Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft
File: XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft (raw, json)
Hash identifier: bdM2Pv2vipMoEBEn4icKxTtlRDdYu1wecF+GtsRmhSw=
Subject key identifier: 28:2D:4C:B8:00:FF:C1:51:12:CC:08:1C:4B:0E:96:FF:E7:B2:39:14
Authority key identifier: 5D:F9:E8:56:F0:49:5C:84:90:D5:12:4E:8C:FB:AF:08:D7:0D:FB:17
Certificate issuer: /CN=5df9e856f0495c8490d5124e8cfbaf08d70dfb17
Certificate serial: 019D2B4ECF60F975236550A65B29FD48B9FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft
Manifest number: 0466
Signing time: Thu 26 Mar 2026 18:01:18 +0000
Manifest this update: Thu 26 Mar 2026 18:01:18 +0000
Manifest next update: Fri 27 Mar 2026 18:01:18 +0000
Files and hashes: 1: XfnoVvBJXISQ1RJOjPuvCNcN-xc.crl (hash: 6YqG/aH6cJhHhG9Gfvm/q9VZvLRrgnrE9IDZsCLC2zo=)
2: ua_e8PovLDNf56za3RBEa7cuuaQ.roa (hash: AeMBv+klAL3WpkSagPgkjuVi+j0J2ixa7AC/uv/cJ9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:cf:60:f9:75:23:65:50:a6:5b:29:fd:48:b9:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df9e856f0495c8490d5124e8cfbaf08d70dfb17
Validity
Not Before: Mar 26 18:01:18 2026 GMT
Not After : Mar 27 18:01:18 2026 GMT
Subject: CN=282d4cb800ffc15112cc081c4b0e96ffe7b23914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8f:95:8a:9d:8d:f3:45:57:75:48:8f:35:fe:
41:08:01:c1:08:5b:21:b7:51:a4:24:b0:2d:9e:0e:
78:8d:1b:2e:24:69:1d:bd:0e:0b:df:0f:34:c5:61:
a6:20:f3:8c:97:d1:2a:36:24:54:8d:af:72:3c:db:
8f:31:b2:c3:06:de:41:15:8f:12:a7:b3:33:d9:7b:
d6:98:5c:1d:e9:df:bf:d3:6c:7f:2b:05:98:1c:51:
5d:f3:da:38:d1:57:f8:28:28:dd:fd:1c:21:25:24:
c2:d5:1f:c1:1b:81:48:43:22:5b:f5:5a:36:bb:b2:
cd:2f:a0:1c:a0:6a:47:f2:19:e1:3f:ba:d6:bd:0b:
98:f0:39:a9:72:71:e8:bf:8c:b4:e2:fc:81:8b:94:
e8:2b:f2:0b:e4:4a:10:38:72:67:57:f5:80:f1:50:
ae:3e:8f:52:fe:32:0e:c0:0e:94:47:fb:5c:ef:24:
fd:5a:ed:eb:d5:60:c1:a3:59:e9:f3:85:fa:b0:8a:
93:72:4e:0f:18:15:3d:c8:ef:eb:9d:b4:de:5b:c7:
2b:ff:0c:59:11:53:59:77:d7:db:68:12:15:3c:19:
83:fe:19:38:6d:cf:75:ac:aa:2d:ca:6d:40:0f:b6:
d4:d9:d6:68:58:dd:51:ab:24:ca:a1:70:b2:a8:93:
20:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2D:4C:B8:00:FF:C1:51:12:CC:08:1C:4B:0E:96:FF:E7:B2:39:14
X509v3 Authority Key Identifier:
keyid:5D:F9:E8:56:F0:49:5C:84:90:D5:12:4E:8C:FB:AF:08:D7:0D:FB:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:14:f5:d3:12:2d:3f:49:ed:25:97:50:68:8c:18:ba:24:59:
bd:99:22:40:23:5c:70:b4:02:84:07:58:b9:8d:ee:5c:f0:b1:
ee:9b:74:b5:40:06:7d:eb:13:1e:aa:e0:53:43:e0:73:2e:92:
5b:c9:ec:b8:92:cb:b6:03:1b:6d:99:47:6e:28:52:4e:16:0d:
12:e4:cf:9c:1a:71:3b:b5:f7:1c:7b:85:67:cd:65:9f:dc:02:
0a:4d:c8:ed:77:e4:d1:f3:70:4a:d2:4f:96:26:cc:7b:0b:b6:
fc:1a:c3:97:ca:e6:f1:5e:87:7e:c5:b5:03:92:b9:f5:2f:a4:
03:1f:fa:3b:2d:54:09:55:51:94:0d:f8:9f:55:53:71:e7:9f:
36:f4:49:e0:dd:4f:27:4e:76:e8:ef:e7:42:de:ee:d5:59:db:
da:59:57:8c:79:19:56:99:70:ba:88:b9:59:05:14:76:93:c1:
e4:2a:c5:8a:2d:88:74:a9:5e:08:fb:6a:f3:d9:68:78:68:f2:
ea:c5:9a:20:6c:df:7d:97:15:86:c0:7b:a5:6a:0d:34:7a:4b:
a9:fd:db:a7:fa:14:3d:f3:2e:8f:ba:e6:a3:45:76:21:18:79:
d1:aa:e6:2e:39:2f:ed:96:55:14:c5:d1:88:27:15:a0:a7:06:
57:45:33:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:21:59 2026 by rpki-client