Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft
File: X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft (raw, json)
Hash identifier: h2uj9g6W3IGcTtQeo6/157KtL904P8FhQyjpZIkmVgI=
Subject key identifier: A8:74:73:22:FA:04:D2:B6:41:C8:24:DA:53:83:5C:F5:7A:D7:F2:36
Authority key identifier: 5F:45:B1:34:C0:91:41:0E:31:42:3E:AC:2C:CA:D0:AE:DB:8A:6E:C5
Certificate issuer: /CN=5f45b134c091410e31423eac2ccad0aedb8a6ec5
Certificate serial: 019D29972064E0BDFD41A1AC3AE6E531D3F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft
Manifest number: 0FB0
Signing time: Thu 26 Mar 2026 10:01:03 +0000
Manifest this update: Thu 26 Mar 2026 10:01:03 +0000
Manifest next update: Fri 27 Mar 2026 10:01:03 +0000
Files and hashes: 1: X0WxNMCRQQ4xQj6sLMrQrtuKbsU.crl (hash: niXr/Pmy6TskpKggslk26nDlyYU+ERrfakYhkklYinc=)
2: w0awLyAE7bpppRvJ-JMjMZHR1kw.roa (hash: 980Uh/mGmlulr/4a0C22VsIGO0hmRCY1rYF5n7rPjaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:20:64:e0:bd:fd:41:a1:ac:3a:e6:e5:31:d3:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f45b134c091410e31423eac2ccad0aedb8a6ec5
Validity
Not Before: Mar 26 10:01:03 2026 GMT
Not After : Mar 27 10:01:03 2026 GMT
Subject: CN=a8747322fa04d2b641c824da53835cf57ad7f236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b0:36:80:b2:4f:e3:d1:6a:dd:d2:ec:85:4e:
a8:f5:fd:9c:aa:bf:6a:07:a4:bf:bb:5d:d1:4b:73:
a5:d6:55:8f:c3:f3:74:8c:05:86:dc:7b:f3:5b:fc:
7f:77:e7:67:a3:c4:85:b9:45:77:4f:07:99:5f:3b:
ba:e7:47:42:64:ad:8b:66:ec:4c:82:e8:cb:b5:5a:
a5:6b:f3:da:5c:02:fc:4a:6e:25:d9:c5:1e:43:03:
d9:4c:12:98:d9:90:be:e3:87:e6:3d:91:23:0d:03:
7e:3d:c5:76:5f:52:87:f4:db:b4:aa:cd:ab:9a:46:
e4:f8:9c:e9:f0:75:dc:ef:30:58:3d:7b:ad:7f:c9:
ea:4e:37:34:94:92:78:f2:65:fe:ba:0a:64:7b:46:
30:76:4b:88:71:e2:d2:c0:7c:78:90:34:90:f1:81:
a5:6e:5f:f0:52:b0:d0:fc:73:bd:ac:9b:17:93:eb:
28:44:22:1e:9c:00:cf:f9:2c:2e:31:30:95:46:d6:
7a:f3:c3:70:fd:a0:57:e6:af:be:f0:f1:c1:4c:7a:
ab:25:49:ce:de:9c:3b:2a:be:29:1b:9b:e2:bd:cd:
a6:02:e2:19:a1:71:bc:df:ed:31:ba:8a:8a:b2:c0:
a7:10:cd:cb:56:65:eb:d5:25:0e:c7:32:b6:93:f2:
4e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:74:73:22:FA:04:D2:B6:41:C8:24:DA:53:83:5C:F5:7A:D7:F2:36
X509v3 Authority Key Identifier:
keyid:5F:45:B1:34:C0:91:41:0E:31:42:3E:AC:2C:CA:D0:AE:DB:8A:6E:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:17:06:4e:48:f8:ac:a2:6e:f7:bd:35:d8:aa:78:0e:03:7e:
ed:e9:f8:b8:9f:22:1c:9a:1c:d9:d4:c0:30:28:2a:a6:67:0a:
d8:54:08:90:48:ec:36:79:ac:98:66:8e:6f:18:8f:dd:0e:d0:
1f:35:2d:e5:14:8a:54:fa:56:30:73:b7:89:48:cf:c1:f0:70:
05:a7:dc:b6:6b:93:5c:3c:e4:e1:77:17:f6:ff:7e:8a:cf:a6:
22:54:09:2a:3d:eb:e0:33:f8:08:e9:e6:e6:c0:97:5c:72:76:
86:80:d4:83:59:7d:80:b3:dc:69:bc:94:e1:c6:a7:4f:2f:7a:
e3:76:92:f4:7e:ea:90:e0:9a:73:4a:db:e7:70:02:6b:55:dd:
cb:32:e3:63:71:65:5b:ff:a1:d0:8f:31:52:30:52:b0:39:87:
3a:6a:bf:40:bb:90:17:54:bd:35:1e:f0:69:51:7c:3d:b9:f9:
15:c2:d6:df:c5:77:f8:2c:8a:4e:4b:5b:1a:cc:1d:e0:bd:d8:
22:96:c1:96:90:0f:27:d6:3b:9a:b0:af:ae:f6:53:85:fe:f0:
6f:6e:26:fe:c1:d1:92:67:ba:35:3a:98:f1:aa:a0:75:05:15:
8b:1f:cc:a9:00:f5:cd:4a:94:e0:79:fa:1d:bc:a4:c6:9c:08:
11:99:70:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:25:55 2026 by rpki-client