Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
File: Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft (raw, json)
Hash identifier: J89qPZwck+0Nom5sud9Op0vyD/aYSMGRJue5QfMS1+U=
Subject key identifier: E3:8F:71:84:54:BE:D1:8A:21:2C:8B:60:EF:B3:4C:0F:14:D3:B5:F7
Authority key identifier: 5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10
Certificate issuer: /CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110
Certificate serial: 019D2A72481723E6BDFA1C5096F57E40071D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
Manifest number: 054D
Signing time: Thu 26 Mar 2026 14:00:25 +0000
Manifest this update: Thu 26 Mar 2026 14:00:25 +0000
Manifest next update: Fri 27 Mar 2026 14:00:25 +0000
Files and hashes: 1: Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl (hash: PClEU8Daq1+E6CC5gEmNpkytMSYmw2ft5i0AQFfQArI=)
2: zrY1kiCbt_RCBDyoPeb6Gt-rfXI.roa (hash: 99km0sbg09Xs5uX9uuCKMjDG2dbDXHFkyqnyOKsmuE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:48:17:23:e6:bd:fa:1c:50:96:f5:7e:40:07:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110
Validity
Not Before: Mar 26 14:00:25 2026 GMT
Not After : Mar 27 14:00:25 2026 GMT
Subject: CN=e38f718454bed18a212c8b60efb34c0f14d3b5f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5e:78:2a:98:2b:b0:64:54:66:f2:53:9a:3f:
59:83:c3:fc:18:37:93:38:73:21:41:fd:6a:50:85:
8c:72:08:2f:94:15:6c:92:5c:f2:4b:fb:ea:77:a1:
b4:94:0d:0e:44:08:91:7a:cf:d6:78:7f:c1:f5:e1:
99:ae:e4:2d:85:8b:04:dc:3e:01:14:21:33:68:62:
50:4e:ef:ba:fa:3f:c6:a4:77:d7:e6:f7:d5:52:63:
34:ac:60:50:f2:a5:f7:e1:c0:a9:83:bf:36:72:61:
f4:2b:68:2a:8a:5a:f6:62:87:71:f0:ff:63:2e:b9:
8a:00:8c:34:d5:4c:c7:2e:54:0b:ba:c0:1a:66:e1:
1f:ad:fa:c0:01:83:c1:12:6b:7c:5e:d5:7f:69:59:
5d:0e:4f:ba:20:2d:12:80:a9:8b:75:e6:5d:ce:cf:
9a:b5:06:83:e6:bd:76:0a:f8:10:66:8a:43:dd:1f:
13:d6:9d:be:d8:b0:32:ab:40:21:4d:54:95:0e:81:
b3:5b:90:54:9d:8c:c8:a4:c0:b6:56:7d:3a:bf:7b:
18:0a:20:38:1a:9a:74:e2:2d:30:2b:f6:05:fa:ff:
87:b4:e3:ce:98:7c:b8:5c:9f:33:3e:9a:57:cb:36:
61:d2:e8:18:00:da:d8:6f:29:f1:04:ee:34:bf:f4:
57:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8F:71:84:54:BE:D1:8A:21:2C:8B:60:EF:B3:4C:0F:14:D3:B5:F7
X509v3 Authority Key Identifier:
keyid:5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:d1:3f:b4:32:41:d9:8f:2b:6f:9e:39:b0:64:9d:f2:59:c4:
d4:5a:21:00:1d:14:48:a6:6a:24:7c:a9:14:7b:7d:04:3d:b0:
66:3f:52:aa:a9:cb:a1:43:84:dc:70:10:80:a3:05:7d:e9:41:
07:ec:a8:b0:77:3b:5d:f2:0d:1f:aa:5d:56:94:68:5d:fb:d5:
bd:ac:05:45:35:6a:3e:cc:f8:31:ad:fa:7e:d8:1d:b2:71:ba:
0f:bd:34:6d:d7:04:86:eb:b0:c6:2a:12:ec:fc:12:26:d9:0a:
ed:1d:ac:20:52:22:79:8a:65:05:41:6a:da:9c:03:6c:7a:6f:
b3:27:07:b6:67:72:bf:f2:a7:05:63:e3:42:28:01:78:54:04:
37:cc:54:24:b3:61:98:61:a3:ed:fa:77:ee:41:98:07:13:f7:
8b:00:8f:08:aa:6e:b4:bd:7e:9b:7e:bc:80:c1:96:66:b4:01:
6d:a9:19:61:c5:17:f4:c2:f5:86:fc:f8:d1:3c:e9:58:7f:68:
7a:94:d4:79:6c:62:78:42:e1:44:51:74:93:73:88:f4:96:95:
88:8e:b2:b9:bc:9c:ed:1f:49:e7:92:87:40:5a:57:61:66:12:
b1:a3:48:78:21:f9:8a:fd:96:bb:f5:c3:d2:96:cc:56:23:7d:
13:40:3f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:13:55 2026 by rpki-client