Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
File: XtmdScSw5GsnhoQnMeFTSFyKxIs.mft (raw, json)
Hash identifier: 6sPrWQyNr4Cp51mmGzIha0KoZv6vH/tRcX9GpkJPH7I=
Subject key identifier: 7D:09:4E:34:B0:84:30:90:9D:B2:33:9B:DA:42:B8:DE:14:D6:94:A2
Authority key identifier: 5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
Certificate issuer: /CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Certificate serial: 019D27A8FD44EA0C50C87E31C4B4C7FF096E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
Manifest number: 0F68
Signing time: Thu 26 Mar 2026 01:01:19 +0000
Manifest this update: Thu 26 Mar 2026 01:01:19 +0000
Manifest next update: Fri 27 Mar 2026 01:01:19 +0000
Files and hashes: 1: 1-nsaGOYJDQs8nE83JBsjbwYRoPA.roa (hash: ZorqeuTKQ8BzMES+IbO5PhiAMx62C25+2z4OV8xpzBs=)
2: XtmdScSw5GsnhoQnMeFTSFyKxIs.crl (hash: lFSoFpKwDe18e510+zMzF45I6HyUcwYcneF60QFICM0=)
3: fYv6u6ZqsaaVuf2RxvvaolhNBjk.roa (hash: jVk92j+q/o1dRJaAKw+eFCSe6j9s2E6quPaItwZl0/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:fd:44:ea:0c:50:c8:7e:31:c4:b4:c7:ff:09:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Validity
Not Before: Mar 26 01:01:19 2026 GMT
Not After : Mar 27 01:01:19 2026 GMT
Subject: CN=7d094e34b08430909db2339bda42b8de14d694a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c9:0f:7b:04:af:e5:01:36:3b:18:cc:f8:97:
d6:74:f3:7d:a5:d8:6b:31:d8:7b:7f:2d:bc:ab:46:
50:3e:36:0c:51:59:ef:5d:54:ae:af:22:34:b6:f8:
15:98:6b:0e:cf:2d:2e:83:eb:ce:e5:42:9b:70:9d:
f5:38:28:1c:07:d1:c0:22:f0:e6:2e:74:1b:06:0d:
ff:ee:09:b1:f6:ac:2c:d9:0a:b3:7c:fe:5f:87:e8:
42:ce:fc:1e:26:81:e3:7e:e1:a9:c7:d3:54:90:32:
a2:96:f7:fd:23:cc:c4:63:9d:67:81:73:fb:a0:49:
1d:55:f9:aa:3b:d7:69:c6:d8:8a:a3:01:af:52:2b:
5d:92:d6:29:4f:43:21:1e:01:e6:2b:e1:26:57:d5:
91:f0:26:82:79:8f:fc:ee:42:f1:04:ce:76:be:60:
7f:b7:c4:ea:23:ba:2c:1e:00:1d:ab:d2:9e:ab:4f:
fd:b4:8a:09:16:f1:b5:ab:31:89:51:cd:3b:35:40:
74:08:a4:69:bd:4e:a9:dd:bd:62:b6:6c:9d:52:c2:
98:1f:77:93:18:c5:55:b2:d5:aa:29:51:9e:c9:db:
5a:ec:d8:63:84:c3:f4:da:96:36:da:17:be:78:75:
6b:88:13:e6:40:6f:da:dc:b6:5c:6c:a1:e5:20:ba:
67:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:09:4E:34:B0:84:30:90:9D:B2:33:9B:DA:42:B8:DE:14:D6:94:A2
X509v3 Authority Key Identifier:
keyid:5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:46:8f:0b:e0:f0:aa:49:2b:0d:95:ad:04:16:1d:6a:2b:d7:
48:19:91:b2:2f:60:46:23:d1:7d:a4:10:53:44:43:63:80:bd:
2c:71:9c:a1:15:05:24:89:4a:c7:f7:f8:0d:eb:df:19:5c:6a:
2e:f9:84:f6:26:01:1a:ba:14:2a:8e:58:3a:01:72:e3:35:92:
2f:91:73:94:2b:88:16:bb:d3:1c:b6:f9:91:78:f7:6c:78:35:
cc:aa:28:38:89:89:1e:d6:47:91:dd:94:78:67:72:f8:5a:b9:
cf:39:56:9c:a1:40:c0:a9:99:18:33:2a:33:b1:c0:8c:df:81:
96:2b:3b:c8:3b:5a:78:29:a6:90:db:ab:05:cc:7c:b7:94:80:
b8:dd:f5:59:3a:6a:1a:43:bc:99:37:4a:b5:5f:54:b3:ee:5d:
57:88:15:87:6d:f8:3e:dc:82:ad:01:66:9e:6e:98:b0:02:7d:
9a:b7:ba:06:9d:fd:e2:e8:db:c7:19:cd:ae:7b:77:57:f5:7b:
28:c7:05:35:e3:30:62:ee:a5:aa:7e:98:ab:d6:47:b1:9d:3d:
ff:cb:63:1b:a5:7f:43:34:0d:0d:83:5d:9f:bf:ca:ba:a2:24:
e1:aa:59:bb:86:b5:29:ad:53:e8:fd:c7:0b:60:8e:4c:cb:4c:
ab:f8:34:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:21:17 2026 by rpki-client