Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.mft
File: XfJyIcGPyv50iSvA6Xv17nw0T6c.mft (raw, json)
Hash identifier: 08mZlU4Sto1h4+nBlY3k2SW9ewOPtIHYspDsmxER6aA=
Subject key identifier: E2:6A:B8:28:9E:09:06:01:CD:3A:52:8E:A1:59:4D:89:1E:5D:1A:80
Authority key identifier: 5D:F2:72:21:C1:8F:CA:FE:74:89:2B:C0:E9:7B:F5:EE:7C:34:4F:A7
Certificate issuer: /CN=5df27221c18fcafe74892bc0e97bf5ee7c344fa7
Certificate serial: 019CAFEC8E1330AE56535323CF3E8443BD41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfJyIcGPyv50iSvA6Xv17nw0T6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.mft
Manifest number: 0E34
Signing time: Mon 02 Mar 2026 19:00:41 +0000
Manifest this update: Mon 02 Mar 2026 19:00:41 +0000
Manifest next update: Tue 03 Mar 2026 19:00:41 +0000
Files and hashes: 1: WIz4ju7mKgyhClPjYmZVPgV4tVg.roa (hash: bp+DO940zxxbXrDgbAxxoKvL8L9u5E+uFAMTt7Qg4XQ=)
2: XfJyIcGPyv50iSvA6Xv17nw0T6c.crl (hash: TtOku2GGFScviRqivaujEAo8tohk25XrhEvfKBM3B9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfJyIcGPyv50iSvA6Xv17nw0T6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 19:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:ec:8e:13:30:ae:56:53:53:23:cf:3e:84:43:bd:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df27221c18fcafe74892bc0e97bf5ee7c344fa7
Validity
Not Before: Mar 2 19:00:41 2026 GMT
Not After : Mar 3 19:00:41 2026 GMT
Subject: CN=e26ab8289e090601cd3a528ea1594d891e5d1a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:86:ce:a0:b2:ea:e4:03:d1:e7:54:cb:c5:9a:
a2:17:03:f7:8d:3a:d0:30:57:44:38:d8:59:9f:c3:
9c:17:34:b5:e2:af:d6:57:5f:5f:11:8d:57:f2:4c:
83:e2:a3:de:8b:9b:8c:d9:30:5e:92:60:c3:6a:dc:
e3:19:82:25:18:2f:10:ac:3e:55:46:aa:c7:3a:e2:
47:64:58:fa:7f:36:41:04:ad:38:b1:48:1f:f0:aa:
23:fd:98:9f:98:cf:9a:04:ae:c0:2a:43:b6:87:0e:
d5:e3:01:7e:01:e3:32:b1:e9:6f:ed:be:5c:0d:62:
9a:19:16:4f:84:f0:c4:71:c1:2e:6e:62:52:a4:6d:
5e:96:a6:3f:84:8f:23:02:85:3d:59:cf:77:77:e1:
56:4d:87:14:79:e0:c0:03:f2:05:20:94:e8:fd:43:
b9:66:0f:5c:a0:4a:8c:f2:cb:08:50:c2:60:ec:0a:
88:ea:ea:69:0b:5a:f4:35:78:93:b7:96:d3:59:7a:
dc:58:da:45:3f:0d:b9:80:a8:67:70:d5:c2:f7:8d:
f6:29:bd:fe:10:6a:d4:71:5a:d5:e5:28:a7:46:ec:
65:43:5c:87:b8:64:75:f8:d3:93:c5:bd:2b:a8:ee:
54:0f:57:9c:89:95:fb:a2:62:80:52:23:fa:2e:17:
aa:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6A:B8:28:9E:09:06:01:CD:3A:52:8E:A1:59:4D:89:1E:5D:1A:80
X509v3 Authority Key Identifier:
keyid:5D:F2:72:21:C1:8F:CA:FE:74:89:2B:C0:E9:7B:F5:EE:7C:34:4F:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfJyIcGPyv50iSvA6Xv17nw0T6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f9:1e:6a:23:54:5c:82:99:86:79:49:99:cc:f2:b8:09:07:
06:c6:6d:f3:e9:af:a2:15:cc:02:60:82:9b:70:3e:24:bf:74:
6e:fc:c7:34:3e:7c:6e:2a:f2:c8:39:fc:fc:6a:82:1e:60:99:
05:42:70:0d:57:db:34:24:b9:fe:f6:37:4e:a6:88:b3:b3:6b:
5e:ef:28:e2:17:36:d1:14:08:c1:3d:86:53:47:f1:a8:d4:19:
b3:21:b9:85:2a:1e:0e:0f:33:8c:c8:d2:30:8e:b7:00:88:78:
fe:70:7d:d5:2b:72:cb:79:db:da:b9:89:c3:97:aa:32:ea:19:
83:1c:b9:6b:8f:d0:76:05:4b:96:89:2d:ea:24:3c:a4:d9:e1:
58:6e:c8:bb:bf:39:19:82:91:90:ea:5d:89:87:3a:2b:89:61:
e3:d3:83:47:fe:56:f2:2e:b9:a8:23:08:7c:5c:42:0c:ae:3c:
6b:8a:80:e5:71:00:cb:23:1f:3d:0c:1e:5e:07:d6:d6:1b:ad:
77:72:95:e3:92:93:8d:db:4f:a0:21:f8:e8:ef:7c:00:75:26:
17:c5:73:0e:49:5c:0b:45:df:eb:9b:ca:6a:75:e9:15:c5:5e:
12:6c:cc:1b:9a:4b:d0:4c:5d:34:51:dc:9b:bd:30:ff:6a:8e:
47:89:cd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 03:52:06 2026 by rpki-client