Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
File: XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft (raw, json)
Hash identifier: U100Vsm7+cKNxJ/sNLb2FDrb1Cql1wvo6uiG1elKo+4=
Subject key identifier: 52:22:61:C8:B5:49:D6:C8:CA:32:4D:04:94:33:53:8B:C4:E5:83:02
Authority key identifier: 5E:C0:44:B4:B9:6F:21:FA:9A:84:64:5B:D5:E3:A9:E1:97:23:08:2D
Certificate issuer: /CN=5ec044b4b96f21fa9a84645bd5e3a9e19723082d
Certificate serial: 019D26CCCE2A80A7D56364CCB845ABB0A9E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
Manifest number: 15C1
Signing time: Wed 25 Mar 2026 21:00:49 +0000
Manifest this update: Wed 25 Mar 2026 21:00:49 +0000
Manifest next update: Thu 26 Mar 2026 21:00:49 +0000
Files and hashes: 1: HIhz8pdIXgjK-XvqEHJKRiDVUZU.roa (hash: 9IgTkOouc4NOjiZYiPyRk/fd3ULM88kb+ZAbPFTN9oU=)
2: XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl (hash: 0rqn7TzrktubfjdKfT79YDnSPNg+2TtfWpll7djisco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:ce:2a:80:a7:d5:63:64:cc:b8:45:ab:b0:a9:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec044b4b96f21fa9a84645bd5e3a9e19723082d
Validity
Not Before: Mar 25 21:00:49 2026 GMT
Not After : Mar 26 21:00:49 2026 GMT
Subject: CN=522261c8b549d6c8ca324d049433538bc4e58302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:78:8b:ed:88:f6:76:7b:c3:1a:4c:37:44:3d:
4a:4e:99:fe:5a:c7:04:1c:64:34:84:96:23:81:ca:
52:b1:23:5c:b8:30:19:11:35:b6:29:70:38:d5:a7:
66:8f:d6:08:1c:b4:7a:11:e3:74:9f:33:2e:02:f9:
8e:7d:52:92:13:63:03:77:22:bb:0b:0c:3b:43:14:
00:62:a7:06:3b:80:86:6e:d6:89:ab:5f:63:75:64:
a2:6d:c3:2b:4b:c4:a7:16:74:13:ad:b5:4c:8e:72:
fb:03:8f:01:32:73:32:d3:4e:d5:08:d4:af:0c:67:
7c:ba:67:f6:9d:6e:c4:7b:d0:34:24:6b:a2:f6:02:
5a:d7:7d:9f:07:53:20:ed:17:52:9c:7b:23:84:c7:
1f:5e:d1:c2:5a:f6:87:a6:c2:7c:1e:09:e3:5c:ed:
2d:35:64:f8:e1:d1:39:c9:1b:ef:60:72:af:69:70:
12:b5:c6:ea:b8:0d:5e:e0:92:3c:91:fe:81:b3:0e:
73:7a:73:35:1e:89:66:5e:2b:8b:77:71:d3:7e:ce:
0a:18:f2:3d:cb:d1:40:89:53:74:da:b8:18:31:28:
c8:79:c7:bb:5b:2d:a2:b2:ed:b8:88:aa:66:b7:66:
5c:72:23:1e:78:d3:84:03:10:2b:6b:f9:12:3e:9f:
04:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:22:61:C8:B5:49:D6:C8:CA:32:4D:04:94:33:53:8B:C4:E5:83:02
X509v3 Authority Key Identifier:
keyid:5E:C0:44:B4:B9:6F:21:FA:9A:84:64:5B:D5:E3:A9:E1:97:23:08:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:4f:5c:b6:9d:6a:c8:53:7c:e4:b0:d6:a5:01:aa:b6:d4:73:
c6:89:c5:19:b5:37:27:e0:d1:62:81:91:4c:c0:6b:2b:3a:83:
dc:78:a2:24:27:bd:b3:83:95:c2:81:63:f8:d3:fc:6f:c4:c6:
57:3a:4b:f2:2c:ad:69:7b:ce:7d:1e:64:80:bf:05:e5:79:ae:
84:19:c1:b7:e4:44:73:e2:13:a4:92:a0:b9:b8:df:8e:09:a2:
a6:3f:07:2c:5a:d8:b8:e7:7a:ba:c9:d1:45:0d:01:9b:03:b9:
77:29:dc:71:89:47:1b:d5:0e:f1:2d:fa:f6:b9:53:25:76:6f:
46:f9:0d:37:6b:48:d3:75:dd:7c:d4:12:92:ea:20:f3:7a:f3:
37:34:94:b8:43:7f:d2:c4:2e:1f:7a:c1:4f:fd:7c:6a:13:66:
8e:9e:2d:5f:c5:6f:f9:f3:4e:bf:1c:a8:d6:69:c5:fa:ef:80:
9e:09:96:86:13:54:d2:2d:5a:de:64:fa:4a:c0:94:3d:5a:4f:
35:d1:6c:40:61:3c:0e:ae:4b:21:09:79:3c:28:9b:73:cb:7f:
83:b7:f0:4c:d0:3f:27:16:04:26:b4:3b:3a:0e:14:1c:b8:2f:
98:03:76:a5:6b:02:77:2d:28:61:a8:7b:54:07:da:f2:05:29:
ec:51:b0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:00:34 2026 by rpki-client