Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.mft
File: XZOOJrKYSy-hYarAewS9uFCq3RY.mft (raw, json)
Hash identifier: vMgdUL1uNW94TDJIu6LyeUoI8MldLagQ74gel3Rmy2g=
Subject key identifier: 5F:43:B9:4A:03:47:1E:39:C4:21:5A:76:CB:32:79:6F:4C:7A:19:07
Authority key identifier: 5D:93:8E:26:B2:98:4B:2F:A1:61:AA:C0:7B:04:BD:B8:50:AA:DD:16
Certificate issuer: /CN=5d938e26b2984b2fa161aac07b04bdb850aadd16
Certificate serial: 019D27E07C7F99AA269E614AA54261D6F92A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZOOJrKYSy-hYarAewS9uFCq3RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.mft
Manifest number: 0C6C
Signing time: Thu 26 Mar 2026 02:01:56 +0000
Manifest this update: Thu 26 Mar 2026 02:01:56 +0000
Manifest next update: Fri 27 Mar 2026 02:01:56 +0000
Files and hashes: 1: XZOOJrKYSy-hYarAewS9uFCq3RY.crl (hash: /5iuzR3z+xB60sqEXxq+U8BmCtAUjSJYXPJbb858MpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZOOJrKYSy-hYarAewS9uFCq3RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:7c:7f:99:aa:26:9e:61:4a:a5:42:61:d6:f9:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d938e26b2984b2fa161aac07b04bdb850aadd16
Validity
Not Before: Mar 26 02:01:56 2026 GMT
Not After : Mar 27 02:01:56 2026 GMT
Subject: CN=5f43b94a03471e39c4215a76cb32796f4c7a1907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:67:1e:94:c6:58:d4:fb:04:33:79:fc:1a:db:
d0:b9:2d:65:f1:e1:04:cc:17:bc:aa:36:25:29:9a:
5b:97:4e:27:85:9e:27:0e:2a:7f:11:7f:d2:fa:a9:
26:a8:f2:1b:0a:e4:88:2a:91:21:be:08:5d:c0:95:
7c:57:03:e8:76:4e:01:c1:44:b2:9b:71:19:2b:ca:
72:ec:8f:13:31:9e:5e:05:36:90:06:98:4f:ec:10:
72:e4:29:2e:cf:92:f3:05:c7:f3:3d:5c:d1:ae:fc:
3d:85:b9:aa:09:1d:2d:91:57:cf:f0:a7:36:a7:73:
9a:8c:3d:27:c3:66:38:e4:97:79:1d:d8:7f:bb:f4:
5e:b8:23:ec:90:b0:35:29:f4:75:3c:ad:2c:16:6c:
dc:4e:56:4b:d7:04:26:80:08:d1:0b:dc:22:8a:4d:
70:d5:dd:36:30:b3:1f:20:23:3c:a0:13:08:4c:c8:
93:d8:56:d0:4c:b8:dd:66:42:e7:a2:25:ff:ed:4b:
37:04:f4:24:45:c1:94:55:ca:d5:47:d8:74:6a:b8:
60:06:cb:49:79:d4:04:9a:b3:55:54:42:b0:6d:77:
7e:95:e2:fe:3f:e0:31:8e:d6:f0:ae:ba:00:3d:c6:
95:dc:03:20:ad:ed:5f:89:d5:46:45:63:72:de:b7:
06:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:43:B9:4A:03:47:1E:39:C4:21:5A:76:CB:32:79:6F:4C:7A:19:07
X509v3 Authority Key Identifier:
keyid:5D:93:8E:26:B2:98:4B:2F:A1:61:AA:C0:7B:04:BD:B8:50:AA:DD:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZOOJrKYSy-hYarAewS9uFCq3RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:1d:fe:30:8b:d4:44:2f:f2:38:ff:e7:aa:e5:a9:48:00:46:
05:06:39:00:00:fc:64:9f:e1:cc:0a:64:42:a7:0a:3e:ce:c9:
a5:a4:ec:84:b1:79:f6:17:db:14:25:52:74:2e:02:12:89:da:
f9:46:72:1b:54:73:bc:4d:45:57:60:f9:d1:1c:66:f5:7f:13:
5f:15:9b:0d:f2:bc:c0:a2:18:ec:9b:52:25:23:65:3f:62:41:
4a:dd:ec:9d:b1:9e:68:a4:72:2f:f5:73:8c:0a:74:3a:00:8d:
89:af:48:0e:44:1d:5b:af:6a:b8:eb:98:4b:5f:54:cc:f0:3a:
f6:d6:03:c9:93:16:ac:91:34:1a:b6:1b:8f:4b:0a:dd:61:8e:
23:a3:f7:17:1e:b1:12:9f:a7:55:0c:de:86:da:e4:b8:f5:b0:
2b:78:62:1d:83:92:40:9b:b2:28:98:b8:f0:f0:0b:99:3a:d9:
3f:02:ff:cf:20:19:4c:69:52:68:a9:3a:f6:90:b0:19:b6:3c:
0c:3a:62:20:0f:fa:6a:10:3e:a4:1b:d8:63:29:a3:50:f0:e2:
67:1e:0a:ba:19:97:f4:fe:d5:32:6a:85:0c:70:d0:46:a0:f9:
77:0e:f7:5c:8f:ec:1a:c8:cb:17:ec:4b:5f:92:34:c6:28:6e:
dd:c7:c3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:13:38 2026 by rpki-client