Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
File: X_n07MXQUHYsVWmEQPheqW9zMPI.mft (raw, json)
Hash identifier: qvl7Ik2RatfRuVab+IIDIazQn6tQlU3RIejOoVBsRf8=
Subject key identifier: B1:BB:F8:72:01:9E:11:87:64:42:9C:91:66:D3:66:67:F8:B9:1A:68
Authority key identifier: 5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2
Certificate issuer: /CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2
Certificate serial: 019D2695FE179322EE95D75E1333ADEC4CB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 20:00:57 +0000
Manifest this update: Wed 25 Mar 2026 20:00:57 +0000
Manifest next update: Thu 26 Mar 2026 20:00:57 +0000
Files and hashes: 1: X_n07MXQUHYsVWmEQPheqW9zMPI.crl (hash: YjqAK/AD0ze3cWXlM+MXC3zDZbdD0MVbslgHbiCbrMc=)
2: cF9T-jxoP9kV3otKbs6wprWqe14.roa (hash: By9z72uPVXpGvtlPCEnMJBu0BtKh3WPCweFaBQSyntA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:fe:17:93:22:ee:95:d7:5e:13:33:ad:ec:4c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2
Validity
Not Before: Mar 25 20:00:57 2026 GMT
Not After : Mar 26 20:00:57 2026 GMT
Subject: CN=b1bbf872019e118764429c9166d36667f8b91a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6c:e1:7f:f0:7e:73:31:5d:1e:9e:93:ab:14:
90:83:c7:41:d8:6c:f6:5d:cc:55:fb:c1:bf:d7:1e:
cb:d2:cd:c5:15:69:69:94:81:ad:09:09:5d:36:10:
44:2b:2c:bb:73:30:24:50:e2:8b:8c:e7:2b:0f:3e:
cf:5f:8f:2e:41:b4:dc:a0:62:36:a6:83:af:59:a2:
36:53:a9:ae:cc:01:2c:d1:af:40:bc:b7:00:06:5d:
1d:7b:0f:5a:cf:43:34:90:1d:32:59:25:bb:ce:39:
b8:70:a9:90:b1:1e:e9:5a:5f:20:ca:00:f5:b1:e4:
9c:a7:f8:5a:e4:79:9b:aa:31:fe:91:f1:a9:ec:c9:
1c:02:33:96:32:4b:16:a7:78:60:40:ce:89:b9:ad:
8c:59:95:60:81:85:0c:2e:15:07:5f:6c:cb:51:6d:
7e:7b:19:98:09:60:db:02:69:a7:ab:bf:42:a8:13:
88:cf:11:23:bb:8b:cf:17:62:4e:f6:d0:32:ad:d8:
18:c5:87:10:51:fa:c0:49:a9:e5:10:e5:20:cb:42:
4e:c8:b7:c9:ad:2d:80:03:fc:59:12:ea:91:0d:11:
ff:5d:1c:fd:d6:76:29:69:30:79:21:d2:d4:19:78:
79:60:73:80:4c:44:83:08:96:54:99:a8:65:e7:ff:
02:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BB:F8:72:01:9E:11:87:64:42:9C:91:66:D3:66:67:F8:B9:1A:68
X509v3 Authority Key Identifier:
keyid:5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:77:1b:9c:74:6c:d2:c7:54:74:d9:ca:84:33:69:ff:d7:fd:
e3:12:3f:a9:65:b7:1e:df:40:af:a5:3e:e3:0c:2a:aa:9c:3d:
4a:c9:0c:52:6d:11:a5:79:47:91:eb:31:9c:28:02:91:b4:3a:
e3:a5:59:60:2b:f3:cb:94:4d:e9:09:4a:62:a0:a4:12:ab:f7:
04:7c:83:e7:fa:fc:3f:86:82:02:75:07:4f:8e:7c:ab:48:92:
46:f2:c2:2b:4f:e9:07:31:1c:41:d5:66:af:ac:31:21:76:d8:
f6:b5:8c:13:4f:33:b1:9b:e9:f7:b6:e1:71:4e:f6:8f:be:5d:
85:48:26:e7:5b:ed:19:92:a5:24:84:20:f5:46:48:3d:0a:39:
37:16:e6:f9:4f:38:d0:0d:68:cd:c2:53:d7:10:fb:52:88:7c:
b7:64:82:05:c0:5d:c3:6e:f0:89:fd:d9:99:31:46:26:0f:cf:
a1:92:b2:83:bf:2d:04:74:61:03:9d:d9:81:00:d4:97:2b:fe:
8c:2f:82:91:63:04:03:54:33:7c:1c:d8:7e:ef:2e:71:37:e6:
60:4e:d7:a6:dc:56:d6:f8:6b:69:ce:99:85:f7:0e:a8:a5:18:
e0:04:b1:99:42:90:4e:17:cf:03:f9:f5:ac:7d:db:64:17:ad:
7d:7e:ff:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:14 2026 by rpki-client