Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
File: XxSk5lWLq4nTbjuiHJXir91o--o.mft (raw, json)
Hash identifier: /QiorZLNpJWyNEH07ez/PM1IP4/TwZe51WQKYmlNGBw=
Subject key identifier: 8B:23:16:EA:EE:E7:04:2F:24:01:11:C2:D8:80:AC:A2:EB:60:9F:AE
Authority key identifier: 5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
Certificate issuer: /CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Certificate serial: 019D265F0144879891E850D837E4DBD543EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
Manifest number: 17F7
Signing time: Wed 25 Mar 2026 19:00:53 +0000
Manifest this update: Wed 25 Mar 2026 19:00:53 +0000
Manifest next update: Thu 26 Mar 2026 19:00:53 +0000
Files and hashes: 1: 4GacYlC1xTXBA2gZGI4h12SFY-0.roa (hash: NjXRgF24DIZuh863duD3ZThupdmVygwzxLiXyqu402Q=)
2: E0wwloupObPs9_O7vd7bSguVl6w.roa (hash: db081CMNM92GGYGAY4P5+DovYW2JE0c6H2IK3KWF7l0=)
3: XxSk5lWLq4nTbjuiHJXir91o--o.crl (hash: IWTVgP/SSPqjpiC+RVTPepY/CVYLIsdRjjkSbS8YqXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:01:44:87:98:91:e8:50:d8:37:e4:db:d5:43:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Validity
Not Before: Mar 25 19:00:53 2026 GMT
Not After : Mar 26 19:00:53 2026 GMT
Subject: CN=8b2316eaeee7042f240111c2d880aca2eb609fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:15:20:7c:79:b1:b5:16:a3:e3:de:18:8f:d9:
cc:ea:57:61:74:35:f7:a7:71:9c:04:3f:37:85:d1:
ec:db:a1:9c:ef:0b:3d:74:9c:54:24:d8:b7:ed:0c:
4c:8b:4a:81:42:f0:8c:ca:c1:a9:c8:47:55:c0:3d:
e1:62:66:cd:f8:77:95:86:2e:2f:cb:1d:67:f0:76:
34:49:11:dc:f8:20:08:84:d2:23:79:be:9f:8a:9f:
2c:25:3b:31:15:dd:d8:7a:b7:72:d2:39:cd:e3:77:
ef:bc:01:2a:6d:5c:47:2f:28:c8:e1:75:f0:9b:15:
62:60:cd:db:ae:d4:40:46:7f:de:0c:f8:f7:04:54:
79:2d:51:9f:48:fd:7d:64:c3:57:3c:57:af:87:91:
df:66:f3:ec:63:38:6f:35:41:cc:74:c5:90:2b:27:
c5:c0:ea:3b:76:12:9a:a9:56:4f:bf:30:d5:df:db:
bf:f7:67:89:0f:4b:1b:97:07:28:df:af:d8:e0:30:
6b:d2:bf:d2:24:b3:8a:08:d8:7a:b2:65:64:87:38:
0e:c1:ed:29:b2:d5:6b:a9:8a:5c:bf:b6:cc:1c:f2:
ce:ae:bd:9b:3d:87:b8:82:93:43:8d:0d:3f:9f:0f:
87:b5:b3:d3:8d:0f:bf:ff:f5:56:aa:31:a3:be:9a:
d6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:23:16:EA:EE:E7:04:2F:24:01:11:C2:D8:80:AC:A2:EB:60:9F:AE
X509v3 Authority Key Identifier:
keyid:5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:3e:30:41:c9:eb:36:7d:ec:d3:19:75:8e:a1:3a:32:2b:2c:
d8:d3:33:d8:7b:e8:b8:45:37:34:d8:db:43:a9:9b:e6:cf:c5:
53:15:4d:87:44:e9:d2:23:01:10:ad:91:c2:69:ed:0f:e7:01:
6c:3e:c4:ad:dd:ff:ab:00:f6:b9:70:04:32:ef:6d:7e:e0:10:
2d:18:40:f2:72:a2:07:e4:db:28:43:f2:2d:f0:33:d5:62:92:
57:9c:b1:97:f1:19:79:84:79:2b:fe:ca:50:34:be:b0:ff:79:
e7:84:14:73:52:dd:ca:bb:e3:81:b2:5b:0c:ca:76:67:f0:cc:
f0:75:ea:6d:86:88:f3:66:9e:3c:65:0b:b2:05:1b:a3:39:43:
24:c6:74:73:f9:e1:a1:ec:6c:1f:8e:b5:28:95:86:e7:ee:8c:
73:4c:43:53:5b:e8:84:24:ee:fa:93:37:fd:93:fc:d7:5a:3a:
2d:bb:b3:58:33:4d:93:04:76:1d:e2:67:10:8d:88:ad:d1:a2:
66:9a:1e:9f:56:d9:52:c0:48:6f:6c:89:a2:6b:2d:c7:7e:42:
a3:dd:7c:7e:2e:a5:b3:75:a5:15:41:66:09:38:e3:66:04:c7:
a3:7f:bc:73:1a:06:f8:41:67:aa:9d:bd:1c:20:db:45:19:4a:
ce:70:df:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:58:09 2026 by rpki-client