Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
File: xLejOGcjuooupILHtoAxpUEirE8.mft (raw, json)
Hash identifier: 5MM7tiY/WxdfXVjRyrbeyel5tE7fYyqZgxkXRjpA1Mo=
Subject key identifier: 05:9E:3B:95:2E:D6:C2:A2:BE:4F:1A:AD:E0:2A:57:28:CB:38:97:0B
Authority key identifier: C4:B7:A3:38:67:23:BA:8A:2E:A4:82:C7:B6:80:31:A5:41:22:AC:4F
Certificate issuer: /CN=c4b7a3386723ba8a2ea482c7b68031a54122ac4f
Certificate serial: 019D25F1852132A5EB99435548A018474FE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
Manifest number: 06EC
Signing time: Wed 25 Mar 2026 17:01:18 +0000
Manifest this update: Wed 25 Mar 2026 17:01:18 +0000
Manifest next update: Thu 26 Mar 2026 17:01:18 +0000
Files and hashes: 1: Mk6KT-G0Nd_n-6Ue0npJ0Pqa4CI.roa (hash: 2cQhzB6rvIgJcWKL8JGJ8AUuDd5CAqSH0lZjme07urY=)
2: xLejOGcjuooupILHtoAxpUEirE8.crl (hash: ft01EXF0xBPB+d1ugaCuC+n1byG5O/uvvhz37ZrRGGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:85:21:32:a5:eb:99:43:55:48:a0:18:47:4f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b7a3386723ba8a2ea482c7b68031a54122ac4f
Validity
Not Before: Mar 25 17:01:18 2026 GMT
Not After : Mar 26 17:01:18 2026 GMT
Subject: CN=059e3b952ed6c2a2be4f1aade02a5728cb38970b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8f:48:ea:15:31:a8:62:3f:6c:3b:0d:6c:19:
98:7d:6b:5e:9e:28:5d:27:75:ba:93:02:bd:f6:80:
02:12:fd:47:7d:56:77:fe:d4:d8:e2:24:d7:d2:9b:
9b:a2:86:74:0b:ba:9f:b2:4b:0f:4b:f0:df:6d:69:
bd:ac:f7:86:56:95:b7:a2:a7:1a:11:4f:ac:32:7f:
08:e8:20:a4:f1:fc:f0:46:50:0a:a9:dd:33:5a:78:
82:e5:60:a0:1b:5e:6d:19:d5:47:a6:4e:19:cc:e9:
4b:f6:40:ff:b1:77:0a:25:ba:02:ce:43:f8:c1:3a:
07:b6:3b:ce:49:65:4b:a7:14:8a:f7:a5:c2:b5:84:
0e:e5:c6:88:aa:99:ac:de:0c:e7:8b:0c:a3:66:66:
67:5e:5c:6a:e4:b4:3c:3e:b3:ae:52:27:03:ff:0b:
99:2a:ce:60:eb:b8:18:6d:cd:2d:c1:2a:00:3f:38:
55:95:d4:89:cd:b7:56:89:95:52:e8:92:eb:56:5b:
27:78:56:4a:ae:ec:2b:e2:84:d4:ec:56:f6:36:d6:
e2:55:35:f7:1b:8f:0a:d3:0c:04:80:9d:25:20:8a:
e3:6e:55:16:66:ce:85:91:18:11:3a:d1:91:61:fd:
d3:cf:d1:60:72:8f:0e:da:f6:49:9e:86:20:4a:bc:
18:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9E:3B:95:2E:D6:C2:A2:BE:4F:1A:AD:E0:2A:57:28:CB:38:97:0B
X509v3 Authority Key Identifier:
keyid:C4:B7:A3:38:67:23:BA:8A:2E:A4:82:C7:B6:80:31:A5:41:22:AC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:18:bc:55:ee:f5:b7:79:d1:49:4d:39:f6:bc:03:a3:7c:df:
14:94:e2:9e:2d:3d:12:26:56:80:35:48:27:39:28:24:51:8e:
84:61:da:4c:59:b2:5a:1b:b0:a6:0d:ed:01:4d:2b:f7:53:eb:
d1:da:a7:4a:78:12:3f:c0:77:eb:8e:0e:56:70:cf:86:2b:f2:
ce:58:0b:91:27:68:34:19:e5:33:c5:54:32:57:ab:2d:b1:ed:
28:8c:6c:30:2e:5b:5c:b5:ab:8a:5f:2d:35:08:6c:94:eb:18:
21:8e:a1:4f:fe:17:1f:3a:fe:e8:8f:a9:34:ad:37:a1:bb:7f:
3d:39:f4:8f:dd:e0:fc:e2:b8:a0:44:d8:5c:9d:f3:58:f3:b0:
22:77:db:f2:79:79:a9:cc:72:7f:54:8a:a5:99:3e:52:3e:a8:
7a:55:9c:ca:a3:8f:03:e3:fb:f2:28:11:8f:bd:18:73:b0:2e:
b1:5c:22:b3:7f:a6:26:21:69:89:af:80:19:80:f7:19:51:72:
ae:a6:41:93:07:9e:ce:a3:86:9a:3a:ad:0f:aa:54:be:ad:98:
c7:05:21:9f:88:44:b4:2a:b2:cf:f9:84:06:f7:81:c2:25:09:
cf:91:1f:be:74:f5:42:2e:27:99:55:7e:c7:a6:bb:71:1a:cb:
3e:5b:7b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:15 2026 by rpki-client