Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
File: Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft (raw, json)
Hash identifier: 2Tc8cgJ7uc7K0dSrxCgfclts+hTOYZeY5ef0wqrgfKs=
Subject key identifier: 07:88:BE:6F:AA:F2:1C:14:5F:44:4A:E0:86:92:62:3C:06:60:AA:7F
Authority key identifier: 5E:6C:64:FC:20:CE:1D:97:2F:5E:34:74:31:90:48:A2:AC:65:6D:F1
Certificate issuer: /CN=5e6c64fc20ce1d972f5e3474319048a2ac656df1
Certificate serial: 019CAC0FE66652ABB5EB6D3F338D170C52A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
Manifest number: 1121
Signing time: Mon 02 Mar 2026 01:00:49 +0000
Manifest this update: Mon 02 Mar 2026 01:00:49 +0000
Manifest next update: Tue 03 Mar 2026 01:00:49 +0000
Files and hashes: 1: 6biWQQnc0CHW4mM9TF1Zeg3Rxuc.roa (hash: Pat5YGIm4+fu7xYnIi8/71KV0EL/f5Y/ZCFPyi82ugo=)
2: Xmxk_CDOHZcvXjR0MZBIoqxlbfE.crl (hash: zlWdBhBKdC9unhVtFfGG+CJJ5xGabpp0DJt1rXxoGcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:e6:66:52:ab:b5:eb:6d:3f:33:8d:17:0c:52:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6c64fc20ce1d972f5e3474319048a2ac656df1
Validity
Not Before: Mar 2 01:00:49 2026 GMT
Not After : Mar 3 01:00:49 2026 GMT
Subject: CN=0788be6faaf21c145f444ae08692623c0660aa7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2d:39:05:1c:b7:bd:ab:f7:c7:14:e4:a4:47:
9e:81:10:ad:85:72:d8:40:80:47:36:3f:b3:53:d1:
f3:14:60:03:0a:c3:97:01:aa:ee:4b:7a:e1:64:13:
b2:b1:d3:ed:4f:a8:07:c2:20:c3:8d:cc:8a:ad:34:
a7:ab:82:c3:3f:57:f7:2b:b0:f7:6b:bb:a1:ad:9f:
e4:d6:9b:05:a2:36:50:b5:45:01:b5:b0:f3:98:6d:
83:a0:60:07:16:cf:a3:4a:80:c6:8e:e6:76:ad:a8:
d0:53:6a:2b:1d:1b:28:a9:46:75:27:db:51:82:2b:
35:dc:22:53:84:ac:02:16:7c:2d:ba:a5:25:a6:cd:
14:9f:55:2a:4a:bf:7f:f1:34:09:a0:3c:f6:14:4b:
0a:f3:34:49:25:ca:df:45:42:5c:8b:8a:a8:52:06:
65:f9:5e:a9:17:ee:b8:b8:13:25:e6:67:2d:cb:75:
ca:3f:4a:a7:49:12:94:ce:0f:97:97:7b:f5:6d:98:
c6:cb:81:db:e1:0d:d7:a5:cd:7e:ec:bc:99:1c:b2:
0a:9e:03:fc:ac:5a:a4:cb:53:ef:02:60:55:ce:f1:
0d:d7:63:5c:89:0f:cc:cd:72:6f:3e:2d:17:8b:cb:
f5:d0:8e:1f:76:7e:80:8c:87:a2:0b:71:d8:0d:1b:
89:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:88:BE:6F:AA:F2:1C:14:5F:44:4A:E0:86:92:62:3C:06:60:AA:7F
X509v3 Authority Key Identifier:
keyid:5E:6C:64:FC:20:CE:1D:97:2F:5E:34:74:31:90:48:A2:AC:65:6D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:3b:47:25:0c:64:e6:14:a7:07:34:5b:a4:76:72:86:44:db:
87:89:66:c8:0b:94:eb:14:45:b2:d1:83:5c:87:8b:b8:a2:7a:
a1:1f:e4:62:7b:8b:f1:2d:05:79:c2:aa:78:36:be:22:f5:8a:
7e:2f:1b:9f:09:4a:b2:d6:7f:b8:dc:34:e1:1a:9a:e1:ff:5b:
7f:32:fb:0b:33:c5:59:6f:a1:95:6d:6f:25:20:9c:91:9f:24:
b5:d3:00:53:bc:e7:ef:2c:3f:1b:5a:cf:3d:8f:ab:07:4f:92:
2d:96:4d:1b:b6:20:56:0a:c1:91:1e:85:11:09:07:10:e5:8c:
cc:73:18:17:ba:94:6a:78:22:4e:da:a9:72:c4:0f:63:63:20:
6e:67:10:1e:cf:62:f8:4d:1f:4b:db:e6:da:97:24:79:c1:98:
b0:9f:78:e9:f8:b8:a7:80:4c:9b:88:c6:6d:75:4b:4e:30:dc:
f4:cb:2b:6d:0d:49:60:01:a7:55:1a:f7:6f:42:ed:cc:e6:60:
38:59:50:5e:a3:70:e5:b5:83:d2:e3:87:a7:72:5a:9f:07:50:
70:92:e2:72:45:01:bb:9a:dd:20:68:41:f8:55:34:7c:8d:3f:
b7:0a:86:fc:58:74:3c:fd:65:29:78:62:14:e5:04:9b:1c:c6:
f0:fd:04:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:42:31 2026 by rpki-client