Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft
File: 1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft (raw, json)
Hash identifier: ctqlgkP4gIFW8//x9tfO7HYcN4g1unFFIMD+VwICYi8=
Subject key identifier: 2C:0B:8D:F1:00:8B:A0:65:9C:76:D0:9F:F3:52:AC:92:09:11:2E:A7
Authority key identifier: F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35
Certificate issuer: /CN=f970049cba7f39aeed31d65313c7b953f3fda135
Certificate serial: 019D270458DBBB2E4E239145CB9F154E1C63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft
Manifest number: 16B5
Signing time: Wed 25 Mar 2026 22:01:29 +0000
Manifest this update: Wed 25 Mar 2026 22:01:29 +0000
Manifest next update: Thu 26 Mar 2026 22:01:29 +0000
Files and hashes: 1: 1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl (hash: 6usoM3L4nqyiTow98gOCFLXRJ197s041sO9cx++yHb4=)
2: 9O4dKfnZgTgqWB_iiNETLsmvwXY.roa (hash: B3+44Wl16VVGNQlYDiIt0cK5DguWkC82Gzjl2M8qljQ=)
3: 9wP7mpH_B0PGwWv5_AlRe4xldiA.roa (hash: zYLWTc75j+s7gKIa+ebYI+LbuI7qKTL5YSAgcKHFymE=)
4: HUC0yUJUDgqy27kx_QVtwVTYAPk.roa (hash: CyeQ43VG6tD5RMnxhr0UsmCBVHZpmO9VtiFMAauD0/c=)
5: OuUlmrN0axWfSqeYSWZ3VFyR9gQ.roa (hash: QKGtXpsKu8AS09muhwUu1IIbo7MS1z9kgfO0GKSJA9I=)
6: UgGCU0bNSuQOEElr01rlVK8sU_Q.roa (hash: AacHgDrHZ+OvhSoYCRcjSoSerNRKqDKHnF8VQ9u1BE8=)
7: Wp-glj4jLDxWifTRA7ilsUKXI0w.roa (hash: vAjHOys3Ggc83LnsEZEpKy5P5ZSFbz3QKqyxgLEsEXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:58:db:bb:2e:4e:23:91:45:cb:9f:15:4e:1c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f970049cba7f39aeed31d65313c7b953f3fda135
Validity
Not Before: Mar 25 22:01:29 2026 GMT
Not After : Mar 26 22:01:29 2026 GMT
Subject: CN=2c0b8df1008ba0659c76d09ff352ac9209112ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e5:12:64:18:03:6c:4f:6d:c3:57:c3:1a:db:
4b:98:99:e8:41:c4:66:38:04:bc:a3:72:96:cc:dd:
a2:c3:bf:88:40:2c:e0:b9:d8:a8:85:33:cb:23:02:
f1:2f:9b:7b:c3:8a:fc:5a:d0:e4:7e:b9:f8:ec:16:
5b:24:1f:a4:d1:0a:bd:ed:06:fa:2f:54:e1:ae:d4:
7a:09:82:5e:86:18:52:76:f7:bd:54:27:c1:23:df:
f2:7c:2e:24:e6:54:b2:e7:78:d1:a3:b2:e9:1c:f7:
88:f4:d8:62:d7:ce:38:64:75:02:56:60:d2:f7:43:
d3:5c:1d:cd:e1:c7:92:b1:f7:c0:98:d1:df:96:0d:
8a:72:bf:be:31:25:07:2d:d6:f9:7b:08:d4:66:72:
fa:0c:fe:e2:b4:d9:5c:a0:91:54:b8:3a:e4:05:e2:
37:6a:0f:7d:ca:9a:96:ae:f6:ec:a3:2c:74:8a:13:
5e:6e:53:76:1b:6b:bd:1d:a0:60:ea:3a:ef:6e:47:
81:b1:c7:05:f0:b8:7e:3b:5d:03:87:2e:d9:bb:55:
1c:b5:e1:0f:d3:c1:14:88:74:14:b5:db:7f:5f:60:
2c:31:03:72:ac:6c:c6:0f:fa:f2:43:33:75:b1:50:
cd:ee:08:7c:a0:3e:36:79:05:6b:81:b9:2d:a8:39:
03:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0B:8D:F1:00:8B:A0:65:9C:76:D0:9F:F3:52:AC:92:09:11:2E:A7
X509v3 Authority Key Identifier:
keyid:F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ac:03:c2:fd:be:dd:f0:2a:50:06:68:d9:5d:0f:72:b4:6d:
0e:3b:40:ad:71:fc:ca:16:62:cb:9f:f0:dd:0d:92:13:eb:2d:
a1:53:89:b3:f0:e3:27:cf:2d:13:c6:cb:3e:9a:35:59:d8:51:
f8:ff:eb:e9:43:e8:f1:e1:b9:98:25:09:d7:03:1b:77:02:2a:
b3:a5:20:4d:c7:61:db:06:47:f0:02:76:eb:fd:0f:3f:61:f9:
58:29:71:7a:d5:11:33:4d:dc:06:9a:70:6a:39:ff:7c:f8:36:
0d:57:df:cd:14:96:66:59:67:41:ea:fc:45:7b:ff:e9:2d:8c:
0b:c6:49:ab:d3:e8:ac:a6:ba:ce:34:12:54:4e:c7:fb:8f:ec:
f3:71:6e:fe:93:08:5d:16:89:81:17:93:d8:79:3c:02:b2:c2:
c0:9e:33:6c:02:19:b1:c1:99:e1:ac:50:89:7a:8e:a2:33:4b:
cd:4b:ad:56:d6:8a:dc:cf:94:07:9b:70:36:82:c5:98:70:04:
6a:eb:20:bd:e7:62:8a:e4:28:40:de:08:69:a3:3f:4e:2e:6f:
45:13:3c:9d:b8:54:3b:a2:f8:a6:b0:10:97:02:65:83:5c:08:
61:03:27:c9:1e:d6:ad:aa:64:53:f7:00:f9:50:64:70:d4:88:
98:ea:b0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:31:25 2026 by rpki-client