Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
File: XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft (raw, json)
Hash identifier: TiLr7SzOOU1yppCOdF7TJEf5xMJza3N/2cMF307YYG8=
Subject key identifier: 8B:CA:09:55:EE:A2:90:7E:2C:9C:70:31:48:FB:32:2B:48:E8:06:1E
Authority key identifier: 5E:86:8B:02:E5:19:DD:7E:69:4C:7A:F1:E7:08:BD:D6:63:69:BD:DF
Certificate issuer: /CN=5e868b02e519dd7e694c7af1e708bdd66369bddf
Certificate serial: 019D27A8FFB5515CFFD3BD99041C9A4E741C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
Manifest number: 0DFB
Signing time: Thu 26 Mar 2026 01:01:20 +0000
Manifest this update: Thu 26 Mar 2026 01:01:20 +0000
Manifest next update: Fri 27 Mar 2026 01:01:20 +0000
Files and hashes: 1: XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl (hash: er2ao71SIy2h0OwNI7W039VlQNlZ0OdiZVUHKv2YeRA=)
2: xhCelkdkFdTsIHpEDmjN2bruQr8.roa (hash: +AqQAgHYDXWjRd+5q4R8GrL4JFr5uaVtEUtnJ3XI5Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:ff:b5:51:5c:ff:d3:bd:99:04:1c:9a:4e:74:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e868b02e519dd7e694c7af1e708bdd66369bddf
Validity
Not Before: Mar 26 01:01:20 2026 GMT
Not After : Mar 27 01:01:20 2026 GMT
Subject: CN=8bca0955eea2907e2c9c703148fb322b48e8061e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:09:74:0f:ac:97:fc:2d:bf:e2:93:46:6f:6b:
c4:63:1c:e6:fb:5b:22:1a:cd:9c:e0:68:d3:9d:d9:
f2:e6:b7:2f:0b:88:4c:8f:5b:60:23:13:10:f2:14:
9b:88:ae:79:ac:08:e5:60:c1:48:0b:d4:5c:a0:3d:
98:0b:5d:37:d2:02:e4:d4:3b:05:3c:d6:d5:c1:e1:
fc:92:fe:fd:61:b2:fa:61:5e:71:91:93:11:4a:cd:
ed:92:91:ca:a1:3b:0b:06:7c:9b:11:7d:99:2a:ec:
6d:fa:71:63:11:da:8b:27:d8:ac:42:38:f2:06:b8:
ba:d7:2d:de:0a:03:ac:70:0d:50:6e:76:67:dd:c0:
74:ed:ea:41:36:04:f3:57:81:ba:e5:1a:d4:ae:e3:
f0:f2:2c:98:8f:4a:f8:95:ae:21:8e:9e:64:86:1c:
c6:45:2a:d7:ae:10:e2:8a:61:16:8c:fa:4a:d6:14:
d1:0c:4d:e7:19:6a:fe:0d:4f:fa:87:26:f5:aa:aa:
6d:31:bd:ea:2e:bc:63:63:a6:63:f0:d8:e0:b5:cc:
8a:58:ad:67:ed:6b:52:c1:6e:c1:56:7a:d2:ec:be:
c5:3b:11:ef:a2:8a:18:3d:aa:3c:49:28:27:46:02:
ae:a5:45:76:6d:9c:42:f5:c5:f1:05:bc:05:3a:e8:
9a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CA:09:55:EE:A2:90:7E:2C:9C:70:31:48:FB:32:2B:48:E8:06:1E
X509v3 Authority Key Identifier:
keyid:5E:86:8B:02:E5:19:DD:7E:69:4C:7A:F1:E7:08:BD:D6:63:69:BD:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ba:35:6d:22:3d:be:53:46:5d:ee:7f:98:34:6f:d6:87:18:
c1:b4:81:58:f3:11:3c:fd:eb:48:fb:cf:5b:b9:f0:42:7d:11:
12:6b:16:fd:2e:57:7f:64:a5:29:b0:f9:39:96:f0:87:56:54:
91:7c:88:99:c2:e9:81:5e:26:8e:9b:a8:73:1c:8d:10:12:57:
06:d1:63:81:40:bf:a1:f6:6e:a1:32:41:37:b1:ec:1a:89:62:
d6:0e:03:44:07:d0:39:d6:4b:8b:a6:54:25:1f:ec:7c:da:3c:
89:0c:61:5e:aa:69:27:a8:97:33:b0:8f:06:7b:2c:b4:01:7a:
0d:63:15:ca:b6:35:de:fd:a9:0d:4f:90:b8:e6:8d:cc:0f:5a:
f3:7c:88:bd:44:8c:57:2e:ae:91:b3:1d:9a:fb:86:e1:43:c6:
e3:c8:ca:5f:b1:c0:29:8b:00:a7:cb:c7:28:cb:ae:b9:5d:8d:
ff:e0:b0:f0:d3:ba:73:9d:73:fd:4b:5d:e5:2b:1d:24:9e:d2:
cf:5b:9e:a9:6a:df:da:c6:e7:72:04:18:9c:dc:96:6c:5e:99:
53:36:9a:13:ad:f8:6f:11:b5:d7:1b:92:84:1b:7a:5a:b5:82:
6b:f8:c0:14:27:b0:24:9d:61:d7:4d:03:f6:37:10:79:85:58:
49:d6:32:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:04:03 2026 by rpki-client