Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
File: XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft (raw, json)
Hash identifier: 5m1X91TQ/33Hj/zs2mimTn6hXcb9QcLEjy8V55TGBFA=
Subject key identifier: B8:BF:EC:33:D8:7B:74:76:C4:ED:96:84:DE:D2:E2:24:51:2E:86:F6
Authority key identifier: 5C:B8:13:E0:9C:99:55:E0:BD:A7:04:1F:83:73:A8:FC:5D:AE:6B:9D
Certificate issuer: /CN=5cb813e09c9955e0bda7041f8373a8fc5dae6b9d
Certificate serial: 019D2BBC1597A8FA0E637A1DCBE2D115D16E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
Manifest number: 0EB4
Signing time: Thu 26 Mar 2026 20:00:39 +0000
Manifest this update: Thu 26 Mar 2026 20:00:39 +0000
Manifest next update: Fri 27 Mar 2026 20:00:39 +0000
Files and hashes: 1: XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl (hash: 05biXHSGz5G/Ik0LX6nxWg9nRW7jB1bF2UdjpJXHA4o=)
2: z7DQCTMfSpxYNEqc8NdY7ztXAQY.roa (hash: 0f3C1JOESj8A6E71R4wmJYEbq8aExFFVXotwYdP1hio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:bc:15:97:a8:fa:0e:63:7a:1d:cb:e2:d1:15:d1:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb813e09c9955e0bda7041f8373a8fc5dae6b9d
Validity
Not Before: Mar 26 20:00:39 2026 GMT
Not After : Mar 27 20:00:39 2026 GMT
Subject: CN=b8bfec33d87b7476c4ed9684ded2e224512e86f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:54:fa:2f:02:5f:77:b9:27:f4:27:fe:cb:f8:
66:5b:d9:12:90:a3:2b:75:a3:0f:4f:94:48:c7:58:
f3:22:f2:d5:56:9e:e9:30:55:fc:ce:ca:f5:1d:a3:
c8:89:6b:cf:65:f9:3d:a4:03:0c:ff:9a:23:89:f7:
b6:2b:57:b7:67:a4:2c:45:c6:b5:eb:f1:c2:cc:37:
68:40:24:c4:43:b5:7f:47:5e:4a:66:1b:c8:cb:05:
f0:8c:5b:6b:d8:e2:34:b9:2c:d7:65:66:f4:30:0c:
fd:18:2f:35:bb:39:bf:b6:23:80:80:51:55:16:77:
02:da:d9:d5:ff:de:a3:1b:fb:95:be:a9:74:09:09:
72:fd:40:a6:c9:78:cb:cb:1e:bf:cc:0c:23:20:ad:
61:08:d1:ff:b1:9a:35:6e:f1:0b:1d:5b:c6:da:0c:
4b:46:61:c8:d3:7e:b7:8d:c8:f1:c1:b8:0a:b6:eb:
25:b0:b0:52:14:7e:e0:90:ee:77:4a:b1:79:2b:39:
f5:0f:a0:2f:02:ff:00:5c:4b:9c:45:01:09:66:e6:
df:92:9b:fb:76:7c:39:be:d1:46:9d:2c:f4:fa:a0:
1f:a2:3d:76:a1:98:dd:f4:67:d9:66:00:d7:f2:a0:
e9:db:55:f4:e8:66:41:45:93:db:be:ed:14:42:ad:
f7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BF:EC:33:D8:7B:74:76:C4:ED:96:84:DE:D2:E2:24:51:2E:86:F6
X509v3 Authority Key Identifier:
keyid:5C:B8:13:E0:9C:99:55:E0:BD:A7:04:1F:83:73:A8:FC:5D:AE:6B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:7d:52:5e:c4:eb:60:89:b9:41:db:73:a0:29:8f:88:af:8b:
64:ff:fc:16:c6:03:63:ae:0e:b0:d7:98:68:42:d1:d3:b7:28:
ae:ba:9e:ee:57:22:b8:69:1f:ee:f9:f0:da:8d:c6:51:0f:f7:
c5:bc:d7:a5:d9:3e:1c:ce:d4:33:27:46:2d:7d:fa:d5:5b:7c:
b6:87:fa:de:b0:0f:9e:96:a3:d9:3c:8f:01:f7:d5:f5:6d:61:
75:ee:8d:a4:e9:01:83:b0:b7:60:2b:b2:ac:62:15:7a:f3:6c:
52:4d:73:77:4d:19:ee:52:c0:63:c2:e8:76:cf:6f:a3:3b:f1:
64:eb:ea:6b:5e:c5:61:83:fc:b5:c2:11:25:17:f7:ff:fc:38:
7d:d6:35:8f:02:16:e0:24:57:78:db:81:85:32:2f:ae:64:1a:
e5:30:e1:84:4c:56:61:78:82:00:c8:ef:56:58:89:0b:b2:7b:
03:bd:2e:ca:e5:99:e7:9f:dc:5f:1e:70:4c:76:c3:23:24:24:
89:15:6d:d9:07:77:54:d7:99:44:5f:2a:64:cc:8f:ca:0b:37:
cb:c0:45:87:72:bb:e7:27:e5:02:d7:41:ed:0c:d3:61:ec:08:
27:4d:6f:00:7b:1a:b5:e9:d8:18:60:75:f0:e3:33:09:81:c3:
0e:0e:97:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:48:13 2026 by rpki-client