Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
File: XyxxJryPOQVnRN4hOyzia3a8mSM.mft (raw, json)
Hash identifier: 7+M+nR2xbDjAIQf3O6DQvAOlOqYOnLJ7NWJnPvopZhY=
Subject key identifier: B0:79:52:27:54:CF:08:C2:04:89:AF:3E:D8:1E:C0:1F:42:E7:F4:CE
Authority key identifier: 5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23
Certificate issuer: /CN=5f2c7126bc8f39056744de213b2ce26b76bc9923
Certificate serial: 019CABA258ED73A851907C7A67118B1F5CB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 23:01:09 +0000
Manifest this update: Sun 01 Mar 2026 23:01:09 +0000
Manifest next update: Mon 02 Mar 2026 23:01:09 +0000
Files and hashes: 1: XyxxJryPOQVnRN4hOyzia3a8mSM.crl (hash: 0+Zo+A41pS3LDiyq2/ZgLtyKql4Rf2MAQwReMR5wXF4=)
2: rUpXn5OLFWI8Nb4opFx-ZMazNF4.roa (hash: CyKHZsof9BroFMJ4kJHFaNGpd7KJ3UUKrH85vt5M3yM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:58:ed:73:a8:51:90:7c:7a:67:11:8b:1f:5c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f2c7126bc8f39056744de213b2ce26b76bc9923
Validity
Not Before: Mar 1 23:01:09 2026 GMT
Not After : Mar 2 23:01:09 2026 GMT
Subject: CN=b079522754cf08c20489af3ed81ec01f42e7f4ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:68:cd:46:bb:37:e6:1b:92:16:10:37:03:26:
f8:8d:74:96:22:25:3b:f6:04:eb:70:74:8a:dc:a3:
68:21:27:cf:3d:af:15:0d:e6:0c:58:2c:1d:38:2b:
e4:0d:1d:16:7d:a2:4c:9e:31:05:3a:cd:ae:1f:3a:
06:db:95:9a:cb:6e:dc:98:02:43:12:37:1b:57:40:
72:cc:f0:a4:28:79:2c:fa:7a:70:13:06:3d:8b:94:
87:1b:09:6e:bf:e6:f4:4d:be:0d:87:0f:cc:af:ed:
a8:b8:e9:1c:5a:83:31:e6:96:f2:79:e9:3b:2d:1a:
26:a2:9f:70:96:91:7d:92:dd:1b:cc:32:86:10:dd:
9d:fb:3c:df:e5:95:be:f8:81:fe:22:af:49:94:3f:
0e:e2:db:8a:91:e0:f4:79:10:91:70:37:95:b7:4e:
58:80:de:36:ac:13:2a:80:7f:a8:be:f9:b8:b2:89:
80:2e:09:63:ad:b5:ce:ed:d9:1a:b1:33:f3:0b:79:
d0:b3:b4:2a:84:ec:7f:e0:d5:e1:a2:14:33:56:1c:
6f:22:9e:c1:67:cd:10:4f:9b:1b:9d:b3:ed:b0:69:
3a:22:28:81:d6:b8:b7:47:86:ba:dd:2e:10:4f:b2:
aa:cf:db:cc:cf:8e:c8:53:ef:ba:49:74:87:43:62:
54:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:79:52:27:54:CF:08:C2:04:89:AF:3E:D8:1E:C0:1F:42:E7:F4:CE
X509v3 Authority Key Identifier:
keyid:5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0a:d5:5f:d1:83:ee:fe:4d:d5:4f:ad:30:3b:4a:67:2e:a6:
44:ed:48:21:ea:0c:9e:af:93:65:65:25:5c:49:4c:54:d0:eb:
7b:9c:6c:4d:4b:95:56:76:0f:3f:03:19:0c:9a:ae:9a:ed:78:
1e:43:ab:6d:7a:fb:c5:5c:a3:7e:a6:10:2e:2a:d0:c6:8a:ae:
2f:8b:f9:6c:75:10:a4:fd:e5:f7:a0:30:c6:89:07:1d:72:49:
56:c5:ea:1d:af:9e:e5:9c:df:37:6f:12:9f:16:a1:fd:83:ff:
54:db:78:4e:f9:93:fa:f3:22:2b:3b:88:dd:de:31:1b:c5:61:
62:f3:f1:fd:3e:52:62:42:29:f1:90:ad:a9:14:23:0a:7e:24:
28:af:a3:17:98:eb:44:fd:78:14:18:c5:6e:d8:57:b8:7b:22:
82:a8:0d:2b:38:e9:64:3a:85:a4:5e:1b:d8:7f:7b:4d:5a:14:
18:61:93:72:d4:6e:ec:eb:2b:76:8b:3f:2c:ee:d0:4d:64:35:
2c:22:a2:93:5d:34:85:00:6c:e1:36:e6:e0:36:91:67:44:46:
7a:d4:5d:f9:0b:a3:1a:8f:dd:03:91:9b:44:bd:05:23:a5:ba:
ef:9d:bb:fe:5c:3e:81:6f:57:1c:84:70:4c:f5:bd:7a:4a:d2:
74:c1:73:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:41:23 2026 by rpki-client