Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
File: XOsOvYeLd9QvLKndCPcMMjxdA9s.mft (raw, json)
Hash identifier: LfRaTh7IrX9g6t5oRg82JhkiMvIfJnDfB1wchlpyB5A=
Subject key identifier: B3:0C:27:3C:96:C4:0C:7A:EE:31:28:EF:94:D2:70:90:DC:71:CE:21
Authority key identifier: 5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB
Certificate issuer: /CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db
Certificate serial: 019D265F2A0633D05E343C9A512D931622DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
Manifest number: 11A5
Signing time: Wed 25 Mar 2026 19:01:03 +0000
Manifest this update: Wed 25 Mar 2026 19:01:03 +0000
Manifest next update: Thu 26 Mar 2026 19:01:03 +0000
Files and hashes: 1: 3dTGZIR5xNjpUjR4hZwNlOd2Bsc.roa (hash: f2BLKcRZVhnRXkQ4qW92OvGurLauRFZKARhH1pRyUeg=)
2: XOsOvYeLd9QvLKndCPcMMjxdA9s.crl (hash: YqCN9uwl/o50rhYf6tXTUs5SmhEhzIf87IvM6TJg1dY=)
3: f-TtHG-5pZXW87X0GbscTUNU96w.roa (hash: lCxogCHK18lqz8wrch+QF7zhq9f/HEWgIBotwp+AlGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:2a:06:33:d0:5e:34:3c:9a:51:2d:93:16:22:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db
Validity
Not Before: Mar 25 19:01:03 2026 GMT
Not After : Mar 26 19:01:03 2026 GMT
Subject: CN=b30c273c96c40c7aee3128ef94d27090dc71ce21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3e:16:9e:41:89:c6:e9:9c:40:f4:f5:0e:f5:
12:69:7c:2a:78:61:aa:23:ea:1a:e7:99:16:d6:69:
d5:66:d3:26:6e:ac:c0:06:6d:da:eb:42:63:9f:d7:
78:4e:be:9a:20:d6:66:ab:69:1e:9e:74:b8:52:ef:
2d:bf:a9:bd:4c:a5:2c:2a:4d:7d:27:b3:bb:98:78:
9d:93:c1:5a:83:98:39:2d:08:46:61:5b:4d:43:58:
6c:47:f6:f5:b9:ef:ba:12:cf:2a:4b:49:06:a9:cf:
dc:00:5f:f0:89:de:cd:85:ab:91:17:93:79:a8:4e:
6f:9e:8c:dc:6c:65:a0:34:d3:37:8c:00:7f:71:e7:
2c:94:aa:93:e8:b0:69:e1:d2:f9:13:31:a8:cd:0f:
07:ca:5f:4c:ac:dd:7e:37:7c:11:49:b1:c9:c1:81:
d9:4a:0f:de:c8:83:ab:29:d9:8b:08:98:6d:41:ef:
b2:ff:db:bf:09:d1:0b:69:7c:c3:30:10:6b:8c:1e:
49:18:79:53:21:83:16:06:4d:b2:68:7c:bc:dc:5d:
54:32:3a:a7:4e:95:fc:97:9e:c9:7a:fc:48:62:60:
84:51:31:d7:54:f6:bd:f9:2f:09:f5:1a:3e:3c:0d:
31:f2:65:3f:7e:26:6e:b9:c8:33:3a:06:c3:93:38:
4a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0C:27:3C:96:C4:0C:7A:EE:31:28:EF:94:D2:70:90:DC:71:CE:21
X509v3 Authority Key Identifier:
keyid:5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:44:ef:1c:5e:1c:fd:ef:6f:e7:13:38:da:6c:c4:89:58:39:
0c:cd:c7:95:ac:9f:4c:e7:33:fb:58:40:7e:32:3e:45:e7:72:
fe:dd:30:45:4e:c6:ec:30:c0:80:d7:e7:07:97:83:a1:8b:e0:
9d:89:6a:66:c5:eb:e8:71:cc:e6:2c:c3:d3:2c:3d:4a:37:1c:
56:53:f7:9f:0e:61:23:1f:36:b0:8a:3d:aa:94:77:ed:57:cf:
ee:c9:08:1e:46:27:b0:b5:e1:21:f5:0a:cf:6f:7b:02:32:8d:
ce:6f:ab:02:50:f2:91:15:b6:1d:48:04:30:19:6c:79:65:df:
f6:3f:86:21:77:cf:51:90:c7:91:44:6f:c7:f0:3f:50:ab:1c:
12:b2:44:fa:d6:f8:c3:4c:0b:0c:ec:65:75:80:06:78:02:d3:
2c:51:23:93:83:78:f3:1b:1a:95:fa:93:f4:f1:99:06:d6:9f:
a5:1d:ec:09:6b:b7:34:91:af:05:0c:ec:58:e4:3e:b7:81:fe:
72:29:80:21:31:16:a7:29:c5:5b:5d:1a:43:49:83:13:69:04:
02:1b:31:c3:54:66:a4:45:c9:8e:c0:4a:a2:04:e0:9e:a0:0d:
22:7f:bd:ee:c3:d5:a7:3b:f6:4b:97:90:fc:16:36:af:d6:98:
1f:96:65:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:37:41 2026 by rpki-client