Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
File: XjFIuezSDl_yRlqc0QGtqa5QjVc.mft (raw, json)
Hash identifier: g5ipeI2881A7XKo8ARvXQiZBrEC++GxHK64NIAUQM3A=
Subject key identifier: D0:B8:B9:D5:30:83:C1:D7:72:6D:6A:19:AC:C8:8A:9B:20:8D:D8:87
Authority key identifier: 5E:31:48:B9:EC:D2:0E:5F:F2:46:5A:9C:D1:01:AD:A9:AE:50:8D:57
Certificate issuer: /CN=5e3148b9ecd20e5ff2465a9cd101ada9ae508d57
Certificate serial: 019CAB3497F9E70A84839A304B0E71DA228D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
Manifest number: 1404
Signing time: Sun 01 Mar 2026 21:01:16 +0000
Manifest this update: Sun 01 Mar 2026 21:01:16 +0000
Manifest next update: Mon 02 Mar 2026 21:01:16 +0000
Files and hashes: 1: JA3YuaJEsqvd9eusygyCJH9iklY.roa (hash: 9CJlUPdmf0qr6MJ6TlKKLBohMPRtzMpsz+bJMGO5jMQ=)
2: XjFIuezSDl_yRlqc0QGtqa5QjVc.crl (hash: b6Kcxu8DQkz3xe+ZB7GFhfkQaIZBPCC4817cn+gN97A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:97:f9:e7:0a:84:83:9a:30:4b:0e:71:da:22:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3148b9ecd20e5ff2465a9cd101ada9ae508d57
Validity
Not Before: Mar 1 21:01:16 2026 GMT
Not After : Mar 2 21:01:16 2026 GMT
Subject: CN=d0b8b9d53083c1d7726d6a19acc88a9b208dd887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ec:db:ec:5a:ff:7e:b3:f7:12:e3:a3:21:c0:
c9:30:31:43:d7:31:f3:47:7f:1f:e1:5b:9a:b6:b3:
ce:59:00:96:b3:1b:64:a2:5c:07:f4:73:08:98:32:
5c:c0:16:88:ad:e0:ab:74:08:34:1f:87:6d:7d:0a:
12:65:8a:74:46:b1:f5:85:3b:cd:54:ee:bb:af:1e:
88:b3:68:57:e6:eb:17:eb:c1:f8:13:a3:a2:b5:51:
9b:cb:1e:bb:4d:8e:78:ea:44:6f:30:b4:68:1e:8f:
ec:0b:cc:29:8b:6c:a6:e1:92:f9:4c:da:06:4a:a1:
4c:52:bf:48:26:82:80:ac:f4:82:86:3c:25:8f:95:
c4:bb:7e:fb:26:9b:4f:ff:48:a9:09:af:f6:df:64:
cd:a0:90:76:72:e6:a5:cf:ee:e6:a9:31:44:0d:61:
73:82:a7:e2:73:fa:bf:ac:21:0c:30:b1:c8:38:51:
e6:29:bd:cd:cf:3a:6e:20:aa:34:c3:b9:29:14:f3:
95:54:e6:ee:ed:6d:21:d1:75:c4:51:6c:4f:dc:99:
39:ad:44:4f:c0:2a:ee:cb:8b:76:c0:94:4d:be:20:
bd:ba:bd:89:81:31:5d:5e:c7:c3:2e:eb:7b:84:0c:
7b:47:29:d4:02:5b:be:28:e8:7f:4a:ae:8d:42:0a:
a8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B8:B9:D5:30:83:C1:D7:72:6D:6A:19:AC:C8:8A:9B:20:8D:D8:87
X509v3 Authority Key Identifier:
keyid:5E:31:48:B9:EC:D2:0E:5F:F2:46:5A:9C:D1:01:AD:A9:AE:50:8D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:27:cf:cf:ae:2b:77:f5:ac:71:6e:02:bb:c0:1a:49:e9:e1:
ff:e0:0f:f0:1d:20:46:0a:92:4a:06:e9:16:47:00:47:ad:b1:
24:8e:fa:66:8f:c1:13:58:7c:2d:01:b5:c8:94:c8:26:9c:d5:
eb:36:f2:53:a6:06:03:07:d3:d3:ac:40:6e:5f:4d:e4:e5:c1:
56:4d:2e:22:16:92:16:4c:2e:ae:ad:dc:a2:93:7e:17:4a:f0:
ac:51:d9:70:8a:9c:e2:04:85:8e:a0:38:39:e4:84:7f:9a:aa:
fa:74:96:b6:f7:fb:1f:93:9a:e7:f6:c4:17:11:af:aa:b8:6e:
a5:d9:72:72:62:8a:59:ef:19:fe:29:97:42:7d:9d:4d:a8:e3:
01:41:33:16:81:7c:4b:16:a6:e9:ac:74:d0:15:51:bb:69:f7:
b6:0b:93:02:ab:68:10:6d:a8:37:07:2b:b1:09:e5:b9:ba:fe:
1e:4e:34:e9:c8:96:5b:2b:79:eb:6d:fe:a8:46:90:1e:5e:95:
6e:95:31:c4:27:05:6e:4f:ef:65:11:09:d1:c6:29:32:0d:02:
8f:af:6d:91:3e:1a:97:b0:4b:b7:b9:76:50:44:81:9d:2d:93:
e0:b2:34:f7:65:4f:a0:60:c6:a8:5f:4c:2e:54:18:0a:38:5b:
0b:a7:7d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:22:03 2026 by rpki-client