Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft
File: XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft (raw, json)
Hash identifier: jhi98c8T7BZHnYDnyhOjTWSRkP+7TVIFRyj51d8f5Ww=
Subject key identifier: 8F:45:3D:25:55:86:92:FB:F8:7C:34:E8:5A:4E:97:1C:F1:E7:DE:78
Authority key identifier: 5D:33:D7:FB:96:7A:5B:5C:20:3F:43:4C:00:FF:F1:25:34:E6:17:69
Certificate issuer: /CN=5d33d7fb967a5b5c203f434c00fff12534e61769
Certificate serial: 019CAD90CF17BD002A6F5D9391EAC6B55EF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft
Manifest number: 5F
Signing time: Mon 02 Mar 2026 08:01:14 +0000
Manifest this update: Mon 02 Mar 2026 08:01:14 +0000
Manifest next update: Tue 03 Mar 2026 08:01:14 +0000
Files and hashes: 1: XTPX-5Z6W1wgP0NMAP_xJTTmF2k.crl (hash: pAVxA2Nr7G3dUyovJbIFXyx1eDMUlun0CTATx4vhoZs=)
2: sILmqECvPUOwIkOHOOhRTao7v74.roa (hash: llFUAC/mu2lwxUsJ40bzdjW3ddWww0AROSXO714SrqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:cf:17:bd:00:2a:6f:5d:93:91:ea:c6:b5:5e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d33d7fb967a5b5c203f434c00fff12534e61769
Validity
Not Before: Mar 2 08:01:14 2026 GMT
Not After : Mar 3 08:01:14 2026 GMT
Subject: CN=8f453d25558692fbf87c34e85a4e971cf1e7de78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0b:f2:5c:b3:77:16:54:fe:67:bf:c8:e3:c0:
3c:8a:19:9b:4e:5a:4a:dd:8b:27:5a:75:2d:9b:77:
b0:4f:43:b4:ab:1c:23:ce:79:e4:61:b5:bb:93:da:
15:5f:66:41:f6:b2:6a:4b:ec:f2:cc:23:e0:41:ba:
7e:8d:95:95:a1:58:98:fa:3c:16:81:81:0a:2a:da:
ca:8f:a3:10:69:cd:d4:c5:b9:b1:f5:a2:b1:0b:e0:
a9:e7:bc:0c:49:b1:af:35:fe:dd:8b:92:3e:fb:99:
cf:ed:2d:d7:89:b4:8a:ba:36:5e:40:b9:99:73:9c:
db:06:03:33:63:02:46:7f:e3:43:72:eb:36:cf:7b:
c2:10:72:18:5e:c9:44:b3:ce:04:24:3d:c2:e6:4d:
3b:bd:69:90:3e:fe:24:a0:33:63:1f:af:98:da:d2:
92:0e:a9:76:d5:0f:9c:38:f6:fc:ca:d4:2b:2a:f7:
e7:a5:54:74:7c:4d:ff:c2:e5:23:ee:39:3e:83:fb:
c2:f8:7a:f8:33:4a:f4:11:cf:a6:b2:c7:10:91:ef:
b2:52:2a:10:7d:03:a4:c2:80:0e:ff:32:56:da:37:
ba:4f:06:d0:f2:fb:da:3d:63:37:d0:20:a0:85:3d:
78:91:9a:cb:3b:c7:3a:e8:6d:23:b3:eb:3e:04:36:
47:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:45:3D:25:55:86:92:FB:F8:7C:34:E8:5A:4E:97:1C:F1:E7:DE:78
X509v3 Authority Key Identifier:
keyid:5D:33:D7:FB:96:7A:5B:5C:20:3F:43:4C:00:FF:F1:25:34:E6:17:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:7f:5f:56:86:d7:c2:72:92:0e:10:83:3f:36:1a:52:6e:a5:
22:53:48:76:aa:87:18:4f:98:14:4e:72:44:5b:d7:4e:ec:c3:
bd:fa:2e:47:e0:54:ce:cf:c0:4b:51:44:f8:b9:42:ea:5a:5e:
f5:67:85:11:32:14:d7:fe:8d:f5:02:0c:37:b5:0b:89:db:6a:
88:53:3a:47:b6:92:c0:e4:45:1d:45:09:ac:ea:e4:fb:92:4d:
af:93:c6:be:dd:d1:a0:64:7a:cf:f9:78:05:77:84:21:11:c6:
2c:0b:70:21:f0:da:de:fc:01:7b:77:8d:e9:7e:fa:60:a6:e2:
d0:34:db:ea:21:dd:7a:28:44:2d:3b:eb:e2:e4:d7:6c:37:e4:
1b:a3:31:8c:91:78:f2:d9:35:11:a4:6c:47:3b:48:75:5b:13:
65:0a:64:9e:46:36:be:3d:48:4c:97:3a:e1:8a:39:40:24:a0:
b2:f8:83:b2:8d:8a:93:15:21:90:4f:fb:0a:00:e9:30:ef:97:
a9:30:8d:c3:dd:7d:76:03:1b:4d:99:84:59:ef:3a:03:59:11:
d0:63:df:c6:3a:23:4e:ef:f8:4e:5b:ac:c0:1d:10:7d:a1:30:
b3:7f:7c:99:ec:64:da:d3:0c:8a:92:99:a5:17:9f:ec:80:07:
de:68:46:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:05:15 2026 by rpki-client