Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.mft
File: XfSth7gyLMlJFI4NdmIc6oNYpoU.mft (raw, json)
Hash identifier: OtVpfeJ5FnNhdoK6h6vnaV7sm8W2B5wVrXTOHGivc7A=
Subject key identifier: F2:ED:4D:4D:FF:AC:40:7C:E5:33:DE:92:30:BF:F3:13:EC:3E:A0:35
Authority key identifier: 5D:F4:AD:87:B8:32:2C:C9:49:14:8E:0D:76:62:1C:EA:83:58:A6:85
Certificate issuer: /CN=5df4ad87b8322cc949148e0d76621cea8358a685
Certificate serial: 019D28845B7981F384DBD574121DC15F0B4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfSth7gyLMlJFI4NdmIc6oNYpoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.mft
Manifest number: 75
Signing time: Thu 26 Mar 2026 05:00:55 +0000
Manifest this update: Thu 26 Mar 2026 05:00:55 +0000
Manifest next update: Fri 27 Mar 2026 05:00:55 +0000
Files and hashes: 1: XfSth7gyLMlJFI4NdmIc6oNYpoU.crl (hash: rxiDhCJ1PieIwOuSVARMsyzLknMuWBw6r5ZN6KddIp8=)
2: hlSTINC_KpLJH_012cszF50XrrM.roa (hash: R9LXujjJX9A3v2Y9QXZNY393BmFuvvM/3QjbC/Pbq0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfSth7gyLMlJFI4NdmIc6oNYpoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:5b:79:81:f3:84:db:d5:74:12:1d:c1:5f:0b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df4ad87b8322cc949148e0d76621cea8358a685
Validity
Not Before: Mar 26 05:00:55 2026 GMT
Not After : Mar 27 05:00:55 2026 GMT
Subject: CN=f2ed4d4dffac407ce533de9230bff313ec3ea035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c3:6d:0d:93:2a:4a:86:31:16:6c:4f:1e:f3:
5e:3e:bb:63:b1:f1:6f:b5:d3:84:de:ac:60:e6:15:
71:0e:09:ed:08:dc:ad:68:a5:cb:e0:ed:98:38:b3:
e5:85:3e:19:01:14:89:8f:5a:cf:3e:db:f3:98:e2:
c0:e1:c9:77:5c:9e:a1:5d:03:00:d0:07:71:cf:c4:
40:c3:2d:d5:1e:75:c7:15:02:6f:e0:8a:53:68:f0:
14:48:5e:80:20:1c:67:71:0c:6a:8d:9f:e8:f0:e2:
e6:c8:7f:b3:95:4e:31:a8:de:ba:6e:91:4b:22:bd:
aa:36:47:f9:c7:99:20:d1:59:03:19:b6:9f:85:e6:
19:40:d8:93:42:e5:bf:67:14:88:2b:32:a5:f9:6f:
0a:46:af:b6:81:f6:d4:17:5f:90:ba:13:90:cc:e1:
90:c7:69:d1:49:d1:12:38:d6:cc:89:f3:eb:5a:82:
f6:64:36:9a:f3:97:18:f9:2b:1f:a1:1a:fd:e7:5a:
7a:a8:af:f7:60:bc:63:e0:57:ba:39:d4:4c:27:49:
ac:bd:cc:f8:1e:bf:c5:33:3c:e2:41:4e:39:ae:19:
aa:d1:7e:a1:77:36:07:df:99:86:48:90:73:65:26:
f9:17:90:08:2e:1d:b4:65:fb:3b:ef:39:76:4a:10:
61:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:ED:4D:4D:FF:AC:40:7C:E5:33:DE:92:30:BF:F3:13:EC:3E:A0:35
X509v3 Authority Key Identifier:
keyid:5D:F4:AD:87:B8:32:2C:C9:49:14:8E:0D:76:62:1C:EA:83:58:A6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfSth7gyLMlJFI4NdmIc6oNYpoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:85:4b:77:8a:0f:00:20:99:76:b7:18:77:b7:87:c4:9e:88:
6b:28:03:22:db:a5:1a:cf:80:40:e1:2c:38:4f:7d:49:a2:86:
7c:34:92:6c:6b:d3:db:86:d8:0f:2f:be:74:d0:83:3b:ca:3a:
ce:30:a9:34:e3:77:ca:b6:aa:82:e0:23:0e:92:d5:d0:25:ed:
9f:91:c3:74:1a:db:f6:dd:a5:28:5b:20:7d:92:66:07:a6:ed:
57:84:14:f0:10:1b:0b:6d:65:09:37:c3:92:5a:e6:aa:bf:d5:
be:6b:bd:09:cc:7f:08:38:84:31:88:cb:84:ab:8f:b6:3e:79:
87:a5:c1:d3:35:b9:28:8d:50:ef:48:98:2f:f5:62:3c:be:3e:
db:01:83:2a:8e:b1:49:e1:f2:cc:d9:fc:36:42:15:62:4f:c6:
2d:67:f9:0c:c5:6e:90:cd:b5:be:9c:ea:29:eb:02:31:b1:00:
bb:50:d4:61:cd:d7:3f:c7:af:9d:2a:34:5b:92:b2:e7:d3:ec:
a9:48:9b:96:bb:d9:81:f9:ab:e5:30:89:98:5b:71:44:ed:6b:
70:f3:85:de:ea:67:5d:2a:65:38:e0:16:ff:97:1d:49:d1:70:
27:34:86:f3:1e:78:a1:d9:53:ce:d0:b8:13:c5:97:e3:87:2c:
2f:6a:2b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:40:10 2026 by rpki-client