Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
File: xYe5zadWA-sNnjdxZ79-DI5EBAM.mft (raw, json)
Hash identifier: 4LvyHWN5Xw6K01eqDjUwhtTNa/ZA+g85+3xrttQ4Ff4=
Subject key identifier: F4:34:09:FB:3E:36:55:54:01:E6:83:6A:6F:47:74:4B:C3:F2:D8:AC
Authority key identifier: C5:87:B9:CD:A7:56:03:EB:0D:9E:37:71:67:BF:7E:0C:8E:44:04:03
Certificate issuer: /CN=c587b9cda75603eb0d9e377167bf7e0c8e440403
Certificate serial: 019D27E02296F06661237E78CB60A64C08CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
Manifest number: 11B4
Signing time: Thu 26 Mar 2026 02:01:33 +0000
Manifest this update: Thu 26 Mar 2026 02:01:33 +0000
Manifest next update: Fri 27 Mar 2026 02:01:33 +0000
Files and hashes: 1: ZmvGPOp_1qrvVkC55KMPvnEbYj8.roa (hash: PAyaFkNXlsk7gSyWBxSONv2o7kwM1R1bojPLp2ngilE=)
2: xYe5zadWA-sNnjdxZ79-DI5EBAM.crl (hash: GvSTKjXAmH3Nol4aM54/1tQMKQoHYDjYd4JMVkXYOuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:22:96:f0:66:61:23:7e:78:cb:60:a6:4c:08:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c587b9cda75603eb0d9e377167bf7e0c8e440403
Validity
Not Before: Mar 26 02:01:33 2026 GMT
Not After : Mar 27 02:01:33 2026 GMT
Subject: CN=f43409fb3e36555401e6836a6f47744bc3f2d8ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5b:6e:45:bf:d5:5f:29:cf:9a:d9:74:54:97:
ae:0d:f5:bc:2f:4c:c8:fd:97:92:10:b3:cc:67:43:
64:f8:71:4f:28:3e:72:64:58:2b:a9:a9:46:83:73:
88:3e:4f:d5:02:69:f9:48:5c:2e:55:a1:de:f6:62:
52:e1:cd:32:1e:de:5d:67:62:6e:b4:24:15:9f:3d:
9c:17:23:74:4c:af:18:ec:f9:13:54:94:24:0c:09:
f7:39:de:7e:92:95:e8:84:d8:3e:f2:15:8a:46:cf:
48:95:e0:69:03:83:98:ee:01:9b:8a:8f:d3:db:e1:
02:92:ff:fd:de:56:16:ca:60:e0:22:0d:b4:da:0e:
c0:3c:d2:63:ab:55:3f:b5:d6:b7:83:b5:de:25:2d:
b2:37:67:fd:f2:f4:68:35:91:06:94:0b:22:01:3e:
df:8c:ab:88:cc:66:cf:38:c6:6f:db:fe:b3:d4:f2:
21:cb:5e:32:98:f7:6b:ad:80:fb:b0:ba:88:b7:a5:
bb:ae:04:2b:42:3b:ae:3d:28:dd:75:57:35:a3:8a:
bc:b1:ad:7e:6c:d0:65:9a:34:7d:e5:aa:bd:60:0c:
3f:72:6a:15:71:42:1a:a6:58:16:22:1d:31:9d:8d:
20:5d:f9:2b:4c:9e:6a:3a:5a:44:2d:08:bb:1e:d0:
18:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:34:09:FB:3E:36:55:54:01:E6:83:6A:6F:47:74:4B:C3:F2:D8:AC
X509v3 Authority Key Identifier:
keyid:C5:87:B9:CD:A7:56:03:EB:0D:9E:37:71:67:BF:7E:0C:8E:44:04:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:6c:e1:e6:8a:a9:7c:41:1e:12:38:e8:4b:94:ca:92:f7:c1:
57:f6:c1:4e:1d:25:cd:21:e0:aa:c1:77:88:17:93:86:b6:c3:
68:23:27:51:28:6a:18:db:1a:20:bf:79:52:13:96:f0:b3:dc:
04:6d:87:41:a9:6d:e9:71:fd:ec:18:de:6a:6d:a3:db:ae:54:
60:6f:90:a9:4d:b1:6c:ed:8f:d1:5d:7f:d9:37:9e:68:22:f5:
ae:82:f0:10:97:c1:cf:c3:12:30:83:d1:8e:8e:d8:74:6e:19:
d6:59:9a:b3:3a:aa:35:ff:8e:96:c9:24:cf:61:c9:95:0c:6e:
f9:43:8e:17:a7:c5:cc:3c:16:65:5c:13:62:24:ad:ba:16:42:
67:1d:87:3b:11:60:e6:44:66:f6:fa:e5:11:c2:69:62:42:42:
1a:5a:5f:b8:24:3f:cf:de:d7:8f:e4:0d:34:35:d1:20:e2:66:
2e:55:eb:8f:cb:57:72:a5:3e:5c:cc:3f:5e:b6:f8:11:8e:1b:
9e:80:19:c0:de:fb:a4:87:56:d4:6f:db:29:f0:5b:0f:36:3f:
c1:2c:06:dd:5c:10:2f:e8:f3:80:1d:4e:c2:2a:0b:8d:af:fa:
82:e0:94:8b:f3:b3:ec:66:9c:94:ae:6a:40:53:40:3f:f6:80:
3b:a8:c1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:51:53 2026 by rpki-client