Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
File: XinALSYfkT6lv4PCvHwzQUpCvMo.mft (raw, json)
Hash identifier: 807Mc6mo7+PuM3H5oTSOndvvoR7zwZsH8DnKJNJJLDA=
Subject key identifier: FA:E4:45:EB:51:A4:02:49:80:8F:2B:C4:9F:71:49:3D:EC:90:50:4D
Authority key identifier: 5E:29:C0:2D:26:1F:91:3E:A5:BF:83:C2:BC:7C:33:41:4A:42:BC:CA
Certificate issuer: /CN=5e29c02d261f913ea5bf83c2bc7c33414a42bcca
Certificate serial: 019D26CCBE1A6925E43DCD8A5DDFDA44224C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
Manifest number: 0F6E
Signing time: Wed 25 Mar 2026 21:00:45 +0000
Manifest this update: Wed 25 Mar 2026 21:00:45 +0000
Manifest next update: Thu 26 Mar 2026 21:00:45 +0000
Files and hashes: 1: XinALSYfkT6lv4PCvHwzQUpCvMo.crl (hash: qZK8iUHegzDJcgFtfQB9tLAM4Bhd5AHE54j8wG48AMk=)
2: _4iBeTs5cxfGTAtYktUUrEwV_VA.roa (hash: N664oCzOfQ38VT4ESVgwevGf4XPQ0H5eTMOYBDJq9m0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:be:1a:69:25:e4:3d:cd:8a:5d:df:da:44:22:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e29c02d261f913ea5bf83c2bc7c33414a42bcca
Validity
Not Before: Mar 25 21:00:45 2026 GMT
Not After : Mar 26 21:00:45 2026 GMT
Subject: CN=fae445eb51a40249808f2bc49f71493dec90504d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1e:6f:90:dd:6c:85:ca:16:a3:89:91:ee:05:
df:50:08:4f:7a:5b:9f:45:a2:97:13:4c:5e:d2:ab:
0b:98:54:a5:11:ed:cf:5f:51:8a:b5:05:f5:03:04:
ed:1a:62:31:ac:ba:2d:1a:03:f6:a3:1a:0d:61:cb:
a2:17:6b:ff:7e:b7:2c:1d:91:31:f5:be:0e:94:12:
e4:19:c0:43:bf:b2:56:44:b7:45:dc:82:af:d6:9b:
e6:f1:b2:b4:03:af:2d:6c:10:f5:ff:8e:3d:67:80:
1c:bd:47:9d:40:9f:5b:5b:9a:32:99:1d:ff:35:1e:
30:0a:a8:39:4b:6b:0f:d9:bf:9a:4f:83:de:a0:e8:
10:b2:31:ba:e4:6a:c0:e5:af:b0:f8:30:2a:5d:e5:
78:25:32:c1:1f:ff:05:9d:52:df:03:e2:2a:d3:21:
f3:f5:8c:e1:6a:bd:e3:f8:73:4a:00:49:09:df:bd:
aa:a9:20:1b:95:02:00:c5:03:1d:9d:ae:26:c8:48:
7e:d3:d4:d1:07:06:6d:d4:38:ed:0d:69:57:51:29:
fb:ac:2f:f3:60:11:5c:7b:09:b6:99:57:65:81:d9:
c9:62:13:a3:79:a7:20:5c:f9:e8:5d:1a:55:76:d1:
de:a2:f3:ca:6a:f7:1d:60:c5:18:98:71:ed:99:c1:
31:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E4:45:EB:51:A4:02:49:80:8F:2B:C4:9F:71:49:3D:EC:90:50:4D
X509v3 Authority Key Identifier:
keyid:5E:29:C0:2D:26:1F:91:3E:A5:BF:83:C2:BC:7C:33:41:4A:42:BC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:6f:bc:10:c7:39:ee:07:18:d5:56:54:a6:e7:c7:1a:cc:a7:
18:65:8a:eb:17:a0:95:90:85:bc:98:16:2b:2d:19:fd:a4:4a:
a5:5b:49:b3:5d:a7:7d:e5:9b:c6:1a:d0:15:63:49:0d:7c:1a:
09:6b:e6:1c:2b:07:78:2c:c8:de:8e:ce:7b:32:67:35:c5:82:
25:d8:a0:68:fd:de:57:7c:12:06:83:0d:d2:ce:d3:13:08:e6:
30:b1:04:61:f0:37:ce:59:c4:fc:89:77:f7:1f:09:12:93:84:
97:c4:6f:c0:fc:91:b9:65:72:4d:a3:30:20:e7:83:86:a1:5e:
3c:1e:01:94:6d:29:65:f3:f8:90:e8:c0:1d:d0:e1:4f:b8:e3:
54:b7:cd:76:01:9a:bf:42:56:a3:d9:38:2d:f1:4a:b8:35:2e:
28:45:3f:9e:05:3f:f6:d9:b1:8d:7c:3c:ab:11:a5:f1:6f:02:
49:e3:47:42:51:88:93:3d:f6:14:de:e7:40:3a:99:57:1a:1b:
03:ad:86:5f:1a:69:6d:77:dd:aa:bb:78:78:c6:68:1a:57:09:
db:34:7d:2c:2d:1c:00:05:a5:ed:57:ce:cd:98:25:80:38:7e:
4c:26:32:37:cb:0a:5f:2a:99:52:32:21:b5:58:d2:c2:cb:12:
b4:e7:41:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:16 2026 by rpki-client