Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
File: xWYvmAINpON9UO07swICd08pLXo.mft (raw, json)
Hash identifier: Mr5rUrsjXgmOfVrTDxTKLmhh+p0l2mLrfkcSjej4i90=
Subject key identifier: 07:EC:F8:50:DF:97:09:84:BC:F7:E9:63:C3:9C:01:30:3A:48:F7:4D
Authority key identifier: C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A
Certificate issuer: /CN=c5662f98020da4e37d50ed3bb30202774f292d7a
Certificate serial: 019D284DE03C3C0F24C5A0E0B937FA8404EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
Manifest number: 04D9
Signing time: Thu 26 Mar 2026 04:01:25 +0000
Manifest this update: Thu 26 Mar 2026 04:01:25 +0000
Manifest next update: Fri 27 Mar 2026 04:01:25 +0000
Files and hashes: 1: nzDQVgvmn8MPp9hP_YWHgwOX3jI.roa (hash: oRVvK6JSGXQQlXi5SI+dzEHrPaQ2vh5FEq0UvDnb9/g=)
2: xWYvmAINpON9UO07swICd08pLXo.crl (hash: k0O+IuyT9AkKsTDuYXIiGHFDldSv1gSL4/cY/I5u2rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:e0:3c:3c:0f:24:c5:a0:e0:b9:37:fa:84:04:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5662f98020da4e37d50ed3bb30202774f292d7a
Validity
Not Before: Mar 26 04:01:25 2026 GMT
Not After : Mar 27 04:01:25 2026 GMT
Subject: CN=07ecf850df970984bcf7e963c39c01303a48f74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d8:e4:5a:40:16:6b:f7:48:65:ec:d0:9c:b4:
49:76:db:46:8b:36:fb:aa:20:14:42:ed:b6:3d:93:
31:5e:97:41:3a:de:51:8c:ef:b4:b3:56:c7:49:20:
62:8d:7e:e7:91:e5:8a:5c:fd:63:4a:2d:b7:e4:0c:
95:3e:7a:25:62:31:c8:7c:f8:37:62:e0:59:ae:c5:
db:6f:c1:93:fa:c3:9b:69:c7:24:e6:ba:52:80:9a:
ee:bf:fa:c3:65:44:08:3c:4d:97:1f:e3:58:44:30:
df:85:5c:3b:93:04:2e:0e:ff:87:9d:71:eb:71:0c:
89:d4:5d:f6:5e:7f:b8:f3:83:d1:21:24:ed:3b:ef:
c1:f6:17:77:55:88:da:9c:7d:6d:07:c4:96:12:e0:
fa:ec:4b:af:8c:64:75:e4:33:a8:c5:20:c4:a8:10:
80:f6:d2:46:c6:d5:2d:4f:fe:dd:7d:aa:66:2e:e7:
15:75:fb:8e:2e:de:91:54:bf:2d:97:da:49:4e:13:
66:31:1c:b8:0d:98:95:4a:5e:7b:4c:30:a8:91:77:
0b:7b:e5:db:c6:1b:41:95:7a:ae:eb:08:86:c8:ce:
e2:f4:57:90:0f:51:bc:2f:42:b3:15:60:72:87:e6:
6e:84:94:cc:1a:e5:75:00:0c:5c:3a:42:e3:6a:ef:
b8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:EC:F8:50:DF:97:09:84:BC:F7:E9:63:C3:9C:01:30:3A:48:F7:4D
X509v3 Authority Key Identifier:
keyid:C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:42:80:e1:1e:32:02:ed:a2:74:d3:78:21:af:38:8e:4a:5b:
d4:e2:16:b0:c1:99:db:e5:89:fe:c4:ae:55:65:3d:1b:c0:d8:
a0:21:d8:80:5c:77:b4:55:0a:5e:5e:7f:37:bf:2e:3c:c9:3a:
2f:9a:41:d3:0b:d3:9d:54:9d:60:25:60:16:f0:e8:02:f3:6a:
26:ef:24:f5:03:35:9d:bf:a6:a3:71:00:14:23:69:db:4f:a4:
f2:14:6c:c2:68:97:d8:7e:45:e1:74:49:b7:1b:2e:b4:96:20:
5a:02:29:1f:d5:f6:ae:08:20:07:93:2c:e5:3c:dc:4f:b0:5c:
a9:5e:41:11:21:b9:5d:72:ea:0b:78:64:16:36:17:34:5f:2a:
8a:a5:e0:68:4f:d1:9f:13:33:ff:6f:87:32:b8:6b:cf:41:18:
71:77:5c:25:b9:49:58:c7:d5:b7:79:7f:ed:ae:dc:2b:da:1d:
94:25:83:ba:b4:34:22:4c:67:69:14:6e:81:c9:fe:41:d8:2a:
23:60:44:63:3b:a9:6b:3b:11:e8:d4:8a:76:4d:1c:9b:f8:77:
6f:09:82:7f:b5:10:fb:1f:a9:8a:f8:55:40:3d:c5:08:e9:ef:
a5:e7:03:45:1b:89:2a:52:87:13:a1:6f:00:51:d0:08:cc:4d:
7a:fc:59:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:01:36 2026 by rpki-client