Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
File: XCnLotrPDvn6IgkAMrsVmhCRQPA.mft (raw, json)
Hash identifier: 8rsKyTK87uoL29omjA8UhzgXwog6D4YzhYA4Nvg5+QM=
Subject key identifier: FC:72:C8:7C:5D:D7:BA:5B:F4:64:C2:97:18:EF:F5:89:EF:94:2D:A9
Authority key identifier: 5C:29:CB:A2:DA:CF:0E:F9:FA:22:09:00:32:BB:15:9A:10:91:40:F0
Certificate issuer: /CN=5c29cba2dacf0ef9fa22090032bb159a109140f0
Certificate serial: 019E1EDA66ACA2C3D011A6FCA4B78546F295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
Manifest number: 1905
Signing time: Wed 13 May 2026 01:01:30 +0000
Manifest this update: Wed 13 May 2026 01:01:30 +0000
Manifest next update: Thu 14 May 2026 01:01:30 +0000
Files and hashes: 1: XCnLotrPDvn6IgkAMrsVmhCRQPA.crl (hash: 1rsbeApXrwb7WwI8Okyxj0nKYXsVKc3sa4Zq+wJ9y/4=)
2: aeEP89HKT7e7KYklfEV6GwzzRq4.roa (hash: +iLAVwj6kbQSZH9/6AWgoWRz5/OYd1yxCHRY7Br0+CU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:66:ac:a2:c3:d0:11:a6:fc:a4:b7:85:46:f2:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c29cba2dacf0ef9fa22090032bb159a109140f0
Validity
Not Before: May 13 01:01:30 2026 GMT
Not After : May 14 01:01:30 2026 GMT
Subject: CN=fc72c87c5dd7ba5bf464c29718eff589ef942da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e1:fc:1a:37:bc:3a:88:a7:93:0c:59:40:2d:
a3:21:57:50:58:cb:40:85:41:0f:21:80:79:5c:71:
7b:34:0e:d5:f6:3b:03:8e:86:d7:1a:47:2f:d4:0f:
0c:54:d6:d3:c2:e2:6d:2a:da:3b:f8:f0:c0:8e:43:
58:ac:e8:73:4a:5e:30:8f:94:df:05:b8:32:33:1e:
80:49:ae:db:5b:ec:14:36:35:14:8f:9e:2e:d7:8c:
03:86:47:06:b8:0f:a6:ab:9f:af:0b:7d:3e:be:03:
4a:64:f4:4c:b1:d0:2a:d9:5c:a5:93:4c:d2:c6:0b:
af:53:c9:8f:b3:6e:46:e4:34:eb:b5:59:b3:91:f7:
34:f1:e9:74:14:de:2d:fc:9e:4f:9e:cd:c3:9d:d6:
f8:f3:2c:94:75:21:4d:68:a5:ea:a5:81:d5:64:f9:
e2:42:9d:40:74:68:e3:f3:15:f3:c4:bb:fc:8c:1d:
93:df:02:42:07:a6:a8:57:66:7a:bf:0b:17:a0:a7:
56:33:32:d5:d9:18:46:03:dc:2d:a3:f1:18:26:a2:
5a:c0:50:88:df:49:92:c0:a4:15:ae:55:73:c9:bf:
54:43:80:d5:f7:ac:fb:02:6a:26:17:22:12:6e:63:
1a:77:da:61:e3:6b:26:c0:21:ee:db:1d:6c:8d:9d:
44:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:72:C8:7C:5D:D7:BA:5B:F4:64:C2:97:18:EF:F5:89:EF:94:2D:A9
X509v3 Authority Key Identifier:
keyid:5C:29:CB:A2:DA:CF:0E:F9:FA:22:09:00:32:BB:15:9A:10:91:40:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:0e:f8:d5:36:35:a3:49:76:aa:1a:e4:24:b4:f8:45:ec:a8:
ab:21:1e:9a:08:f7:53:7e:0f:83:e2:0f:a0:af:ad:3b:b0:63:
cf:c5:87:42:8d:ca:42:1e:45:7b:f4:00:24:11:ad:17:23:8b:
8c:cf:02:ab:74:68:83:ab:6e:e6:05:37:b9:38:bc:d5:43:5b:
d2:03:0a:fc:38:b8:02:9e:19:43:66:6b:9b:7f:8d:ba:70:46:
3c:a9:e1:44:44:2e:4f:88:f7:15:d5:99:ab:e0:11:85:ac:08:
9a:ae:61:a6:8e:fa:ec:4e:31:8e:79:39:c5:35:08:a8:68:ec:
17:40:e8:1a:02:f3:7e:76:c2:9e:08:f6:8e:d8:17:14:d8:4e:
46:94:7f:99:d0:83:01:8c:de:6c:ba:03:d3:de:5d:d6:19:74:
2c:4d:66:0d:06:fd:17:60:50:ed:7b:51:f7:12:14:a7:89:25:
c8:3c:ef:ae:86:56:4b:80:3a:dc:9b:f4:4a:cd:9b:64:e7:5d:
ee:4e:ba:f3:02:1e:fd:06:d5:4a:f5:e9:54:f6:d4:f1:ea:e2:
ab:07:3b:a1:48:17:37:59:d5:f1:85:e3:fd:9f:ba:cd:1a:03:
e9:c2:e8:b8:86:18:f0:c6:96:e5:d0:c1:1b:1e:e7:96:bf:09:
db:bc:28:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:48:10 2026 by rpki-client