Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
File: X6OG6XZW1kirU4GylmZBQIGwAIQ.mft (raw, json)
Hash identifier: 7Px7DjyRiTl30jfMjy3sYiYcITg/ctrFgNiOPbJ8hbk=
Subject key identifier: 5C:33:53:F7:55:9E:3B:EC:06:4D:16:41:93:C9:D3:B7:30:84:FE:A3
Authority key identifier: 5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
Certificate issuer: /CN=5fa386e97656d648ab5381b29666414081b00084
Certificate serial: 019D2884B4ACDC83D1756A0F14821B4F955B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
Manifest number: 080E
Signing time: Thu 26 Mar 2026 05:01:18 +0000
Manifest this update: Thu 26 Mar 2026 05:01:18 +0000
Manifest next update: Fri 27 Mar 2026 05:01:18 +0000
Files and hashes: 1: X6OG6XZW1kirU4GylmZBQIGwAIQ.crl (hash: gNGQ1rh0nZrAgsM8sQUUw0npZntx/LKW953GCtBqSpE=)
2: xhYgnKDXKCLXTlxGKn83qxGD5Wk.roa (hash: 4Tr8pcApL7OMPNYK6DHiqFf/BMOwe5lvOFY1rUx8z6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:b4:ac:dc:83:d1:75:6a:0f:14:82:1b:4f:95:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa386e97656d648ab5381b29666414081b00084
Validity
Not Before: Mar 26 05:01:18 2026 GMT
Not After : Mar 27 05:01:18 2026 GMT
Subject: CN=5c3353f7559e3bec064d164193c9d3b73084fea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d4:8b:37:60:99:0a:12:ed:e3:5d:84:c6:0a:
d9:f5:61:db:7f:34:4f:cc:1f:f9:83:c6:3b:b0:6a:
ad:e5:38:7d:e9:d8:a0:39:24:67:a9:ba:07:93:f9:
9f:d0:3a:70:92:9a:80:b4:a1:f4:0c:96:1f:0c:76:
3e:c8:e0:0a:a8:17:87:f9:06:50:28:b6:5c:ef:ba:
4b:87:0d:11:2e:9c:62:75:64:50:c1:bc:32:85:b9:
9b:a9:ff:5f:91:36:50:5e:13:30:7b:98:4b:fa:ae:
16:58:f5:61:6f:e3:1e:ca:7f:1d:e4:3a:0c:5c:26:
ca:f0:67:52:12:02:2a:e2:da:03:dc:be:71:f4:bf:
00:f9:4d:59:da:16:ae:94:b7:4b:6e:06:56:01:37:
df:e4:9a:8d:8b:43:81:0b:87:38:7e:d2:e5:23:47:
db:ac:42:d5:e4:08:29:84:3c:9d:f8:cc:74:7e:a9:
c7:2e:fd:f5:0b:64:cb:32:4f:f1:3e:35:87:6d:77:
a5:5c:7b:7f:fd:63:54:8b:f7:a8:ad:cd:a0:37:18:
cb:d2:88:8f:5b:ce:3e:75:80:b2:5e:dc:b2:df:09:
d3:d7:27:78:db:22:2c:7c:a6:ee:ff:d3:9f:dd:19:
53:83:3d:f8:7c:e5:27:65:f9:4d:ac:d3:70:9b:ed:
82:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:33:53:F7:55:9E:3B:EC:06:4D:16:41:93:C9:D3:B7:30:84:FE:A3
X509v3 Authority Key Identifier:
keyid:5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:97:5b:8d:79:ba:da:ab:a9:07:f4:48:d6:5d:69:5b:bd:f9:
bf:ac:8c:50:75:a3:16:a8:0c:13:8c:f8:d4:ac:2c:54:3e:eb:
0b:19:19:d2:fe:5f:0f:d4:eb:6f:8c:63:af:e3:32:4c:5a:6c:
f8:98:8a:e7:e3:e6:66:c3:9c:2b:fe:30:37:74:fa:88:2d:1d:
cf:61:db:6c:f2:24:e0:d0:04:c6:95:82:ac:19:dd:7b:1a:69:
70:9c:0c:1c:36:86:70:16:40:a0:a2:a9:1d:9b:0a:88:03:48:
39:30:15:ef:ee:91:ef:96:aa:1a:18:14:16:f2:48:15:46:2a:
ce:11:92:fd:ff:14:d8:2a:82:c5:11:ba:fa:f6:1f:e6:6a:e6:
0e:ad:37:ca:35:45:0e:4d:0a:0d:74:8a:32:6d:f3:82:43:0b:
ac:3e:76:e0:e7:cd:2b:6c:5a:af:a0:21:ed:5f:40:f4:cf:c8:
74:aa:4c:8e:d9:d2:cb:c0:ff:64:ae:c7:15:58:62:04:fa:d2:
b7:a1:d1:ae:00:7d:51:31:6d:15:cc:cb:78:8b:ee:e0:fb:e6:
d1:cd:4c:d2:99:ea:1f:79:bc:a1:09:66:b8:ae:e2:e0:bb:ff:
1a:14:b6:cf:55:2e:7a:a9:a9:6e:12:b5:fc:40:6e:97:73:22:
a6:35:19:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:49:41 2026 by rpki-client