Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
File: xcSzrlnZgfJQzIfatZeFSr7XowA.mft (raw, json)
Hash identifier: LpsL8odbW8P2exNcOZnynYGhV1j/t+JCwZFGJb9xU8o=
Subject key identifier: AB:5A:00:92:F9:46:38:77:A2:8C:77:79:8D:68:A2:63:AB:74:DB:5D
Authority key identifier: C5:C4:B3:AE:59:D9:81:F2:50:CC:87:DA:B5:97:85:4A:BE:D7:A3:00
Certificate issuer: /CN=c5c4b3ae59d981f250cc87dab597854abed7a300
Certificate serial: 019D273B3BA12206F79A9C9B38A1DAE0FBD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
Manifest number: 079F
Signing time: Wed 25 Mar 2026 23:01:26 +0000
Manifest this update: Wed 25 Mar 2026 23:01:26 +0000
Manifest next update: Thu 26 Mar 2026 23:01:26 +0000
Files and hashes: 1: OBYyhiA-o_Lu_Sii3K0csw4HB8Q.roa (hash: losaCS7PxxPceDw56uDFnzA7tz476/wdte0ltw/SmOk=)
2: xcSzrlnZgfJQzIfatZeFSr7XowA.crl (hash: XpftfGlQeapHrJ3eAjGhYe8goXynpiYKTm2Abvbidkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:3b:a1:22:06:f7:9a:9c:9b:38:a1:da:e0:fb:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5c4b3ae59d981f250cc87dab597854abed7a300
Validity
Not Before: Mar 25 23:01:26 2026 GMT
Not After : Mar 26 23:01:26 2026 GMT
Subject: CN=ab5a0092f9463877a28c77798d68a263ab74db5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:52:39:f2:44:74:69:f8:53:6c:fe:79:a0:0d:
7f:30:3e:11:1c:6c:0e:8f:1d:79:7f:9d:1a:0a:da:
75:01:e7:b3:fd:a0:cd:dc:30:7c:5e:53:01:80:d6:
69:75:49:8f:6f:82:86:1f:8f:2f:02:b2:46:71:dd:
b6:a5:2a:76:73:8f:30:53:b5:68:a4:38:d0:0c:46:
32:6f:1b:dd:95:71:72:7e:d6:5d:33:81:89:3f:bf:
49:fb:c4:98:06:c5:df:34:35:49:fb:06:cf:6d:54:
57:b0:8a:c2:95:d7:84:5c:82:0f:6a:ce:e2:db:e4:
49:84:0f:3c:60:9c:98:40:cc:8e:ff:ff:7c:e4:d1:
16:7c:56:76:15:e2:a0:e6:bd:76:fa:18:5f:4f:c9:
be:02:b3:dd:5a:b0:b8:aa:e5:00:84:f8:ea:54:70:
ea:72:0c:37:ff:77:91:c6:d8:bd:9b:1a:ad:a7:54:
40:bc:62:9e:43:74:c8:f2:b1:c2:7f:ab:7b:73:03:
5b:52:da:2f:d9:dd:d8:d0:35:f7:9b:22:0a:12:2b:
8c:4b:19:fb:d1:5b:c1:a2:cb:d1:00:bd:23:a8:bf:
1b:66:5c:08:41:a3:37:0b:94:d1:4b:d4:03:a5:c9:
1b:50:ee:67:f5:db:bf:68:0d:e7:57:c5:61:98:48:
77:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5A:00:92:F9:46:38:77:A2:8C:77:79:8D:68:A2:63:AB:74:DB:5D
X509v3 Authority Key Identifier:
keyid:C5:C4:B3:AE:59:D9:81:F2:50:CC:87:DA:B5:97:85:4A:BE:D7:A3:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a4:52:37:22:ec:6a:c8:e0:f4:dd:13:21:ca:0a:45:eb:85:
7c:d2:d5:89:8d:25:d7:57:b1:0d:d2:7c:0d:2c:95:98:6c:15:
6d:27:1d:ef:87:12:e9:1e:ea:fa:5d:a4:9b:41:4a:00:34:68:
92:94:66:3b:34:f0:8f:30:13:c6:8c:4e:52:4d:46:4d:76:11:
58:e1:a8:80:c4:1a:1f:59:dc:ce:8d:1a:88:1e:b5:dd:58:2d:
5e:bf:30:a3:2e:6b:a1:1c:67:09:9a:c7:d7:5c:29:4c:05:6a:
c7:43:93:74:ab:38:4f:9f:65:9e:a9:5c:51:e0:21:27:15:54:
6d:b4:6a:8d:88:43:09:8e:98:df:51:9b:16:28:73:d3:10:79:
08:9f:20:ee:ea:22:6f:2e:c8:00:38:61:72:79:62:10:91:36:
0c:03:29:1b:58:a8:98:65:d6:53:7a:dd:b8:4a:8f:16:24:7a:
52:be:2f:34:7b:ce:9d:9c:67:fb:01:f9:42:4b:89:e0:5f:74:
8f:29:2e:24:ff:ce:9c:17:5e:1e:41:00:4c:bb:f6:27:c4:89:
54:98:be:49:5b:9a:5f:a9:70:40:d1:0d:0a:19:8c:54:a8:01:
8d:f6:5c:8f:8d:c3:a0:01:dd:69:2f:3e:74:c0:03:76:bb:a4:
46:b4:25:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:49:18 2026 by rpki-client