Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
File: XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft (raw, json)
Hash identifier: Lbox15UQJ0S0PZywvFzyY5SLZvd8pSXdHW9zwHg+HhA=
Subject key identifier: 1E:16:91:74:CD:52:C5:D9:D6:28:6F:CA:D9:65:4A:DD:FD:E4:D1:11
Authority key identifier: 5D:41:D3:30:DC:8C:72:93:E7:29:45:1D:B2:64:63:83:83:8E:3F:8C
Certificate issuer: /CN=5d41d330dc8c7293e729451db2646383838e3f8c
Certificate serial: 019CA832F060C08E8782835E7779B026FEE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
Manifest number: 36
Signing time: Sun 01 Mar 2026 07:00:36 +0000
Manifest this update: Sun 01 Mar 2026 07:00:36 +0000
Manifest next update: Mon 02 Mar 2026 07:00:36 +0000
Files and hashes: 1: PDKY0YNxgfL-wdtHC7OMqbGRy6Q.asa (hash: 4mulaDEjjaiJyNExN4M0awWM7+bcCqHjl7wFr6Imm1M=)
2: XUHTMNyMcpPnKUUdsmRjg4OOP4w.crl (hash: xFrUjBKYRYidwZJuueWuFnMbRGoidNEK5kxlJbT4GgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:32:f0:60:c0:8e:87:82:83:5e:77:79:b0:26:fe:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d41d330dc8c7293e729451db2646383838e3f8c
Validity
Not Before: Mar 1 07:00:36 2026 GMT
Not After : Mar 2 07:00:36 2026 GMT
Subject: CN=1e169174cd52c5d9d6286fcad9654addfde4d111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8f:41:a7:d9:c0:f7:c7:dc:a5:c5:71:9c:84:
52:ee:8e:c8:dd:e3:a6:e7:69:38:0a:f2:fd:fd:16:
00:6f:36:07:0b:e9:a4:c7:61:58:db:79:cd:1a:5f:
e8:af:75:32:cd:94:4c:4a:dc:42:cc:6b:af:f2:8e:
73:cb:ee:78:97:23:4f:cc:ec:9c:09:47:a9:f7:e1:
1a:85:ba:dd:b8:62:cd:f5:ab:b7:db:20:49:bf:4a:
c5:db:a0:53:67:32:01:5d:d7:65:ba:68:be:11:2d:
6e:72:89:83:e3:c6:53:08:81:fa:2a:6c:08:52:1e:
ee:7b:93:f3:9f:ac:e9:0c:8b:c8:13:3a:90:d8:1a:
4a:db:8d:03:db:b8:b4:f5:b0:fb:d3:01:f4:b2:fb:
9a:82:82:34:10:50:51:7d:f7:9e:a3:71:15:85:c2:
9b:5f:00:ca:e1:85:1f:8a:db:90:91:0f:b4:fc:73:
b9:cd:d8:e4:43:e2:91:52:e2:51:c3:36:d3:e3:b8:
e5:cd:86:c9:b5:e7:0c:52:83:d1:9b:03:7e:c5:e3:
25:6d:a3:fd:32:c6:ac:bd:10:94:8a:3b:ae:0c:7a:
ac:ed:ac:0f:0f:8d:0a:af:2c:46:df:2e:a6:2b:a1:
c1:3b:e8:83:92:d4:39:8d:7e:37:e5:db:8a:f1:2a:
f2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:16:91:74:CD:52:C5:D9:D6:28:6F:CA:D9:65:4A:DD:FD:E4:D1:11
X509v3 Authority Key Identifier:
keyid:5D:41:D3:30:DC:8C:72:93:E7:29:45:1D:B2:64:63:83:83:8E:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:34:55:c1:0b:d0:85:f5:39:51:3c:7b:d3:4a:b9:fb:62:c3:
6c:c6:87:71:a4:30:ef:84:30:ee:16:9f:a8:a7:60:ac:da:85:
ef:de:cf:7d:18:14:f5:b0:76:ba:fc:56:83:5d:c0:cb:8c:21:
35:82:42:c4:5a:6d:2b:27:aa:d9:72:51:63:6f:7d:62:1b:57:
a2:2b:26:63:e5:0c:f6:a0:a8:63:71:98:54:19:73:1c:ee:65:
e5:55:dc:d5:95:ee:3f:ab:3c:54:81:6c:70:06:89:2d:ce:e1:
29:6c:95:4b:df:c8:39:89:a0:30:b2:0a:52:ea:f7:5f:ab:18:
6a:87:82:ca:71:14:ac:38:99:fe:c5:33:c9:85:8a:9f:0a:b6:
03:a1:3f:ba:5e:75:2c:60:fa:6b:6a:e5:a2:34:29:60:32:15:
8e:5e:1b:02:48:80:40:dd:52:96:fa:92:de:00:52:5d:ca:ac:
48:87:6a:37:b3:a5:d2:1e:1b:60:8a:f8:14:1b:11:3d:7d:73:
7a:f2:79:9e:01:d0:88:28:1f:42:df:69:02:de:44:48:2a:92:
77:0e:da:8e:a9:78:64:ef:26:73:cc:fe:5e:3b:57:5f:cf:01:
20:0a:3b:74:30:f8:04:93:9f:0e:e5:2a:9d:c5:23:8f:c9:d8:
80:4c:ef:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:40:27 2026 by rpki-client