Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft
File: 1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft (raw, json)
Hash identifier: jmav2lMv4WmTQpZL+WowTaMQrrNIIcD7u16RB8i5QgA=
Subject key identifier: 16:87:FC:F2:7A:D7:3B:14:47:A1:0C:06:BB:F5:F6:E3:66:79:F4:23
Authority key identifier: F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35
Certificate issuer: /CN=f970049cba7f39aeed31d65313c7b953f3fda135
Certificate serial: 019D28F2CC8F596506BDAC7CE2850151846E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft
Manifest number: 16B6
Signing time: Thu 26 Mar 2026 07:01:33 +0000
Manifest this update: Thu 26 Mar 2026 07:01:33 +0000
Manifest next update: Fri 27 Mar 2026 07:01:33 +0000
Files and hashes: 1: 1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl (hash: JIimDVx+1I4c8mTQb86FVxwkOQJL1+cmQW1V8sAeUSs=)
2: 9O4dKfnZgTgqWB_iiNETLsmvwXY.roa (hash: B3+44Wl16VVGNQlYDiIt0cK5DguWkC82Gzjl2M8qljQ=)
3: 9wP7mpH_B0PGwWv5_AlRe4xldiA.roa (hash: zYLWTc75j+s7gKIa+ebYI+LbuI7qKTL5YSAgcKHFymE=)
4: HUC0yUJUDgqy27kx_QVtwVTYAPk.roa (hash: CyeQ43VG6tD5RMnxhr0UsmCBVHZpmO9VtiFMAauD0/c=)
5: OuUlmrN0axWfSqeYSWZ3VFyR9gQ.roa (hash: QKGtXpsKu8AS09muhwUu1IIbo7MS1z9kgfO0GKSJA9I=)
6: UgGCU0bNSuQOEElr01rlVK8sU_Q.roa (hash: AacHgDrHZ+OvhSoYCRcjSoSerNRKqDKHnF8VQ9u1BE8=)
7: Wp-glj4jLDxWifTRA7ilsUKXI0w.roa (hash: vAjHOys3Ggc83LnsEZEpKy5P5ZSFbz3QKqyxgLEsEXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:cc:8f:59:65:06:bd:ac:7c:e2:85:01:51:84:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f970049cba7f39aeed31d65313c7b953f3fda135
Validity
Not Before: Mar 26 07:01:33 2026 GMT
Not After : Mar 27 07:01:33 2026 GMT
Subject: CN=1687fcf27ad73b1447a10c06bbf5f6e36679f423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6c:65:9b:55:c1:d1:42:89:4b:27:6d:60:88:
2d:5e:0f:15:3f:3a:09:2f:37:71:9d:82:39:7d:0f:
df:52:87:f3:a7:86:55:4e:01:c3:07:02:9b:b5:c0:
89:18:91:cb:f6:a7:22:09:06:79:98:9a:b4:f5:8c:
e0:1f:4a:2f:70:3c:6b:66:55:75:e9:c8:a9:cf:3c:
25:59:78:4a:4e:f4:0d:b4:45:e4:c9:05:34:b3:33:
e3:93:44:43:ed:71:43:21:e3:70:c8:1e:91:75:d8:
5b:37:35:78:9b:47:9a:a0:7b:88:25:7d:07:bd:7a:
0f:c1:dc:a2:50:4f:ef:e8:f5:45:17:31:ae:2e:7f:
a3:9a:25:5e:8d:db:4a:60:b4:73:f7:2e:1d:17:7f:
f3:05:6b:17:83:27:fb:8a:6e:1d:83:4b:4c:fb:70:
36:5d:55:9d:4f:83:4a:7a:7e:86:8a:6b:12:ad:b9:
7e:08:f9:81:b2:8b:f9:b6:0a:5e:74:30:c9:d3:ff:
86:e8:f5:f2:7d:a3:3f:58:de:32:65:1e:3c:03:e7:
10:59:1e:77:93:ae:6a:d4:a0:9a:55:be:55:a5:11:
07:5f:d3:6f:04:1f:f2:5f:4b:db:0d:e3:52:04:45:
34:93:14:dd:4a:42:c5:5a:75:bb:b9:53:68:fa:3e:
c4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:87:FC:F2:7A:D7:3B:14:47:A1:0C:06:BB:F5:F6:E3:66:79:F4:23
X509v3 Authority Key Identifier:
keyid:F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:e8:1f:a9:5a:8d:0d:3e:8d:2c:b8:94:9d:ca:4f:23:cb:db:
bb:5f:18:1c:ab:17:fa:e2:fb:d5:6c:be:a4:3b:e8:52:2f:40:
8f:50:78:3e:96:0b:13:33:76:3e:02:c6:92:a0:cf:3c:15:3e:
70:82:0f:d4:59:e0:dd:c7:bb:d5:f5:ad:71:e3:4e:82:07:54:
c9:82:5c:44:0a:d4:80:be:ff:17:e5:1c:34:b3:73:19:5e:ef:
74:bf:74:99:f6:95:89:a2:db:46:b2:76:1c:e9:b0:ce:83:7f:
24:5f:f6:31:79:66:4f:ca:25:d4:90:52:d4:38:9e:27:81:19:
3d:e1:42:07:fa:51:84:a3:93:f5:b4:22:ac:9d:24:ff:1b:2d:
9c:11:66:ce:3e:d9:1a:6b:77:cb:3d:59:59:4c:7d:e8:92:48:
a3:c8:3d:20:95:41:a5:0b:57:cd:48:f8:65:60:7e:6a:d1:ed:
15:d9:1a:41:ee:90:58:8e:0e:4d:20:10:c7:cc:c8:88:58:f9:
75:7e:22:24:10:ba:ca:96:7a:74:6c:e6:1c:9a:4e:9d:b4:3f:
1c:9b:fa:f0:f8:f7:0c:55:b3:18:33:95:a6:69:90:f3:f5:df:
07:04:7e:13:e9:2d:6a:4c:41:34:af:08:8a:81:34:c6:27:02:
f5:1a:81:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:54:22 2026 by rpki-client