Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft
File: XfQO50ielcV_EEJxkZ2iaLxRP5s.mft (raw, json)
Hash identifier: 1Ms8pHr6VnmPKcXoSKCE19Ean3GSH92kVekJwGpkgu0=
Subject key identifier: 0B:17:18:9D:5F:04:70:17:A5:C5:5D:CA:6A:A9:F1:D7:A9:16:C0:90
Authority key identifier: 5D:F4:0E:E7:48:9E:95:C5:7F:10:42:71:91:9D:A2:68:BC:51:3F:9B
Certificate issuer: /CN=5df40ee7489e95c57f104271919da268bc513f9b
Certificate serial: 019D28F2CE3B65474A59070BB10F47E7DCC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfQO50ielcV_EEJxkZ2iaLxRP5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft
Manifest number: 1160
Signing time: Thu 26 Mar 2026 07:01:34 +0000
Manifest this update: Thu 26 Mar 2026 07:01:34 +0000
Manifest next update: Fri 27 Mar 2026 07:01:34 +0000
Files and hashes: 1: K35Qk63t7ia59ZiyjBPd0aONq6w.roa (hash: RSMZMIxkJ+qSFhNJD5N1wDzv0Dfcy2i+GoGDC38UiF4=)
2: XfQO50ielcV_EEJxkZ2iaLxRP5s.crl (hash: ADFaDZcf6IJvV/ARiPZAJmuyssKQsy0DhRHtuYr8fkI=)
3: w64U2JVyJqPP2rvHkE8stE6IvUw.roa (hash: zV7R8amjUZNnFr9X6KjTQkvlAu8o3fOcCNG2KYhv44I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfQO50ielcV_EEJxkZ2iaLxRP5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:ce:3b:65:47:4a:59:07:0b:b1:0f:47:e7:dc:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df40ee7489e95c57f104271919da268bc513f9b
Validity
Not Before: Mar 26 07:01:34 2026 GMT
Not After : Mar 27 07:01:34 2026 GMT
Subject: CN=0b17189d5f047017a5c55dca6aa9f1d7a916c090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:43:5b:39:b2:44:f6:66:1b:3e:34:67:0c:91:
4b:c3:19:31:cf:40:54:2e:fd:5c:ac:4f:d2:67:f1:
53:b2:66:8b:8e:2d:fe:51:de:f9:00:ac:51:d4:26:
4c:ca:d3:d0:ce:94:a4:0a:19:6c:09:a7:9d:fe:79:
53:ef:87:cd:11:59:d3:05:9a:ab:d6:48:35:19:02:
3d:13:2f:18:b0:3a:32:22:ed:83:bc:ce:05:59:e1:
cc:0d:29:4d:e1:1d:58:8f:1e:8c:6a:b2:7b:69:bb:
ff:23:2a:b1:4d:25:6a:ca:6e:a0:0d:1e:96:70:9e:
24:92:44:25:3d:9f:20:c1:6e:db:d6:43:14:99:d8:
f0:f3:a8:db:39:c2:3f:9d:2e:e4:b0:f7:43:49:dd:
5b:27:c1:c5:05:ae:db:8f:18:a8:12:c3:00:aa:0f:
ad:e5:69:64:1f:cd:68:27:d4:4b:97:24:3b:e5:b9:
6e:77:d1:a9:d5:b0:f6:15:08:39:da:fb:60:7e:05:
d1:c5:f1:b9:56:e5:5f:ce:2e:38:69:e5:4e:5d:49:
d8:27:33:16:c2:0e:c2:bf:62:c7:72:4e:89:0f:77:
67:a6:30:8a:9a:b3:dc:39:40:6e:17:57:31:02:0a:
72:9c:f2:e2:dc:6a:7f:6e:cc:e2:df:54:8c:9c:3b:
eb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:17:18:9D:5F:04:70:17:A5:C5:5D:CA:6A:A9:F1:D7:A9:16:C0:90
X509v3 Authority Key Identifier:
keyid:5D:F4:0E:E7:48:9E:95:C5:7F:10:42:71:91:9D:A2:68:BC:51:3F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfQO50ielcV_EEJxkZ2iaLxRP5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:d7:bc:38:db:ee:8a:32:f3:02:4d:98:14:1f:ea:c9:6e:7d:
ad:85:e8:b6:77:24:3e:7a:6f:6e:13:48:f9:69:35:18:c1:b1:
82:da:ba:8c:b5:b7:61:07:85:72:b3:bc:a0:4e:dc:a4:e2:2f:
b7:e3:38:f6:09:81:a1:44:1d:77:2b:bc:35:1f:60:52:35:0d:
65:fe:4d:50:b2:21:56:0e:fd:18:1d:09:1e:33:2b:76:dc:59:
f4:57:79:95:b9:c6:94:c6:e4:cd:a3:39:a7:c5:6b:29:97:ed:
e3:d2:f2:d7:77:0e:23:6e:4f:aa:b3:71:dd:03:08:cb:67:34:
8a:c2:a1:da:65:3a:4f:0b:c9:7b:07:be:d6:d0:ec:f3:75:21:
26:91:02:0d:52:6d:45:aa:d7:5b:6e:c4:70:71:f4:45:42:eb:
f1:44:8a:dc:b0:bd:e5:75:2e:e0:5a:4e:44:a7:29:06:20:06:
1b:14:d0:68:7e:17:d1:79:48:34:71:ec:96:ff:15:3f:a3:42:
14:28:08:3c:6e:56:a6:98:54:72:ee:ba:90:f3:17:61:58:6c:
25:c0:90:3f:62:bf:f4:19:d0:75:e2:3d:d8:3b:87:a2:bb:96:
3b:5a:eb:5d:cd:47:31:9b:9c:cb:0b:e2:46:71:0c:27:83:1f:
6b:00:19:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:15:16 2026 by rpki-client