Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
File: XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft (raw, json)
Hash identifier: Qt9CEaUrePKdFtScf8hMKkgzvuuGVvtNdeiFqclBLZE=
Subject key identifier: 5D:CC:A9:36:0B:46:D6:2E:C7:AF:BA:96:36:C8:77:BC:FD:D6:70:1D
Authority key identifier: 5E:86:8B:02:E5:19:DD:7E:69:4C:7A:F1:E7:08:BD:D6:63:69:BD:DF
Certificate issuer: /CN=5e868b02e519dd7e694c7af1e708bdd66369bddf
Certificate serial: 019CAC101E4B3055EFCCD418E27A8E492B81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
Manifest number: 0DBB
Signing time: Mon 02 Mar 2026 01:01:03 +0000
Manifest this update: Mon 02 Mar 2026 01:01:03 +0000
Manifest next update: Tue 03 Mar 2026 01:01:03 +0000
Files and hashes: 1: XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl (hash: tUIM00J6lmwsRFYWdSLaKZp7OO5vi7F3kwbibSzLrN0=)
2: xhCelkdkFdTsIHpEDmjN2bruQr8.roa (hash: +AqQAgHYDXWjRd+5q4R8GrL4JFr5uaVtEUtnJ3XI5Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:1e:4b:30:55:ef:cc:d4:18:e2:7a:8e:49:2b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e868b02e519dd7e694c7af1e708bdd66369bddf
Validity
Not Before: Mar 2 01:01:03 2026 GMT
Not After : Mar 3 01:01:03 2026 GMT
Subject: CN=5dcca9360b46d62ec7afba9636c877bcfdd6701d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b4:4d:2d:d0:90:5c:56:03:38:c3:a6:c5:50:
ad:2c:73:9d:b5:34:9d:51:cc:a3:54:92:4e:43:0c:
76:25:57:86:ef:3e:7e:84:84:b2:fb:20:fb:10:ae:
10:57:30:80:fa:4e:13:58:81:4d:f4:f1:cf:a1:64:
5a:dd:72:ca:9c:fb:dd:01:65:d9:f5:3c:ed:70:ef:
3c:52:61:2f:c8:0c:35:5b:81:23:c3:cd:84:f0:c5:
87:5f:52:a2:db:d5:f0:38:be:ed:9e:ad:31:fe:69:
4f:9b:35:9b:c3:53:dd:46:58:12:1d:4d:bd:78:07:
3d:3f:17:2b:c9:f3:9c:30:3c:ae:03:d9:af:ee:8a:
e7:4c:f2:aa:fe:87:1f:b9:fb:6c:70:22:4f:c8:37:
35:4b:03:a5:59:80:bd:6e:34:9f:08:30:ae:68:8e:
8e:43:ae:69:f5:4e:f8:21:e7:ff:30:6d:c3:e4:8b:
60:a2:87:0a:76:e5:1c:06:b2:e2:68:82:fa:19:71:
bc:53:43:41:71:af:70:de:2a:39:2e:a2:ca:e8:9b:
83:a5:c9:51:93:1e:44:0b:6f:e5:03:9d:f7:26:b7:
f9:c9:12:b1:0a:da:a2:0e:21:25:29:90:2f:80:1d:
07:4e:b4:32:8f:81:4c:dc:41:6a:62:2e:57:da:c2:
dc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CC:A9:36:0B:46:D6:2E:C7:AF:BA:96:36:C8:77:BC:FD:D6:70:1D
X509v3 Authority Key Identifier:
keyid:5E:86:8B:02:E5:19:DD:7E:69:4C:7A:F1:E7:08:BD:D6:63:69:BD:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:43:49:d6:33:cf:8a:4f:f7:6e:0a:30:66:33:96:fd:b2:e5:
e7:8c:fd:c7:91:24:0c:60:e9:74:f9:69:3a:6a:4e:3b:10:b1:
dc:3d:05:01:85:e8:f0:06:3e:50:54:70:34:6d:ba:00:a7:09:
91:30:33:7d:56:44:01:e8:30:b1:10:1c:a6:4f:9d:fd:56:db:
f9:c9:51:39:e6:d4:02:bd:29:e0:28:bc:98:65:6b:b5:32:03:
50:0d:19:f1:48:53:85:51:8c:bb:d9:de:46:22:1a:10:93:f9:
05:80:79:80:a8:03:77:47:04:97:8d:10:94:b6:23:da:28:32:
8d:75:75:eb:73:27:f3:7b:ef:5f:48:3b:25:4d:ba:a3:a4:cf:
0d:4b:73:2a:cb:74:8e:c1:31:1c:49:13:83:30:b3:60:29:81:
9a:02:7f:f1:11:ab:c4:e5:9e:f0:6b:86:71:57:48:2d:c4:23:
f6:cf:d3:aa:0c:68:12:ec:f1:7e:ef:33:71:25:90:71:b5:55:
4b:54:7a:08:ec:d0:d3:6d:e6:1b:89:a7:aa:3d:9b:56:0c:9f:
c0:29:e4:7f:ee:a6:ad:4d:b8:57:12:44:77:95:b2:13:40:31:
84:4d:62:33:23:41:32:ab:0b:c1:6c:74:6f:be:18:2c:e2:64:
6f:6f:f7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:13:37 2026 by rpki-client