Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
File: xSJOpF0IHUAv_Wv03ZXj_28txIE.mft (raw, json)
Hash identifier: lWea0814fnTuMRGqnTp92Vq3VsV5RGN344OUgA5Nzho=
Subject key identifier: 3D:ED:47:F4:8C:4B:44:A8:33:42:6F:20:D7:0E:AE:83:4A:36:9B:51
Authority key identifier: C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81
Certificate issuer: /CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481
Certificate serial: 019CAEA340A23A4321CBDB3F585D7C6C1455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
Manifest number: 0D01
Signing time: Mon 02 Mar 2026 13:01:00 +0000
Manifest this update: Mon 02 Mar 2026 13:01:00 +0000
Manifest next update: Tue 03 Mar 2026 13:01:00 +0000
Files and hashes: 1: LpqEZBj1hD6LUjiFVP5RJmbjDc0.roa (hash: MkMyhvMq/UW3J/dY/hJ1MwyOPfnqAuGRvt2LQG0g8xw=)
2: xSJOpF0IHUAv_Wv03ZXj_28txIE.crl (hash: CGP6bYEl8rGIF382YYWLooCYFEEjoxyJFwscUK6YT6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:40:a2:3a:43:21:cb:db:3f:58:5d:7c:6c:14:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481
Validity
Not Before: Mar 2 13:01:00 2026 GMT
Not After : Mar 3 13:01:00 2026 GMT
Subject: CN=3ded47f48c4b44a833426f20d70eae834a369b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:60:3d:a9:f6:ad:4f:5b:ea:1f:40:62:82:73:
be:c8:52:b6:4f:db:16:cf:98:14:51:52:3a:46:fb:
ad:9a:f9:d1:b5:b3:1f:ac:04:fb:6c:9d:e6:28:47:
96:ab:85:c4:16:66:7c:73:3d:aa:09:1f:d4:a1:cc:
65:3b:54:08:54:eb:c1:fc:2a:b9:13:7b:45:2e:20:
b0:1f:0d:58:3a:a1:6a:db:46:20:98:d7:2a:97:69:
79:a8:c6:f2:43:72:c5:9b:58:48:cd:6d:3f:81:25:
9b:f3:2a:fe:92:5a:cd:6f:e3:0e:a8:7c:ce:c7:64:
52:fc:29:25:95:21:0c:9d:36:21:6a:35:83:1e:f7:
15:34:79:82:fe:27:cf:9c:af:b3:72:cf:8d:d3:ab:
82:54:6d:9c:9a:ba:17:40:4d:44:97:f5:9b:24:7d:
2e:a9:08:22:b6:78:ed:f3:af:ea:84:f8:9f:f2:9c:
4b:77:e8:5d:0a:57:5f:e8:60:61:4b:0b:79:ee:d2:
b4:18:a0:72:fb:92:07:d2:29:08:5d:09:ee:ee:e8:
df:16:18:1b:92:58:b0:af:f4:c5:78:bf:c8:8c:43:
75:5f:bb:6e:13:d4:a2:76:80:54:cc:95:4e:19:1a:
67:82:3a:38:96:0e:91:ba:d9:eb:65:bd:9a:16:7c:
b1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:ED:47:F4:8C:4B:44:A8:33:42:6F:20:D7:0E:AE:83:4A:36:9B:51
X509v3 Authority Key Identifier:
keyid:C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a2:86:e4:3f:56:8c:ec:bf:ea:bd:16:21:12:10:96:09:7d:
7b:40:26:86:fb:fa:8f:5a:8d:32:7f:e6:46:e5:72:05:59:4d:
21:a3:ce:d5:60:8f:db:2b:8e:08:e2:c6:1f:89:0f:1c:1b:1c:
74:b2:a8:f4:cb:09:98:bf:3e:1a:66:d3:65:ae:c8:1c:06:6b:
d7:9b:9e:72:ce:69:8d:4a:56:8e:08:bf:b2:da:9a:d2:da:e1:
4d:b9:37:53:2c:af:76:a6:ce:97:68:dc:2c:07:ce:20:67:6a:
44:ef:d9:7d:f7:a8:8e:55:4f:92:b7:ed:a9:12:d1:c2:bc:a5:
55:75:a3:a3:63:46:ac:87:ff:82:9c:0c:c5:eb:57:9f:5b:4c:
e4:b2:53:f2:38:96:99:53:d3:35:94:59:22:b6:a2:09:77:d5:
ec:04:8c:61:c7:cc:8b:ee:7d:d1:f3:a6:22:f7:cf:4a:7b:d4:
23:ec:0c:a8:0d:80:4d:67:e3:b9:37:2f:84:39:88:ca:16:fa:
00:a2:ad:0f:a2:87:95:99:82:68:fa:9f:43:dd:64:e1:ec:31:
e8:27:56:ea:09:1a:87:06:fe:53:1c:7c:17:ce:92:90:61:c0:
7b:f7:e6:8a:7b:3e:1a:e0:0a:5a:b3:50:bf:df:e8:a4:74:1f:
b9:3b:1a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:08:25 2026 by rpki-client