Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft
File: xUcTl89ew5mqDuxcMXOx8wQHI6k.mft (raw, json)
Hash identifier: 6IBfKIktZRqrJLKfyaptmhyUYuZ6xmxauOzPMGPJU18=
Subject key identifier: B4:B6:ED:B5:A8:B3:AC:81:AF:E4:5E:0B:92:CD:B4:9F:BD:B0:8E:D2
Authority key identifier: C5:47:13:97:CF:5E:C3:99:AA:0E:EC:5C:31:73:B1:F3:04:07:23:A9
Certificate issuer: /CN=c5471397cf5ec399aa0eec5c3173b1f3040723a9
Certificate serial: 019D265F56D847BB84580A9F6FA9DBCF17F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUcTl89ew5mqDuxcMXOx8wQHI6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft
Manifest number: 0A53
Signing time: Wed 25 Mar 2026 19:01:15 +0000
Manifest this update: Wed 25 Mar 2026 19:01:15 +0000
Manifest next update: Thu 26 Mar 2026 19:01:15 +0000
Files and hashes: 1: Wd7kxNOQtW9wntahD6-s3hs_RN8.roa (hash: Yn5VDfyyadHVMUb0Gm6V0K9m9w04Ph9wP22TSsc2ons=)
2: xUcTl89ew5mqDuxcMXOx8wQHI6k.crl (hash: /rKxFys9A/YI7KvGktJbd8bCx30IDbo4lJtOmM76Ops=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUcTl89ew5mqDuxcMXOx8wQHI6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:56:d8:47:bb:84:58:0a:9f:6f:a9:db:cf:17:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5471397cf5ec399aa0eec5c3173b1f3040723a9
Validity
Not Before: Mar 25 19:01:15 2026 GMT
Not After : Mar 26 19:01:15 2026 GMT
Subject: CN=b4b6edb5a8b3ac81afe45e0b92cdb49fbdb08ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6c:5a:86:50:b1:1e:6d:09:7d:f1:f0:3b:72:
aa:04:96:05:60:38:5e:e1:ca:12:8f:90:47:6d:25:
26:53:b1:ed:9a:99:6b:e3:85:3b:45:29:c1:6c:fe:
38:1c:df:6c:83:2f:9e:eb:ef:79:75:61:43:24:12:
1a:3e:29:cc:92:86:5b:be:6f:63:4e:44:8a:a0:0f:
1c:d0:4e:9b:0f:e7:35:ce:15:7e:e7:7f:82:47:e8:
56:7c:0e:72:55:55:8c:a2:e7:1b:15:a1:05:f8:60:
c2:d6:42:2d:a4:4f:6f:ec:44:e6:62:1b:aa:f1:c1:
ec:cd:7f:5f:c3:af:82:05:c1:35:cd:ad:9c:10:91:
fb:81:d4:a8:02:ed:e1:2d:61:69:4f:77:4b:5d:e8:
7a:34:12:b0:19:c5:73:0e:9b:59:7b:a6:dd:77:ab:
08:a4:78:b2:da:87:b1:6e:ed:f0:9f:50:e8:71:4b:
ef:cd:a1:e9:b6:27:21:82:2a:67:a3:b1:d1:cd:64:
76:f1:d6:16:1b:11:77:32:59:ee:3d:f4:df:60:12:
d7:fe:9b:46:e9:63:0f:e4:a1:6b:e9:8b:a5:74:f2:
e6:cb:b0:a6:7d:59:90:27:f8:db:d1:85:e5:51:30:
83:25:e1:6f:14:92:69:e3:06:06:31:ce:ca:13:9d:
81:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B6:ED:B5:A8:B3:AC:81:AF:E4:5E:0B:92:CD:B4:9F:BD:B0:8E:D2
X509v3 Authority Key Identifier:
keyid:C5:47:13:97:CF:5E:C3:99:AA:0E:EC:5C:31:73:B1:F3:04:07:23:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUcTl89ew5mqDuxcMXOx8wQHI6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:2e:2d:d8:7d:25:ce:71:d9:e9:fa:55:b1:6a:05:84:ee:24:
c5:b8:01:e3:78:f1:6d:25:66:3c:41:94:f7:7c:04:b1:c2:9a:
d6:de:5b:63:5f:58:21:a5:19:af:06:46:c1:b9:a0:2d:07:ea:
e4:31:59:10:2e:9a:6b:68:1c:c4:e2:ae:7b:ba:b0:ae:fd:6f:
32:71:45:e3:18:3f:56:94:5d:f8:97:2b:5c:49:12:c1:58:a3:
e3:b3:50:fd:51:96:8d:7f:c8:fd:fd:a1:41:28:ae:f1:ec:92:
f3:90:0c:82:12:3b:a0:34:c4:0c:78:05:f8:8d:ac:a2:8e:5b:
78:85:3e:de:98:e2:4a:d7:fa:2f:d8:15:3e:7d:7a:d4:25:4b:
eb:9a:be:7e:a0:81:12:e0:66:c7:97:a0:fa:8e:de:a8:d0:35:
fd:17:a6:1b:5d:ac:59:e2:04:3b:1e:05:62:2b:40:a4:71:42:
ee:e1:89:f5:1b:36:70:43:fa:ee:8a:ce:72:bb:ce:d6:fd:18:
6b:91:f0:18:3c:56:27:30:6c:1b:ca:51:60:62:9b:e4:2f:75:
a3:c1:3a:73:29:6c:a4:6d:92:c1:1f:e3:74:96:75:55:b9:7e:
ae:c9:97:35:36:b9:82:f5:29:f7:39:ba:22:1e:33:9d:14:d1:
8f:78:22:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:48 2026 by rpki-client