Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
File: Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft (raw, json)
Hash identifier: YCm3Zggo1bqunK0u2RBjmhxgkClUYBmshlIKn+jawvc=
Subject key identifier: 0F:64:93:82:6D:94:F8:93:0B:3B:D3:2F:D5:4F:AF:75:6D:8A:67:19
Authority key identifier: 5E:79:AC:D4:EE:40:FD:A4:30:22:A2:C9:64:2B:07:1D:A6:49:52:6C
Certificate issuer: /CN=5e79acd4ee40fda43022a2c9642b071da649526c
Certificate serial: 019D28F30B8398C6D093E95D0E2D8F7539FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xnms1O5A_aQwIqLJZCsHHaZJUmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
Manifest number: 10B9
Signing time: Thu 26 Mar 2026 07:01:49 +0000
Manifest this update: Thu 26 Mar 2026 07:01:49 +0000
Manifest next update: Fri 27 Mar 2026 07:01:49 +0000
Files and hashes: 1: KFfWDSyefK-MQgLPQX4mXrxUP9w.roa (hash: xg8GFoXkHuiLiC0QA69V1kKQ1AiTwnUuPNFXkPnRjTY=)
2: Xnms1O5A_aQwIqLJZCsHHaZJUmw.crl (hash: lQsUUKTok0iFgbMVrOJysCfXRRQKl61xpCNglRoVbjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xnms1O5A_aQwIqLJZCsHHaZJUmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:0b:83:98:c6:d0:93:e9:5d:0e:2d:8f:75:39:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e79acd4ee40fda43022a2c9642b071da649526c
Validity
Not Before: Mar 26 07:01:49 2026 GMT
Not After : Mar 27 07:01:49 2026 GMT
Subject: CN=0f6493826d94f8930b3bd32fd54faf756d8a6719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:24:c1:aa:e7:24:66:6c:9b:a6:7c:fb:16:6c:
75:4a:79:a1:bc:7d:7d:c8:c8:b2:18:7f:a5:51:80:
f3:bb:21:6b:b3:14:f0:01:fb:1b:5d:bc:7e:95:99:
b4:43:bf:ce:1f:18:8a:89:85:d0:10:1c:fd:4e:d5:
06:5c:1f:8c:50:52:01:f3:56:93:e2:6a:a9:47:77:
6d:20:76:35:53:9c:7d:ee:39:7a:20:41:c0:c3:4d:
11:8d:76:de:cf:5b:de:da:40:84:f3:15:9a:2f:ad:
dd:ae:0c:5c:d7:0b:38:59:1c:02:c6:1a:95:15:82:
ad:14:5b:f9:bb:92:73:36:bb:af:56:bc:52:a6:78:
09:83:d8:6c:03:ae:c9:02:f3:7d:c9:ec:dc:ea:c5:
ad:98:79:df:a0:03:72:1e:5f:5b:a0:12:b0:00:77:
ad:0a:b6:3e:34:bc:48:5a:49:42:23:49:d3:30:b6:
29:bf:a6:d4:68:57:81:e9:35:55:68:48:c4:c7:4b:
3c:1b:dc:25:be:ee:ec:5e:bc:46:0d:4a:41:9b:b0:
21:96:fe:b2:81:8d:58:db:7b:cd:2c:5e:14:21:a2:
e6:77:36:c6:e5:e2:39:77:02:17:de:89:94:1b:d1:
b6:c4:02:72:d6:a6:77:5e:61:51:a7:be:fe:39:47:
89:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:64:93:82:6D:94:F8:93:0B:3B:D3:2F:D5:4F:AF:75:6D:8A:67:19
X509v3 Authority Key Identifier:
keyid:5E:79:AC:D4:EE:40:FD:A4:30:22:A2:C9:64:2B:07:1D:A6:49:52:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnms1O5A_aQwIqLJZCsHHaZJUmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:94:07:f6:60:da:85:63:dc:59:5c:55:c5:dd:31:47:9b:6d:
ba:1e:51:7a:3b:63:a5:94:70:e7:6f:44:cf:aa:9f:a2:7e:e5:
85:b6:ae:41:2c:8f:d7:14:41:d0:53:ea:35:4d:ca:12:8c:6f:
eb:72:cf:d1:b8:82:79:38:fa:20:5b:5a:fb:0f:c7:3b:c1:02:
b8:3b:1a:fb:5d:64:e2:4f:b4:69:90:5f:89:91:2e:ce:08:45:
ca:45:eb:f3:2f:87:2e:ef:15:f3:a8:1c:bc:f5:8d:c3:0f:e8:
09:3f:e0:a6:2c:51:4c:9b:bc:a4:6d:23:9c:36:9f:d2:bd:20:
e7:f4:18:5f:d9:e2:13:6a:4b:b2:d7:65:0b:05:ca:00:a2:6a:
06:c1:df:37:cd:b7:62:4e:5c:ac:63:74:34:34:00:31:6a:e4:
46:1f:9e:bb:45:ca:03:d0:73:4b:8e:56:16:00:ab:f6:34:7a:
fe:5c:3b:c2:a4:00:7f:5b:26:2d:5e:35:39:b4:e4:50:c5:23:
0a:58:41:e8:76:64:d3:15:27:30:b5:c2:6f:d4:19:85:7f:59:
dd:de:8e:73:bb:28:a0:a4:81:d7:98:10:29:a8:f9:a4:c9:9a:
af:d4:ba:f7:63:ae:53:10:7d:a0:42:6c:de:38:f9:42:94:6b:
fa:a6:28:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:41:21 2026 by rpki-client