56:7d:05:ed:16:75:73:
ab:ca:8f:d2:62:f8:60:c7:17:58:dd:08:0c:c8:67:
fd:a2:df:7c:d2:27:b0:c2:3a:94:91:ee:12:73:a7:
d9:dd:4c:0c:2c:14:e9:46:0a:3f:2d:b2:24:ac:0f:
91:42:8c:39:cd:fc:f0:d8:dd:b6:9e:f2:60:6b:08:
a1:ef:d8:f8:dc:64:68:ba:38:8c:b3:de:ca:0b:c5:
5f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:00:87:81:98:D2:B9:50:7B:13:30:A5:CA:C9:54:AB:83:9B:DC:D5
X509v3 Authority Key Identifier:
keyid:5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:11:fe:19:58:24:76:c3:cf:63:14:7a:4b:03:fb:70:04:82:
c2:05:97:d7:f2:39:a7:ff:ef:33:3a:88:90:81:17:02:7f:e9:
17:04:ab:78:04:c3:91:e5:f1:b6:e2:3e:99:64:b2:19:86:c9:
f2:ed:18:c8:7c:91:bb:d3:23:49:de:78:e7:38:ce:f4:b9:5d:
70:a9:df:c3:00:d0:27:c7:b3:62:e3:2c:44:67:38:f5:24:99:
f5:f7:29:80:5d:03:ad:b8:21:eb:70:ad:15:44:6c:9f:c2:65:
89:35:26:19:c7:2c:a8:08:06:c5:55:ca:aa:63:3e:40:0b:07:
7d:70:4d:45:a9:f2:f1:24:63:42:33:8e:1c:7e:ae:05:d6:ff:
33:8f:f9:3c:b6:86:d0:c7:b5:29:b0:e9:23:c2:16:a2:52:6f:
f6:f3:e6:a5:d0:55:8d:a1:7b:da:25:a0:08:2a:12:e3:50:d3:
4d:97:34:04:04:c5:1b:0e:f7:ad:ed:01:a2:c9:57:e4:15:58:
33:cf:9f:53:6b:0a:d9:44:33:10:7d:b2:b4:ab:ce:8a:33:29:
6b:c9:09:90:39:fe:66:4d:40:7c:d3:97:c4:c9:52:57:1a:48:
d9:e6:e8:35:42:7f:7c:79:6d:b1:eb:c6:b6:a0:07:15:3a:dd:
b9:48:43:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:52 2026 by rpki-client