Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
File: X5ZnbPOY05lMTdSilllGFN_1hsc.mft (raw, json)
Hash identifier: TUvVL8chM+/hnh7ZOLhIzCRTbePK7TZ43MbnrrxRqCM=
Subject key identifier: 3A:D8:F3:EC:FA:96:05:31:5E:74:CE:5F:1D:44:7B:E4:9E:E6:31:BD
Authority key identifier: 5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7
Certificate issuer: /CN=5f96676cf398d3994c4dd4a296594614dff586c7
Certificate serial: 019CAE6C7D52EB01EF0EF1DBA042007BABD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
Manifest number: 1866
Signing time: Mon 02 Mar 2026 12:01:11 +0000
Manifest this update: Mon 02 Mar 2026 12:01:11 +0000
Manifest next update: Tue 03 Mar 2026 12:01:11 +0000
Files and hashes: 1: EScHO_hZczomCnoprBz9oYDooAM.roa (hash: 4MTuC1uLMwXcp3WrNDw8r2lfD4JCPG95ZOo//y7/h8o=)
2: X5ZnbPOY05lMTdSilllGFN_1hsc.crl (hash: 1cxJeWv+VGZpv/7u58VtIo9LjK9T0yhTkSVYEHAOtj4=)
3: Yz6zMQTWF_oPlBis3JkHJwwBpxQ.roa (hash: fw38Poz9RGtWDLhkzBj9EkYC4z3B0EbYl1M6n6QZV4c=)
4: hzpr_u9unsG0Rewb6bfBUcdWDgs.roa (hash: WPtNLpfSEpgZKPMkhjXJCGT0MeFGLs8w0HKZG2+CsUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:7d:52:eb:01:ef:0e:f1:db:a0:42:00:7b:ab:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f96676cf398d3994c4dd4a296594614dff586c7
Validity
Not Before: Mar 2 12:01:11 2026 GMT
Not After : Mar 3 12:01:11 2026 GMT
Subject: CN=3ad8f3ecfa9605315e74ce5f1d447be49ee631bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d9:0a:0c:5e:30:bd:68:34:7b:25:fe:14:f6:
8c:17:49:53:47:17:97:97:ab:da:a7:0f:ce:0e:c6:
c5:71:e4:e2:b4:e0:a5:b9:1e:ec:da:59:c0:c4:87:
e7:d2:98:06:af:f1:82:1b:b0:9b:0d:6e:ac:cd:e6:
c8:04:a0:e9:eb:8f:54:8e:2c:09:07:ac:a2:77:0f:
00:41:e8:82:26:af:c2:ee:d4:e6:ec:6e:17:ec:57:
44:bf:29:60:67:fa:ad:e4:46:1d:fc:82:25:a5:18:
11:f5:43:40:44:4f:4e:9a:da:76:25:09:d5:be:0c:
8f:de:ee:d1:a4:43:80:4b:be:df:e7:0a:63:95:57:
ef:e6:91:ff:2f:f3:c8:e5:e4:b6:0d:c8:35:da:b1:
e8:2a:c2:d6:66:13:ac:ec:1d:b2:20:fd:92:93:7f:
d9:7f:91:e9:24:d0:f6:8b:1b:f7:01:10:a6:84:1c:
36:e0:be:07:67:b9:b3:c8:23:27:5c:ed:9a:ba:44:
7f:ae:14:2b:78:9b:5a:81:3f:d7:90:f2:e9:cf:29:
b3:e6:fe:f1:ae:2e:c4:7e:77:95:5d:d8:3a:54:9b:
7b:79:6a:8f:07:a2:97:fc:5a:fd:ad:ff:fc:93:a6:
25:d5:c4:3b:73:76:dc:48:bc:9a:76:a8:8a:9a:2e:
a6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D8:F3:EC:FA:96:05:31:5E:74:CE:5F:1D:44:7B:E4:9E:E6:31:BD
X509v3 Authority Key Identifier:
keyid:5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:93:57:06:c7:31:2a:1e:ba:c8:c3:47:5a:d2:68:10:be:25:
95:38:c5:72:52:5c:a3:75:7f:2f:8d:7e:a1:12:61:c2:07:f6:
b1:84:61:b9:14:6d:1c:e3:1f:c5:5a:b4:53:6d:7c:14:64:70:
6f:d2:fd:fa:74:e6:91:78:19:4e:59:32:a1:98:21:99:23:c0:
58:be:37:f9:bd:9a:da:41:d3:2f:8c:34:55:c9:ee:43:0a:9b:
5b:cb:d2:39:d9:67:f9:25:be:ae:6c:69:f8:b7:07:d0:b1:98:
8f:c5:dd:18:b4:e5:2b:84:5f:44:e4:0d:46:ad:e7:44:b6:14:
5c:dd:0c:65:9d:c8:4e:73:de:4b:7a:18:7b:e7:7d:0a:bd:bc:
04:2f:13:11:a2:81:d1:66:6a:67:88:e0:5d:dc:06:c8:1f:47:
46:e1:12:20:e0:a3:94:c0:6a:6c:22:0b:51:de:c8:c2:0e:48:
31:dd:7d:43:9f:cd:54:a5:ca:89:f5:a8:23:45:82:42:01:c3:
82:28:45:50:b3:3e:63:3c:df:99:0f:e5:db:8f:56:4b:0a:2a:
4f:cc:52:65:0f:99:a9:19:9f:68:eb:02:bc:f3:85:1b:a0:8f:
d7:c7:2b:9c:00:a2:18:04:3a:e2:72:3c:bf:3e:18:03:f2:97:
58:dd:04:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:44:37 2026 by rpki-client