Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
File: X0qPBO8v6-VPnbapovhWWUtuLwg.mft (raw, json)
Hash identifier: aeVeCONNbr6mRaxM5GfMbTMcExcu2hnroItiCdgOsxo=
Subject key identifier: B0:40:5E:65:FB:29:D8:19:54:67:15:21:C2:02:08:A3:7E:48:68:E5
Authority key identifier: 5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08
Certificate issuer: /CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08
Certificate serial: 019D270472DD859ECE3CB9EBD27DC33CD8FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
Manifest number: 1426
Signing time: Wed 25 Mar 2026 22:01:35 +0000
Manifest this update: Wed 25 Mar 2026 22:01:35 +0000
Manifest next update: Thu 26 Mar 2026 22:01:35 +0000
Files and hashes: 1: 2Pl1WOLsPcEe3IssGI6GqTdAUd8.roa (hash: xEvziGYE9gFL6LzKGBIz1s8KI0YFj5pJymQRSZymNEM=)
2: X0qPBO8v6-VPnbapovhWWUtuLwg.crl (hash: mSWHqo5eZ/xYj9JQzqAabpedOOlx7bDDjGnPPOqPcjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:72:dd:85:9e:ce:3c:b9:eb:d2:7d:c3:3c:d8:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08
Validity
Not Before: Mar 25 22:01:35 2026 GMT
Not After : Mar 26 22:01:35 2026 GMT
Subject: CN=b0405e65fb29d81954671521c20208a37e4868e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fe:e6:da:72:a6:72:3b:e6:35:e8:94:a9:9c:
71:52:0f:c1:20:ea:4e:b0:a9:03:c2:5a:12:08:f6:
0b:32:d4:6a:07:d5:64:0a:24:6a:7c:6e:15:6b:e9:
4d:65:6c:91:a0:6e:9b:b8:21:f1:0b:2b:b0:cf:c5:
1a:e6:8c:8f:05:0f:78:3e:35:35:dc:68:2d:e5:25:
8a:71:ba:24:dd:16:8e:18:8c:39:a8:83:e8:21:01:
3e:bd:bc:55:b9:55:b3:6b:9d:91:62:e4:a2:ce:37:
aa:90:cc:ca:54:8e:dd:1e:52:a3:ea:62:0e:46:25:
fe:98:bc:de:31:61:45:66:ce:04:33:cc:c5:7f:91:
2b:41:74:1f:26:49:ef:ef:f8:c8:28:d3:0c:f3:4f:
2a:02:d2:1d:1e:34:92:cf:92:08:62:b2:50:a0:5a:
d4:90:f9:70:8f:91:eb:15:3f:9f:d7:81:90:c0:0c:
79:78:2b:a8:bb:e5:2c:1a:10:b4:64:57:69:e5:d3:
36:fd:77:3b:72:0c:3d:9f:5f:d2:31:88:e3:1e:f1:
0d:ec:c1:5c:ad:1a:ac:8d:8b:37:da:5a:bb:6d:c9:
7d:6d:9e:16:6f:b6:4b:f2:7e:b5:31:fe:8d:24:8d:
a0:fc:54:95:4e:bd:54:76:fe:dc:b9:24:c7:77:e8:
cb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:40:5E:65:FB:29:D8:19:54:67:15:21:C2:02:08:A3:7E:48:68:E5
X509v3 Authority Key Identifier:
keyid:5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:7c:d4:0c:34:bd:e3:ad:50:69:e5:55:aa:00:4b:f7:8e:fa:
5b:0d:e5:8c:f4:19:88:5e:2d:a5:78:83:ed:bf:51:97:fd:eb:
94:cd:e0:6f:4f:34:ef:27:d7:96:dc:02:b6:95:f3:0a:d5:99:
70:b4:fb:d2:6c:ab:9b:2b:1e:83:68:26:b7:70:53:6b:fe:ef:
12:36:46:71:c9:22:04:b8:f2:5c:01:3e:94:d4:da:12:92:de:
e5:89:46:2b:bf:da:01:4e:27:64:5c:11:59:84:c8:69:fa:19:
84:3b:bc:2d:68:8e:3f:5b:4b:7f:bf:d4:c9:8c:f0:44:48:05:
06:92:6b:5b:0a:d6:32:de:0c:b3:e1:36:63:51:a0:06:d0:93:
55:b0:8c:70:13:6f:3d:7f:0d:b1:54:be:37:72:06:64:54:6e:
1c:11:60:11:d2:0b:e3:e3:85:a6:cb:ee:96:f7:fa:75:21:a4:
20:f9:6c:f4:4a:93:9a:0b:d1:8d:e8:4e:82:81:98:7e:1b:14:
15:8c:a9:20:2a:44:79:ee:64:a5:46:6e:71:65:81:c1:df:d0:
7a:da:51:8c:68:4b:21:80:83:ce:ec:0e:7c:53:31:e2:f8:0a:
1b:06:68:3c:dd:85:a6:3c:32:f4:9a:b6:57:79:ac:9f:fe:71:
84:89:26:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:22 2026 by rpki-client