Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft
File: Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft (raw, json)
Hash identifier: tFKbo3BQxiA+wdpoTQCCmQpR3FX8fHsEh/fnkk6bpuo=
Subject key identifier: CA:BD:D1:DC:FF:DC:1F:70:F0:13:89:8B:B3:F8:6B:AD:51:1D:53:32
Authority key identifier: 5E:6D:2C:2B:69:C2:48:51:62:3B:F9:14:76:90:26:35:A4:CE:09:EA
Certificate issuer: /CN=5e6d2c2b69c24851623bf91476902635a4ce09ea
Certificate serial: 019D25F14BE12F901E97909D6D6B679BFCB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 17:01:03 +0000
Manifest this update: Wed 25 Mar 2026 17:01:03 +0000
Manifest next update: Thu 26 Mar 2026 17:01:03 +0000
Files and hashes: 1: Xm0sK2nCSFFiO_kUdpAmNaTOCeo.crl (hash: FYUDCXmm/NmrThOXktXqtb9MLf8zQVolxFNwfEQedmY=)
2: m_R3fUozzL87EYeBBOJB4HDCEG0.roa (hash: Kb4aDfQxNlTgIE8pMcyu4olptfzwH607RGeuUZmL39o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:4b:e1:2f:90:1e:97:90:9d:6d:6b:67:9b:fc:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6d2c2b69c24851623bf91476902635a4ce09ea
Validity
Not Before: Mar 25 17:01:03 2026 GMT
Not After : Mar 26 17:01:03 2026 GMT
Subject: CN=cabdd1dcffdc1f70f013898bb3f86bad511d5332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c9:18:f2:08:95:8d:fc:19:ae:8f:22:47:5d:
36:d5:0d:ca:81:00:dd:2a:e4:55:f7:4d:22:56:57:
19:51:a1:66:09:54:24:77:ef:4a:57:b7:78:db:3c:
20:52:46:b2:7c:d9:36:f4:a3:80:92:67:ac:d9:2c:
42:b3:18:ef:e0:e9:f2:73:5c:52:48:5b:6b:9e:c6:
e3:05:ba:19:7b:36:e0:9a:70:8f:3e:9e:5a:14:4b:
c9:c1:b8:9b:9c:db:18:8d:ce:70:e5:4c:60:18:c6:
09:40:d6:81:e4:ee:1a:b0:15:f3:89:c1:e4:ac:75:
5d:f9:56:f8:2b:cd:30:71:97:c4:34:76:74:55:14:
f0:29:01:b9:56:de:d9:a7:9f:28:65:01:76:6b:6b:
44:55:b0:05:fe:3d:b3:15:75:49:c8:75:d1:20:79:
d8:4b:c5:43:bd:a4:f0:b0:0f:08:88:d2:d8:83:6d:
5b:4b:6a:d5:26:95:be:f2:0c:7c:c9:62:29:33:37:
30:11:ad:f0:d0:84:eb:b9:7d:bf:de:ef:ed:23:46:
3e:00:46:17:94:13:e0:3f:48:35:73:4b:2f:1d:a1:
d0:35:1a:bd:6d:5b:8c:36:8e:f3:c5:11:19:fc:8c:
93:e0:fd:0d:a7:a6:ac:eb:54:5a:d3:be:f2:ac:27:
39:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BD:D1:DC:FF:DC:1F:70:F0:13:89:8B:B3:F8:6B:AD:51:1D:53:32
X509v3 Authority Key Identifier:
keyid:5E:6D:2C:2B:69:C2:48:51:62:3B:F9:14:76:90:26:35:A4:CE:09:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:3b:73:7e:90:d8:04:8f:a7:ea:4e:5e:02:ee:f3:d6:6c:da:
cb:ec:5d:71:28:b6:d5:e5:5d:e3:06:c9:6a:15:35:bb:e4:a1:
