Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
File: Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft (raw, json)
Hash identifier: 7cV4+P7xVh4scPsQ13JEpHwnFZusQyYot1vN5To96Rg=
Subject key identifier: B5:C6:8B:58:60:A0:56:8A:4C:58:4C:F0:A4:36:EC:D1:C6:6F:E3:94
Authority key identifier: 5E:8E:58:15:37:E7:AA:66:78:3C:34:03:82:2A:11:81:A3:16:8D:08
Certificate issuer: /CN=5e8e581537e7aa66783c3403822a1181a3168d08
Certificate serial: 019D273AA7C24F5BCFDC732DAF432497AC43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
Manifest number: 0CB1
Signing time: Wed 25 Mar 2026 23:00:48 +0000
Manifest this update: Wed 25 Mar 2026 23:00:48 +0000
Manifest next update: Thu 26 Mar 2026 23:00:48 +0000
Files and hashes: 1: Xo5YFTfnqmZ4PDQDgioRgaMWjQg.crl (hash: tQxV5Wu8RXtn7L/sGiZMWqqesIQLuCPvmqImEGH0QsM=)
2: zUPOhxihYzhbcX4tok2wWWwFbw4.roa (hash: MhLBWRoR0j43G7PjNgF2nCiYDlCAe2m1lXi02+T0zpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:a7:c2:4f:5b:cf:dc:73:2d:af:43:24:97:ac:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8e581537e7aa66783c3403822a1181a3168d08
Validity
Not Before: Mar 25 23:00:48 2026 GMT
Not After : Mar 26 23:00:48 2026 GMT
Subject: CN=b5c68b5860a0568a4c584cf0a436ecd1c66fe394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:83:ff:59:72:5b:68:51:eb:df:12:9a:22:a1:
a2:e6:12:55:12:94:e7:54:72:4d:43:db:8d:ef:cd:
58:ed:99:2b:ea:55:af:27:08:a8:51:ec:c2:7b:54:
62:82:29:c3:73:9e:06:7b:bf:13:4a:cc:4c:4a:70:
21:68:84:07:a8:57:65:d1:b4:2b:22:21:7d:58:82:
34:75:d1:dd:d3:bf:30:de:f1:2f:fb:0e:d2:35:9b:
17:04:66:22:27:4e:9c:f9:af:56:5e:b8:dc:08:8a:
f0:38:01:91:3a:3e:ba:8b:1d:b8:a3:1d:c5:ca:36:
e9:17:cd:47:1a:a5:50:59:64:3e:2c:8c:84:98:09:
00:11:ad:02:20:39:d2:18:61:37:bc:a9:22:50:10:
c1:bc:cf:34:97:09:b1:0d:40:d7:b8:ab:35:cd:60:
b0:53:9a:28:19:02:b4:77:d3:24:fc:11:03:55:b6:
36:7e:8d:8f:07:c9:1a:db:ed:2e:6c:c9:1d:25:49:
78:84:47:65:b5:0a:f8:56:1f:45:31:2a:e7:a8:cd:
a5:0e:10:b4:58:36:e8:57:5c:41:b0:a7:6d:b5:27:
e9:ca:25:bf:1a:30:c2:10:fb:34:9c:14:f2:2d:d3:
dc:07:ed:10:4b:f9:38:90:69:81:1c:e0:8a:43:6a:
38:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C6:8B:58:60:A0:56:8A:4C:58:4C:F0:A4:36:EC:D1:C6:6F:E3:94
X509v3 Authority Key Identifier:
keyid:5E:8E:58:15:37:E7:AA:66:78:3C:34:03:82:2A:11:81:A3:16:8D:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:8e:8b:4f:e6:02:53:21:e0:80:ab:e8:9e:b3:51:27:34:97:
06:35:c8:bc:6a:e2:0d:6a:ef:55:b5:61:ce:dd:c4:5b:3f:a9:
83:df:8c:ac:f1:a8:3d:f8:78:ce:a9:fc:3a:fd:ae:33:18:b1:
50:29:fe:de:ec:46:84:7a:24:d0:00:ab:bc:27:5b:a1:ea:ad:
e6:2e:c9:15:4b:ad:54:e7:0c:9c:5a:92:f7:ad:39:6d:c3:32:
e7:a8:77:0e:23:ad:28:5b:52:2e:99:a1:98:6c:a1:ec:f7:4b:
07:ca:1d:66:bd:8c:a0:d3:23:f0:80:5a:6e:e7:8f:06:63:b5:
a3:82:17:87:99:9b:e1:0b:94:9f:2d:84:9d:d5:b1:61:dc:58:
0c:ce:5f:f3:a0:4b:78:86:99:42:e7:ed:c8:23:f9:fd:66:60:
39:f7:3b:6c:4d:4e:fa:f6:0a:ec:6f:a9:1b:e7:3b:d7:a8:3e:
9b:d6:1b:5e:d6:67:2b:93:0c:de:fa:83:e6:06:11:4e:21:b8:
0d:ad:69:df:19:f0:7d:32:90:0a:a8:81:2b:54:8b:05:18:cf:
1b:1e:c7:a4:66:8a:f7:61:da:6e:62:f1:a3:58:5f:9b:fd:85:
28:70:64:fa:91:b2:95:c2:da:76:29:fe:b2:01:cf:9b:d0:4e:
cc:bb:08:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:13 2026 by rpki-client