Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
File: Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft (raw, json)
Hash identifier: Xi8ay7m1k8wJoixR+fE98nOIyBljY1016XXBLKlY5nY=
Subject key identifier: C2:BB:08:B5:DC:12:5C:02:03:41:1F:CC:EE:86:72:14:37:40:E8:7F
Authority key identifier: 5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
Certificate issuer: /CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Certificate serial: 019CAD22944E87D064F45F2A6EF682D7C74C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
Manifest number: 0D39
Signing time: Mon 02 Mar 2026 06:00:50 +0000
Manifest this update: Mon 02 Mar 2026 06:00:50 +0000
Manifest next update: Tue 03 Mar 2026 06:00:50 +0000
Files and hashes: 1: RrwlRSSdwln9HbzArcN9f7ThR9c.roa (hash: Ic3y0/hXv+5FL5zNAqt7WX+ncQH0cGC5wuQsjbsXF7I=)
2: Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl (hash: 51aT0NJEQzhYnqGwt2H+LfCBKU77KSKm41i6I1cCYYQ=)
3: fWpL_ta7aXoIKT8lwYmDL0nQegU.roa (hash: r+7J0jRgrAdlkGpSk5T7jtJhr78GxAY9zYWBhS85+uQ=)
4: l5tw0iDO7abT_AibKjZJaQ4nwWc.roa (hash: r+71S+WnEwowT4NhvO1eI4eYiERh6tzaeOlSbc80Img=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:94:4e:87:d0:64:f4:5f:2a:6e:f6:82:d7:c7:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Validity
Not Before: Mar 2 06:00:50 2026 GMT
Not After : Mar 3 06:00:50 2026 GMT
Subject: CN=c2bb08b5dc125c0203411fccee8672143740e87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:39:6b:92:8e:c4:c9:bb:66:28:67:9e:2f:57:
71:db:fc:5b:7e:08:c3:2e:c2:a0:28:74:af:ab:18:
ae:04:4b:50:29:7b:9c:d0:ba:81:24:fa:c5:69:a4:
62:10:c6:e3:43:56:eb:a9:eb:e7:1a:49:f7:29:31:
04:51:94:3d:51:0c:d8:d5:cb:d2:c7:57:af:ac:55:
2d:66:0f:13:3f:91:a7:ba:2f:da:19:a3:b8:c2:ba:
32:04:0c:61:89:95:ab:09:39:e5:a4:d1:46:49:16:
65:f5:2a:d6:e1:c8:58:7a:aa:54:d8:35:d4:92:69:
b2:f5:6e:a2:b8:6e:04:9d:6a:31:a7:d2:55:4b:dd:
cc:a9:3a:e2:13:a5:65:04:44:19:17:9d:ea:17:49:
e1:cb:9a:cc:02:39:91:b4:55:94:bd:63:9a:49:66:
87:ef:91:b6:a9:40:fc:ae:8c:ed:b0:89:b2:7c:ab:
6f:70:a2:5e:83:20:4c:5c:ca:f9:61:75:8e:4c:bb:
94:e9:46:36:ae:17:1d:f5:b2:97:ee:4f:ca:2b:54:
31:8b:7f:1c:57:0e:23:c6:29:d2:cd:2b:06:45:cd:
9e:ba:14:c9:a1:d0:ce:db:82:85:87:18:49:0a:f8:
fa:42:f0:55:7f:b4:28:41:f9:6a:d4:fe:66:c2:af:
84:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BB:08:B5:DC:12:5C:02:03:41:1F:CC:EE:86:72:14:37:40:E8:7F
X509v3 Authority Key Identifier:
keyid:5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f6:3c:f0:52:13:d0:df:4b:fb:72:b4:6b:d0:af:ab:49:2a:
51:f3:f3:10:0e:3c:48:98:a8:2b:ef:21:8a:16:fe:95:e8:30:
29:c7:53:15:68:8a:46:f4:ec:91:57:58:01:7a:c4:ca:59:46:
7a:7a:a2:a5:f7:5e:4b:34:5f:76:4c:ec:55:57:47:0a:f0:03:
02:53:29:04:74:f8:7e:5d:66:05:5c:e5:c2:19:e1:80:7f:c3:
af:01:fb:f6:1b:4b:3c:b2:d7:7e:69:a2:1d:56:14:0a:63:0d:
ac:57:a8:97:9e:7c:43:0d:78:fd:52:d5:6a:1f:e7:32:1e:2e:
56:e0:b4:2c:e3:cd:aa:f4:e4:53:56:10:3c:74:c8:9c:1b:0e:
ec:99:77:75:52:2b:3d:79:6c:19:2d:54:4b:59:34:70:0b:00:
95:01:d7:90:21:7f:5d:f2:84:f7:c9:8c:d0:e0:2e:5f:46:80:
cb:4f:3f:13:6f:52:f3:c9:31:fa:b2:f9:bf:81:ec:5b:ff:49:
24:d5:e0:5e:3e:b9:7e:5b:c0:e7:4f:e1:c5:90:c4:57:d9:cd:
59:62:92:f3:10:73:f5:dc:b1:d7:21:c2:67:80:fe:f4:ba:b9:
7f:cc:03:9a:3c:0a:31:f4:8a:0e:d2:05:8e:c1:e5:c9:fa:9f:
d0:2d:b1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:53:18 2026 by rpki-client