Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
File: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft (raw, json)
Hash identifier: HmA43OPx+dy647gYBIPckD4HzIE8rQSIqmN3uv3/ytQ=
Subject key identifier: AE:E8:4E:4E:13:21:2D:D6:EF:A5:F8:F5:8B:C4:39:7C:57:9C:1A:19
Authority key identifier: FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2
Certificate issuer: /CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
Certificate serial: 019D26CD16C13619185C6B12A6668B3AC8DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
Manifest number: 104F
Signing time: Wed 25 Mar 2026 21:01:08 +0000
Manifest this update: Wed 25 Mar 2026 21:01:08 +0000
Manifest next update: Thu 26 Mar 2026 21:01:08 +0000
Files and hashes: 1: XfPxNqw04f4ysUNycil0EQofl1M.roa (hash: JClRzQorRQbXDP0L/PC7A7JxisEaLLPV1aRUiLTnBv8=)
2: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl (hash: XQHFv215EXBQ0Mfi4QTL/p6sY7Thm8PEaaUbw1qsTAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:16:c1:36:19:18:5c:6b:12:a6:66:8b:3a:c8:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
Validity
Not Before: Mar 25 21:01:08 2026 GMT
Not After : Mar 26 21:01:08 2026 GMT
Subject: CN=aee84e4e13212dd6efa5f8f58bc4397c579c1a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:63:6a:83:cd:4f:2f:80:d2:97:be:3e:28:8f:
9e:fc:09:b3:3a:2f:18:1b:48:40:25:7c:a8:7e:93:
9a:ce:eb:b4:e7:1b:09:b1:aa:10:a4:9a:56:71:d6:
fc:9a:5a:df:89:a3:47:12:31:3d:23:ec:b3:4d:a8:
42:8e:69:99:52:68:39:cb:97:24:c2:53:56:61:10:
a5:10:44:ee:8b:48:35:74:22:81:ae:98:58:f6:9f:
5d:b7:b2:4b:c7:2b:a7:77:4c:27:03:d0:94:a4:31:
7b:7b:73:2a:db:d5:38:f1:3c:9f:15:17:b8:89:4b:
d5:a2:91:58:5d:d1:3d:8e:e5:fc:ec:52:f4:04:76:
da:a6:37:4e:09:2f:e7:74:9e:54:bc:4b:4f:f9:d0:
7b:d7:fc:d1:09:c7:54:df:2e:c6:f2:73:46:7f:f3:
68:28:c9:88:11:02:e9:07:e6:f0:5a:b5:67:21:01:
88:a6:b3:27:49:5f:fc:c3:34:16:8b:a5:c7:e8:34:
70:a9:5c:23:ef:49:cc:2e:12:fc:da:12:5b:93:92:
bd:6e:5f:4c:34:9f:ea:f5:9c:25:2d:1c:3b:ef:80:
b9:2f:8f:68:6e:f3:01:eb:83:dd:86:12:bf:03:8a:
84:97:b6:a9:60:5e:16:d9:21:18:4e:db:38:c6:6b:
29:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E8:4E:4E:13:21:2D:D6:EF:A5:F8:F5:8B:C4:39:7C:57:9C:1A:19
X509v3 Authority Key Identifier:
keyid:FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:aa:21:eb:13:7b:e3:63:52:7a:40:fa:66:2e:d4:14:ee:a7:
44:1f:a8:e3:8a:84:e9:ae:8d:2e:c2:b8:7e:34:93:0d:6b:b2:
0e:1e:5b:c9:a6:ad:38:c8:1b:c1:65:99:4e:c3:99:3d:7c:49:
f2:87:7d:db:35:d7:79:d0:f3:25:b0:83:9c:05:d5:87:3e:b9:
fb:ce:b4:8a:4d:df:37:10:40:cb:03:b6:28:5b:4d:fe:6d:e1:
94:cc:75:e1:d5:2a:39:33:75:86:99:29:0d:a5:8f:fb:61:fd:
8a:36:5f:f6:66:ce:2d:f6:db:a5:50:1e:56:03:6e:15:7f:b9:
3d:7c:e2:3c:92:d8:b6:18:a7:7e:7b:a3:d8:f8:de:b6:c3:92:
1a:ce:0d:78:b8:1e:5b:da:fa:99:a1:95:48:07:7e:7e:5e:ef:
54:5b:c9:41:91:b8:24:00:b8:ea:35:e0:a6:0b:15:1a:74:7f:
54:de:0c:79:ad:78:73:df:07:70:9c:98:f5:44:54:bb:12:1f:
cf:e5:af:44:4c:60:d8:af:58:23:fe:04:e0:38:16:1c:49:b1:
58:a0:9c:ea:5b:07:80:f8:f1:fb:8e:5a:1c:62:cc:c5:42:e9:
ac:6b:19:59:0d:5e:fb:71:1e:3e:7a:cf:11:5f:cb:19:b0:95:
71:9a:68:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:25 2026 by rpki-client