Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft
File: X6e2rvC9JBEwTk88aVfILrJWfNM.mft (raw, json)
Hash identifier: N/ddqA7aZSyErX4RkAIGlDLIRSmbDGl06shsVuRqr88=
Subject key identifier: 4D:DA:A6:73:E1:98:89:25:FC:FD:B7:39:61:EA:EA:9C:7E:F9:02:7E
Authority key identifier: 5F:A7:B6:AE:F0:BD:24:11:30:4E:4F:3C:69:57:C8:2E:B2:56:7C:D3
Certificate issuer: /CN=5fa7b6aef0bd2411304e4f3c6957c82eb2567cd3
Certificate serial: 019D299755CF29186F5E5F83786AB289E4A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft
Manifest number: 0CAE
Signing time: Thu 26 Mar 2026 10:01:16 +0000
Manifest this update: Thu 26 Mar 2026 10:01:16 +0000
Manifest next update: Fri 27 Mar 2026 10:01:16 +0000
Files and hashes: 1: X6e2rvC9JBEwTk88aVfILrJWfNM.crl (hash: JGIddTGFxBONfezKKHE8VIvn60ehTwH1KJbF9AagfMA=)
2: zX6QTKu5bdfzDlEKlxRngpN7jFg.roa (hash: Es/vRwC7rF9QD60Cujq+vg2mRaTno8Hpf1rSpL/09/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:55:cf:29:18:6f:5e:5f:83:78:6a:b2:89:e4:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa7b6aef0bd2411304e4f3c6957c82eb2567cd3
Validity
Not Before: Mar 26 10:01:16 2026 GMT
Not After : Mar 27 10:01:16 2026 GMT
Subject: CN=4ddaa673e1988925fcfdb73961eaea9c7ef9027e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0d:72:a8:e5:bf:f5:18:9d:91:98:ec:98:cc:
bc:82:d1:5c:95:fe:cb:72:89:fe:c8:19:db:ba:94:
e0:20:96:d7:4b:54:d2:3e:4a:bc:ad:8b:3e:35:50:
f8:16:ce:ca:90:ac:0c:ca:7b:bf:1e:f8:12:60:8f:
87:8f:bf:dc:c2:56:c0:6b:9d:68:25:15:36:1e:e7:
79:c7:ce:73:44:df:ce:b0:fe:f2:57:df:a8:c8:38:
ee:6b:d7:62:17:b2:04:e3:f2:b9:e0:c9:aa:4a:bb:
0d:ff:b3:0e:50:e5:d6:ac:73:dc:42:b8:e0:fa:81:
d9:1d:ca:0f:5d:09:a3:f0:b3:35:07:f4:65:6b:c6:
21:0f:6b:c3:ab:16:3b:5e:75:37:01:1a:ff:a4:eb:
0a:74:85:49:fd:7b:3d:01:f2:4d:9a:ae:4e:d8:2b:
bc:50:c4:06:d8:50:ee:dc:a3:94:71:2f:af:10:30:
cd:67:d4:79:83:45:14:dc:7a:a4:9e:9e:a2:f3:21:
9e:bd:d8:b9:fc:d7:b6:de:97:41:54:7c:7d:5f:a9:
a1:df:68:a7:f5:75:2a:7e:97:cc:c6:8a:33:b1:4f:
28:c5:25:14:35:96:e8:4d:8b:8b:73:9d:47:08:60:
3e:a8:dd:fa:27:64:b0:a9:0e:3a:0f:13:12:be:d5:
2d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:DA:A6:73:E1:98:89:25:FC:FD:B7:39:61:EA:EA:9C:7E:F9:02:7E
X509v3 Authority Key Identifier:
keyid:5F:A7:B6:AE:F0:BD:24:11:30:4E:4F:3C:69:57:C8:2E:B2:56:7C:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:49:cd:57:da:88:0e:26:75:b2:08:ae:87:f4:0f:17:e1:93:
10:c6:c4:d8:57:ec:67:4b:fc:f0:ef:ac:87:d8:8c:02:92:59:
f2:1b:89:ab:86:86:7b:cc:6b:2c:9c:67:77:17:fb:e7:29:de:
32:f7:c6:9f:d0:8d:e4:b0:d2:2f:34:03:8a:b6:2e:ce:4e:ee:
fd:96:cf:3c:ad:68:43:74:22:3b:ea:83:d4:4a:10:02:e3:23:
eb:fe:4e:d5:77:21:bf:7b:8b:98:d2:d5:24:b7:c0:e1:0b:e5:
2c:a8:94:c6:42:10:47:f7:c8:e4:50:e4:37:6c:8f:8b:08:1d:
e4:0e:c5:96:e6:11:6c:dc:d5:88:06:ef:62:43:d9:58:c5:51:
92:15:92:88:1c:40:b2:4a:bc:06:ba:6c:87:68:d5:73:5f:ce:
18:1a:bb:bc:18:9e:27:fe:b6:7c:29:de:24:e5:13:61:aa:d1:
a0:fd:26:8d:6f:b3:bf:52:f8:4f:ea:68:b1:95:65:08:0a:95:
01:5f:7f:28:85:2e:74:6b:97:97:7d:d3:f5:00:f3:2d:c7:70:
83:5b:08:e1:e9:f1:35:62:7d:de:9a:72:e2:1a:7a:46:c0:0f:
00:14:dd:c6:32:e9:2c:4c:57:37:ce:b5:c2:4f:83:f1:fa:9e:
98:14:9c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:15:17 2026 by rpki-client