fa:45:53:7b:e8:fe:1f:73:7a:81:5c:73:50:6e:3f:58:d6:05:
a8:aa:a9:70:fc:c0:22:eb:b7:a5:79:6e:63:f3:76:6b:97:73:
1a:bc:1d:b2:74:04:ea:df:d3:d7:42:fc:7f:91:12:60:a9:7f:
ff:66:5b:c9:b9:60:a9:ce:ee:d3:04:d3:bc:5a:08:7c:3d:cc:
1b:45:25:e3:cc:2c:4e:7e:02:23:2c:8b:b3:c8:b7:7b:fe:57:
2b:88:3d:d3:93:b3:49:b3:8f:ba:f9:db:d0:56:a4:9b:0d:92:
5e:d9:35:a5:fd:c3:59:13:84:bf:c2:3f:f7:7d:63:ab:7a:16:
c0:4f:cf:74:7d:56:4d:d0:46:9b:95:3c:5e:65:18:da:57:bc:
5e:b0:29:01:f7:67:db:94:d8:9a:fe:86:67:e2:b3:46:7c:b2:
9a:3d:d0:42:7f:ca:f8:ee:17:eb:6f:db:c8:da:11:84:16:2c:
03:3c:a0:8c:1a:67:bc:0a:82:56:71:37:03:ad:d3:9b:56:d8:
13:70:60:a8:8c:19:f6:02:8c:14:b3:67:d9:62:c9:45:70:46:
79:6d:26:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8UvhL5Ael5CdbWtnm/y5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNmQyYzJiNjljMjQ4NTE2MjNiZjkxNDc2OTAyNjM1YTRj
ZTA5ZWEwHhcNMjYwMzI1MTcwMTAzWhcNMjYwMzI2MTcwMTAzWjAzMTEwLwYDVQQD
EyhjYWJkZDFkY2ZmZGMxZjcwZjAxMzg5OGJiM2Y4NmJhZDUxMWQ1MzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMkY8giVjfwZro8iR1021Q3KgQDd
KuRV900iVlcZUaFmCVQkd+9KV7d42zwgUkayfNk29KOAkmes2SxCsxjv4Onyc1xS
SFtrnsbjBboZezbgmnCPPp5aFEvJwbibnNsYjc5w5UxgGMYJQNaB5O4asBXzicHk
rHVd+Vb4K80wcZfENHZ0VRTwKQG5Vt7Zp58oZQF2a2tEVbAF/j2zFXVJyHXRIHnY
S8VDvaTwsA8IiNLYg21bS2rVJpW+8gx8yWIpMzcwEa3w0ITruX2/3u/tI0Y+AEYX
lBPgP0g1c0svHaHQNRq9bVuMNo7zxREZ/IyT4P0Np6as61Ra077yrCc5zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMq90dz/3B9w8BOJi7P4a61RHVMyMB8GA1UdIwQY
MBaAFF5tLCtpwkhRYjv5FHaQJjWkzgnqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG0wc0sybkNTRkZpT19rVWRwQW1OYVRPQ2VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8zOGE0MDEtZjI3Yi00OTdhLWJiZmEt
ZTdiYjUwYmMwODFiLzEvWG0wc0sybkNTRkZpT19rVWRwQW1OYVRPQ2VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi8zOGE0MDEtZjI3Yi00OTdhLWJiZmEtZTdiYjUwYmMwODFi
LzEvWG0wc0sybkNTRkZpT19rVWRwQW1OYVRPQ2VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfTtzfpDY
BI+n6k5eAu7z1mzay+xdcSi21eVd4wbJahU1u+Sh+kVTe+j+H3N6gVxzUG4/WNYF
qKqpcPzAIuu3pXluY/N2a5dzGrwdsnQE6t/T10L8f5ESYKl//2Zbyblgqc7u0wTT
vFoIfD3MG0Ul48wsTn4CIyyLs8i3e/5XK4g905OzSbOPuvnb0Fakmw2SXtk1pf3D
WROEv8I/931jq3oWwE/PdH1WTdBGm5U8XmUY2le8XrApAfdn25TYmv6GZ+KzRnyy
mj3QQn/K+O4X62/byNoRhBYsAzygjBpnvAqCVnE3A63Tm1bYE3BgqIwZ9gKMFLNn
2WLJRXBGeW0mTQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:29:21 2026 by rpki-client