Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1a2a0f-9481-4be1-85f5-d78d95426cae/1/XysVZaEP0TRg6V8en-CMIIjCyx8.mft
File: XysVZaEP0TRg6V8en-CMIIjCyx8.mft (raw, json)
Hash identifier: bPLZ8AZIrZKy6LwFn5fvgyqCWcV4Nbi4VnLbfuK4tCA=
Subject key identifier: A2:B1:8A:72:34:10:00:82:69:24:27:BB:7E:93:2C:2C:52:F1:F7:07
Authority key identifier: 5F:2B:15:65:A1:0F:D1:34:60:E9:5F:1E:9F:E0:8C:20:88:C2:CB:1F
Certificate issuer: /CN=5f2b1565a10fd13460e95f1e9fe08c2088c2cb1f
Certificate serial: 019D337608317D587F5C18BB01CE995ABB0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XysVZaEP0TRg6V8en-CMIIjCyx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1a2a0f-9481-4be1-85f5-d78d95426cae/1/XysVZaEP0TRg6V8en-CMIIjCyx8.mft
Manifest number: 8A
Signing time: Sat 28 Mar 2026 08:01:06 +0000
Manifest this update: Sat 28 Mar 2026 08:01:06 +0000
Manifest next update: Sun 29 Mar 2026 08:01:06 +0000
Files and hashes: 1: XysVZaEP0TRg6V8en-CMIIjCyx8.crl (hash: 5bJ2820rfVlpmG7/Bofu/ySvkG5CkhlDn8Ndg/8F8Vo=)
2: vm8yl7UbsZH9NAHEQzIodWMmimI.roa (hash: Q0uQ98zQcJyDm7dzGXwkuXWtJLhZX6D4OwDjNRtFEO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1a2a0f-9481-4be1-85f5-d78d95426cae/1/XysVZaEP0TRg6V8en-CMIIjCyx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/1a2a0f-9481-4be1-85f5-d78d95426cae/1/XysVZaEP0TRg6V8en-CMIIjCyx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XysVZaEP0TRg6V8en-CMIIjCyx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:76:08:31:7d:58:7f:5c:18:bb:01:ce:99:5a:bb:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f2b1565a10fd13460e95f1e9fe08c2088c2cb1f
Validity
Not Before: Mar 28 08:01:06 2026 GMT
Not After : Mar 29 08:01:06 2026 GMT
Subject: CN=a2b18a7234100082692427bb7e932c2c52f1f707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:74:3e:f1:61:66:29:e6:31:11:a0:eb:a3:f3:
25:12:06:2c:85:ce:9c:00:65:82:66:ec:9f:02:b2:
d5:96:c7:76:80:0c:8c:d8:5d:1c:e8:02:d6:fd:81:
b8:96:3f:ec:4f:45:e6:d1:59:ea:cb:eb:cd:5a:5f:
93:6e:00:73:1c:e4:e0:7f:a5:79:b1:b9:3e:7b:13:
e2:c7:11:50:82:3b:00:32:57:63:46:91:a7:f7:88:
f5:6e:fb:d2:c9:e7:14:48:8a:00:47:28:d1:d5:84:
37:0f:36:c7:dc:dc:b2:a3:45:e9:92:1b:3f:30:bd:
ec:c3:e6:88:1f:19:c6:d4:a3:3b:87:6a:be:6e:58:
ed:97:f4:d3:4d:61:d7:1a:d0:1e:d7:10:82:3a:ee:
34:a7:33:71:55:5e:39:ee:5e:02:3e:c7:49:37:56:
a0:e1:d7:38:e5:cf:ef:e1:7f:72:cb:ac:fe:9f:7c:
bf:53:43:4b:d0:be:77:32:b2:be:17:ab:d3:ce:7e:
84:39:5b:e3:b3:26:f2:7d:49:25:c2:ec:33:35:44:
2d:eb:d8:98:c9:87:0e:ed:23:5c:03:17:dc:1b:77:
17:80:d1:47:dd:65:38:c3:f8:19:94:a1:ee:f2:4c:
2c:16:0d:27:47:75:8f:74:82:35:bf:17:49:8e:f5:
92:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B1:8A:72:34:10:00:82:69:24:27:BB:7E:93:2C:2C:52:F1:F7:07
X509v3 Authority Key Identifier:
keyid:5F:2B:15:65:A1:0F:D1:34:60:E9:5F:1E:9F:E0:8C:20:88:C2:CB:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XysVZaEP0TRg6V8en-CMIIjCyx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1a2a0f-9481-4be1-85f5-d78d95426cae/1/XysVZaEP0TRg6V8en-CMIIjCyx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1a2a0f-9481-4be1-85f5-d78d95426cae/1/XysVZaEP0TRg6V8en-CMIIjCyx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:71:9e:ce:70:8b:5e:fe:68:02:3c:1a:90:b1:92:bb:dc:d2:
af:78:16:a3:b2:c2:50:e9:48:c0:43:c8:95:20:54:8d:f2:bf:
e1:b9:c0:f4:69:13:ef:ea:8f:89:25:34:b2:2f:0f:8a:4e:bf:
2a:3c:ae:d6:db:e9:1e:a1:f6:0a:bc:df:2b:a9:01:f0:d9:9c:
da:d8:44:62:a2:94:72:03:d2:3b:e3:91:5d:5a:aa:15:84:02:
a1:c1:b9:44:b1:00:7d:e8:68:4c:92:18:c8:28:9c:91:d5:88:
08:eb:77:2d:b0:88:a1:0a:06:d1:93:b3:5c:d6:11:be:02:bf:
7b:bb:cc:3f:4c:f0:c0:b9:8a:42:81:92:9e:35:84:fd:0c:2d:
6d:04:1c:ff:be:74:c7:27:12:8c:23:74:26:e9:f6:7c:8d:a0:
0a:23:7e:46:1a:75:04:d9:cf:54:2f:04:f7:59:9c:56:57:dd:
f0:da:fc:61:2b:51:fa:af:2e:81:08:0e:d8:4a:16:d7:af:89:
6e:f7:b0:0b:47:99:eb:bc:d4:6e:e7:c7:47:23:e6:dc:7e:74:
e4:7d:53:c8:75:1c:10:0e:84:29:c5:f4:0d:5d:f0:a3:d4:c8:
c5:e4:fa:f2:8e:c9:11:54:49:52:9e:11:48:db:ac:16:ff:4e:
f1:eb:89:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:55:07 2026 by rpki-client