Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.mft
File: XNN5ztzcIPCHXEsIuUtBFhs-jAM.mft (raw, json)
Hash identifier: HCEIpOadrQKhtJDhBEdKbl92/cpQXqJKq74aDERbvIc=
Subject key identifier: 75:20:AC:5A:42:BD:89:57:51:96:DB:AB:03:05:17:A8:99:DA:1D:A6
Authority key identifier: 5C:D3:79:CE:DC:DC:20:F0:87:5C:4B:08:B9:4B:41:16:1B:3E:8C:03
Certificate issuer: /CN=5cd379cedcdc20f0875c4b08b94b41161b3e8c03
Certificate serial: 019D2A3B69BA45A7B0F9B22E0C13B421B707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNN5ztzcIPCHXEsIuUtBFhs-jAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.mft
Manifest number: 1005
Signing time: Thu 26 Mar 2026 13:00:29 +0000
Manifest this update: Thu 26 Mar 2026 13:00:29 +0000
Manifest next update: Fri 27 Mar 2026 13:00:29 +0000
Files and hashes: 1: OUhIXcYKuJwX-1gGqSyC-ytysk8.roa (hash: SNKMZI12Bd30LXMDKulFyeiCL2F4p+Ej66EZURTKN18=)
2: XNN5ztzcIPCHXEsIuUtBFhs-jAM.crl (hash: zHHXkSUgxjyLSWnsq+aNHHnXpzu/hEoWby03Ya1GtTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNN5ztzcIPCHXEsIuUtBFhs-jAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:69:ba:45:a7:b0:f9:b2:2e:0c:13:b4:21:b7:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd379cedcdc20f0875c4b08b94b41161b3e8c03
Validity
Not Before: Mar 26 13:00:29 2026 GMT
Not After : Mar 27 13:00:29 2026 GMT
Subject: CN=7520ac5a42bd89575196dbab030517a899da1da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:33:fd:88:8b:cd:1e:2f:c9:a2:c0:ac:60:ae:
b9:4e:3a:4a:21:7d:c4:a4:31:5e:21:24:8d:09:23:
00:58:d9:6d:29:26:17:fe:77:00:65:a1:2d:6e:97:
56:83:c3:e7:bc:e1:32:a6:b2:37:fa:b1:53:0d:41:
5f:e1:62:fe:0c:83:86:19:23:dd:4d:f4:41:91:66:
26:bd:de:17:e4:e0:a1:f2:db:eb:ea:c1:7c:72:3c:
84:76:8d:c9:ee:a5:2f:38:18:c5:15:f4:48:76:17:
0c:b4:7c:65:ea:94:1b:b4:27:fa:4a:ac:98:02:06:
e3:4b:09:74:03:b7:ed:e1:e0:f1:06:30:28:b6:64:
57:4f:8a:9b:d9:c5:b1:85:01:b9:7f:f0:57:d5:74:
53:85:64:ee:1e:34:68:a8:45:4e:4b:de:ee:1b:5e:
9e:54:39:ce:c5:c8:bd:04:35:7d:77:17:4c:b8:db:
26:87:f7:00:2c:87:98:75:3b:ff:ee:1b:43:1c:f9:
b8:f7:a2:6d:78:02:a5:6c:b8:78:08:f3:b7:42:e5:
5d:8b:30:11:cb:80:2a:3d:60:f1:b7:fe:67:2e:19:
f7:27:57:1d:11:87:e7:fe:81:2a:c3:29:29:c5:92:
a2:f5:48:aa:75:ec:ad:2f:1c:d2:a1:3c:99:04:8f:
96:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:20:AC:5A:42:BD:89:57:51:96:DB:AB:03:05:17:A8:99:DA:1D:A6
X509v3 Authority Key Identifier:
keyid:5C:D3:79:CE:DC:DC:20:F0:87:5C:4B:08:B9:4B:41:16:1B:3E:8C:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNN5ztzcIPCHXEsIuUtBFhs-jAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:1b:4b:b3:5e:fa:d3:82:79:af:27:1a:62:53:c1:07:54:8c:
9c:8d:c4:1d:20:07:45:5e:1e:51:60:fe:16:c7:6d:4f:51:04:
8e:bd:3c:da:04:9c:30:7d:4d:ef:56:2c:e0:6e:99:65:92:c8:
e1:f3:a3:4f:21:be:8d:01:cf:25:11:ed:c4:08:5b:25:26:18:
d1:56:48:0e:ef:50:9c:0f:2e:ae:fd:f5:4c:c5:c7:1e:09:ab:
83:ab:7c:42:b9:d3:02:65:59:5c:e4:1f:79:ee:7a:7f:1c:53:
ad:45:d0:9d:29:61:72:5e:0f:4b:20:a2:83:72:d8:f9:f3:ba:
9f:4c:cb:94:48:ad:ca:7c:90:33:82:16:20:45:88:2a:46:b5:
00:e7:ed:f3:24:d6:60:5c:32:63:d1:53:a3:9a:9b:57:c4:ac:
cf:5c:0c:79:93:09:bf:be:60:a1:8d:08:22:53:25:fd:e7:e6:
1f:bd:0c:5a:dc:3e:98:39:8d:aa:19:c8:26:11:3a:c5:dc:05:
93:d0:0a:c5:be:95:29:6e:9d:23:d2:60:96:21:83:6d:40:4d:
94:3e:ad:26:3d:a8:3d:11:e1:c6:ff:41:df:c4:ff:2a:c3:e0:
dd:83:80:01:90:bc:20:f6:c5:99:16:d7:11:17:cb:1b:25:c2:
d7:7a:40:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:28:35 2026 by rpki-client