Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
File: xd4yu5zJnhFd269rf6IwUXifL2E.mft (raw, json)
Hash identifier: FhyLyChtHaVdGsycdb+2BUizpaoNuQ6W8evKfx6ZBUg=
Subject key identifier: 19:68:CF:85:13:50:95:F0:DC:60:8E:DB:E5:B7:B7:BD:F3:3B:22:9F
Authority key identifier: C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61
Certificate issuer: /CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
Certificate serial: 019D277286134678838BB5C3BFD2F88B6380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
Manifest number: 09FA
Signing time: Thu 26 Mar 2026 00:01:49 +0000
Manifest this update: Thu 26 Mar 2026 00:01:49 +0000
Manifest next update: Fri 27 Mar 2026 00:01:49 +0000
Files and hashes: 1: P0czBLbxFJ_vbZgPaB2DgNxcwSQ.roa (hash: ivVj2UBDr142ozpVQ0et+tsk9O7vfSnbWu53eKofLH4=)
2: XPbIAQjvWUhps2QzwB4FO6KMPQg.roa (hash: WmuXuAfgAD/HSjGwGkFBdZOZhMWpJ738UuXdMSLFck4=)
3: ZNFAAOVOA_TUHrjNSM4uKsZgqcc.roa (hash: 7v4wpy52S1nKFjEkeyyEFDHr8mGfzkP5V5Zp0vSSsfc=)
4: eqTX003eyxyptc_5akwZQ-er_vM.roa (hash: K3SbRlftewHG9cfG5hVXUNxxbzFwfkxJoPCLzQ3dz+c=)
5: qBNprkht_3wALG390SrSxt6PGBw.roa (hash: kjvF8COrbedUsxCSe7zrkJLG0/raxxFzLfphFFiIUxQ=)
6: xd4yu5zJnhFd269rf6IwUXifL2E.crl (hash: rFyXIwWeCjv24mRf/0oaTAv9cflRPrHtOJVEgTMUrNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:86:13:46:78:83:8b:b5:c3:bf:d2:f8:8b:63:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
Validity
Not Before: Mar 26 00:01:49 2026 GMT
Not After : Mar 27 00:01:49 2026 GMT
Subject: CN=1968cf85135095f0dc608edbe5b7b7bdf33b229f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d6:6d:05:e1:38:75:8f:b0:16:f4:b7:57:9e:
fe:9e:05:fe:2a:65:5b:78:10:2e:eb:44:72:4c:ad:
11:71:41:a0:86:32:8d:40:69:01:5f:d2:3b:85:f5:
9e:32:7e:27:60:97:3f:3a:13:02:2e:cb:4e:78:48:
90:13:0a:3f:b3:97:0c:94:a7:ba:fe:89:77:0f:dc:
51:f9:45:28:94:ba:5f:a0:ad:eb:f3:55:72:02:c8:
e8:a1:53:d1:7f:94:54:33:08:4f:25:bc:66:9e:e5:
d5:22:54:14:af:97:77:b0:f2:2b:32:3d:17:38:d7:
07:1a:c3:7c:e3:aa:e3:09:73:11:5f:76:cd:90:cf:
ed:56:f7:5d:f0:d4:cb:20:a8:a4:08:08:ef:18:4d:
bf:de:62:65:66:ee:09:41:98:f1:9e:9e:28:e6:41:
a2:92:7d:de:c4:3e:f8:1e:b3:75:3b:d6:a5:57:cc:
8b:29:e3:ae:a5:c1:15:fb:79:f2:d2:ae:8a:f1:83:
d5:73:2a:29:b0:2c:74:8b:90:4e:84:80:42:e9:65:
6a:85:cd:25:fb:6b:94:52:74:ec:c9:56:29:de:ab:
f4:29:84:c3:91:60:b9:87:eb:3f:d1:3b:5a:13:14:
78:89:15:93:17:34:9e:b4:66:5b:87:a7:9c:80:3a:
c7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:68:CF:85:13:50:95:F0:DC:60:8E:DB:E5:B7:B7:BD:F3:3B:22:9F
X509v3 Authority Key Identifier:
keyid:C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ba:b5:30:93:d6:48:b3:aa:71:4f:f0:80:96:c6:86:36:df:
29:8f:0f:c0:73:d1:db:4f:2d:6d:2e:f0:a9:8c:5e:a1:b2:d3:
3d:e9:4e:f5:06:f7:ee:aa:cd:a9:36:08:df:9c:4d:92:82:34:
eb:91:ed:8f:f6:ac:72:02:a5:bc:8e:93:c8:ee:20:ab:19:fc:
7b:46:e8:a4:6a:63:c9:e0:5b:54:fe:ce:b9:66:c5:2f:12:7a:
cd:c2:29:ee:39:53:24:1a:3e:02:7b:7e:43:cc:44:5d:fd:16:
34:a0:3a:3c:62:34:d0:63:e3:f8:45:2e:96:c6:c0:f9:4d:d7:
3c:85:ad:80:d2:1e:ef:2f:f6:df:70:de:12:0e:9f:01:b4:fe:
29:aa:5d:51:18:d5:06:1d:25:ce:28:60:c0:7d:b8:82:55:c9:
61:f8:0a:08:27:8d:00:09:bf:85:b4:6e:bb:a3:6b:4a:38:37:
8d:ce:b0:62:91:fa:52:6a:d4:f4:50:49:ee:09:9b:dd:d5:7f:
48:92:d9:16:8d:dd:f2:75:b6:a5:08:b6:0c:50:9a:ec:41:75:
40:71:f0:1a:2d:b0:fd:66:6b:61:42:ac:a0:7e:4d:5d:01:cf:
f3:24:5c:d2:f6:1b:ee:25:b4:b8:20:e3:75:53:15:8b:da:b8:
c8:3b:e0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:16 2026 by rpki-client