Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
File: Xx-gbV262kPeRPTksdyUkrsofJ0.mft (raw, json)
Hash identifier: eZKKxGFhLYbst5PzTw5DS6rdjgQMKfTRp2+vDTdokuY=
Subject key identifier: 8C:18:11:F0:0F:AD:0B:7D:9C:79:0B:9E:7C:FC:5F:AC:C3:07:60:DD
Authority key identifier: 5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D
Certificate issuer: /CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d
Certificate serial: 019D25840AB5FCD66B1786A5C224741B0C5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
Manifest number: 17F2
Signing time: Wed 25 Mar 2026 15:01:43 +0000
Manifest this update: Wed 25 Mar 2026 15:01:43 +0000
Manifest next update: Thu 26 Mar 2026 15:01:43 +0000
Files and hashes: 1: Xx-gbV262kPeRPTksdyUkrsofJ0.crl (hash: yZ3hR3RCWZJQLVYVAC+qEsWU2Tk1Ws+vaYoA1RCpON0=)
2: sR6--VSf1TJg6XBqIQJFjdqQwjk.roa (hash: +a/LmYhJ6hoUTDiKTmsqLp0iqelM6C3OOFZARtNpILA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:0a:b5:fc:d6:6b:17:86:a5:c2:24:74:1b:0c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d
Validity
Not Before: Mar 25 15:01:43 2026 GMT
Not After : Mar 26 15:01:43 2026 GMT
Subject: CN=8c1811f00fad0b7d9c790b9e7cfc5facc30760dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2c:6f:ed:60:3d:8f:22:b2:ca:1f:74:37:6b:
a6:bc:98:c9:d4:3e:77:19:c5:9a:2c:0d:fb:07:20:
c0:fe:c2:7d:bd:03:ef:37:fa:1a:f2:cf:25:60:54:
71:39:21:fe:4d:11:4f:f0:d9:8e:ee:5f:cd:87:9f:
2f:10:7f:86:75:dc:23:69:a9:23:03:53:ac:68:62:
51:26:cf:4a:b0:f4:11:bf:28:4a:d6:1b:c3:e5:9a:
bb:ac:ae:53:e0:39:e3:30:df:0b:f8:a6:e1:1a:43:
1e:9a:cd:aa:e1:9e:7e:60:a8:57:e6:9a:ff:9a:33:
1d:ac:c2:4e:0f:4f:f4:75:73:7d:d8:94:1d:39:10:
46:f7:d8:d9:79:c5:67:74:75:55:c4:e3:91:1c:cb:
cf:bd:93:27:e5:12:97:d5:57:54:2c:63:b2:83:96:
3b:d9:e5:d3:b4:fd:b9:bf:b9:bc:2e:00:89:59:79:
0c:93:73:70:21:b0:67:08:f9:6b:ab:30:e0:cc:94:
d6:d3:bc:74:a3:fc:0f:31:e1:2b:93:5e:8c:ce:48:
d7:2f:bd:32:de:7a:ca:9e:bc:05:11:91:38:3b:6b:
21:be:95:e3:a0:1c:89:8f:61:bd:3f:a5:ba:ca:ff:
0a:47:1c:ea:48:f0:bd:70:18:84:ec:93:2c:23:ca:
5b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:18:11:F0:0F:AD:0B:7D:9C:79:0B:9E:7C:FC:5F:AC:C3:07:60:DD
X509v3 Authority Key Identifier:
keyid:5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c6:c3:1f:44:dc:3f:33:71:dc:e4:72:81:ac:9d:12:40:65:
0b:40:f7:e8:d2:c0:2a:1c:72:63:2c:73:fb:e6:cb:3b:3a:01:
91:7e:8f:e1:36:33:48:7d:75:f0:59:06:0a:99:e2:95:43:33:
16:4d:1e:66:89:2d:e8:50:d3:f6:38:61:b5:d3:a8:8a:90:34:
03:02:a3:50:8b:df:4d:93:e0:2c:de:ea:36:da:e6:04:f1:b4:
0a:be:c0:dc:d5:7e:7e:2d:0f:4b:99:c7:83:08:39:ff:d9:ce:
3d:53:01:8d:94:48:53:94:02:f0:af:f2:fa:14:8b:48:1f:a7:
f3:a2:d1:6f:38:eb:8c:05:ed:b6:81:c8:44:17:2d:8e:df:bf:
24:be:53:76:38:1b:54:e4:cd:7e:cf:28:67:06:8c:04:40:96:
4c:2a:32:44:5a:bb:90:b6:ec:e3:e2:dc:aa:ce:61:71:e4:d0:
03:c4:24:1b:6f:63:78:66:d9:8b:fa:30:18:2d:05:22:ba:f4:
aa:20:6a:23:bf:76:45:5f:fe:c9:56:c2:fc:dc:a5:a5:ed:f8:
ba:5f:55:59:58:eb:9d:c5:55:ac:d4:9d:9c:1b:67:c7:9c:30:
1c:24:47:6e:a8:b3:ce:24:2e:99:fb:16:28:9f:b8:77:f2:f9:
52:5d:05:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:32 2026 by rpki-client