Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft
File: XbWMRb7iUfx1daY-W0kN7GEU5so.mft (raw, json)
Hash identifier: /LYvnxgUp6sUVQmpJiK5LGhUl01o6rJObJkQyrScNCo=
Subject key identifier: A0:E1:68:E1:14:C9:F6:D5:4B:8F:BE:E5:F5:54:3D:26:B0:86:4D:FC
Authority key identifier: 5D:B5:8C:45:BE:E2:51:FC:75:75:A6:3E:5B:49:0D:EC:61:14:E6:CA
Certificate issuer: /CN=5db58c45bee251fc7575a63e5b490dec6114e6ca
Certificate serial: 019D2771F5689769CE7A40C9D7721CF294AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XbWMRb7iUfx1daY-W0kN7GEU5so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft
Manifest number: 1632
Signing time: Thu 26 Mar 2026 00:01:12 +0000
Manifest this update: Thu 26 Mar 2026 00:01:12 +0000
Manifest next update: Fri 27 Mar 2026 00:01:12 +0000
Files and hashes: 1: XbWMRb7iUfx1daY-W0kN7GEU5so.crl (hash: UkLSX4CMt1JhwT4yNSVOzuY7YA3Ha+DFFuJ8F5ut9Zk=)
2: vHsqeUq6iGnyRjByp03wnHq8Se0.roa (hash: VNscZtJ6p8ltvLlYgNm9TQqlID5TSbcVcko5K60GbLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft
rsync://rpki.ripe.net/repository/DEFAULT/XbWMRb7iUfx1daY-W0kN7GEU5so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:f5:68:97:69:ce:7a:40:c9:d7:72:1c:f2:94:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5db58c45bee251fc7575a63e5b490dec6114e6ca
Validity
Not Before: Mar 26 00:01:12 2026 GMT
Not After : Mar 27 00:01:12 2026 GMT
Subject: CN=a0e168e114c9f6d54b8fbee5f5543d26b0864dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e1:5d:ed:ce:de:6e:fa:78:73:2f:71:4a:70:
2c:95:cb:d5:cb:9b:49:50:7c:9b:4a:43:72:5e:4b:
bf:1c:a0:fe:44:07:b8:64:76:06:e5:d5:e2:c2:df:
2f:63:0a:fb:2d:51:59:75:05:a0:e6:c2:70:05:f2:
92:ae:3f:6b:85:50:f4:03:d7:31:d8:5b:48:d8:c2:
e5:81:1c:26:59:67:a9:ca:d0:f3:03:90:26:e4:d1:
f8:cd:b6:db:48:8c:4d:cf:6a:01:e9:ab:f7:20:36:
11:96:77:4b:ae:3f:34:06:74:47:9e:71:13:5e:13:
75:3c:66:6c:07:a5:db:13:77:fc:01:ef:d5:c3:08:
f7:21:8c:08:8c:c0:a3:05:62:7a:90:78:aa:b1:05:
b2:3b:88:72:8c:29:c8:40:ed:bf:ac:bc:42:0e:12:
21:0d:0c:7c:d3:c8:86:06:84:65:b9:2e:91:6c:88:
ca:fe:f3:a9:09:a4:d7:65:b0:e0:7a:c4:19:28:ff:
7a:47:54:e6:4e:c7:ee:1a:5c:7e:66:cd:ac:f6:2d:
8c:cc:4d:4f:f6:71:6e:59:01:f2:50:5e:4b:4a:f9:
03:b4:15:8e:4c:57:0a:15:39:cb:e6:8e:70:2d:16:
a7:b0:a0:0f:a0:f3:39:85:89:3e:a9:ab:11:82:15:
1b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E1:68:E1:14:C9:F6:D5:4B:8F:BE:E5:F5:54:3D:26:B0:86:4D:FC
X509v3 Authority Key Identifier:
keyid:5D:B5:8C:45:BE:E2:51:FC:75:75:A6:3E:5B:49:0D:EC:61:14:E6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XbWMRb7iUfx1daY-W0kN7GEU5so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b0:d6:f2:c9:ed:d4:1a:49:f7:49:62:b4:9d:65:d9:09:64:
4a:68:a8:55:ca:e3:d8:73:d4:20:52:48:2d:a8:f8:12:40:8d:
ee:2c:9e:4a:f7:ba:fc:7d:e8:89:17:17:19:48:9d:13:05:17:
29:92:29:28:7f:56:f2:a5:af:4e:2d:98:05:63:1b:24:f6:ae:
78:63:39:93:c3:5e:0c:e1:1e:aa:0a:c3:15:cb:76:8e:31:a2:
32:7c:d2:da:af:ae:54:bd:5b:85:6d:02:d1:8c:d5:98:41:1b:
a1:b1:2f:82:e4:4e:b1:c4:09:09:bf:db:03:32:91:5c:21:56:
0f:e0:5d:4c:07:dc:bb:d8:ce:d1:84:4d:6c:e2:24:24:95:d0:
1c:3f:fc:f4:fa:18:73:cc:5d:13:21:09:ae:8a:6a:ed:7d:14:
37:32:5a:59:d7:86:7f:6b:01:40:61:60:8e:05:6e:dc:0e:54:
93:5c:02:03:7f:bb:f9:29:27:9b:2e:46:68:99:c8:78:4f:c5:
7f:b2:3f:d9:42:e7:75:42:02:52:a0:fa:9c:5d:ad:9c:7c:c3:
d1:2a:2c:c8:17:1b:ff:a6:c5:1a:ea:d8:b1:14:f3:35:51:8a:
7c:dd:ed:80:8e:c0:85:67:09:0a:b2:a7:19:d3:84:ee:07:d1:
94:e1:65:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:54:02 2026 by rpki-client