Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
File: XtmdScSw5GsnhoQnMeFTSFyKxIs.mft (raw, json)
Hash identifier: pFDHoUkuMWGvl3IPhb33ItkWo4otNECN0UDYdcGavCA=
Subject key identifier: 6E:49:43:FD:9B:3E:5D:70:8E:E1:3B:02:0A:80:79:E5:7D:50:AD:9B
Authority key identifier: 5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
Certificate issuer: /CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Certificate serial: 019CAC0FEA6477E47F8EF94CF49BE536971F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
Manifest number: 0F28
Signing time: Mon 02 Mar 2026 01:00:49 +0000
Manifest this update: Mon 02 Mar 2026 01:00:49 +0000
Manifest next update: Tue 03 Mar 2026 01:00:49 +0000
Files and hashes: 1: 1-nsaGOYJDQs8nE83JBsjbwYRoPA.roa (hash: ZorqeuTKQ8BzMES+IbO5PhiAMx62C25+2z4OV8xpzBs=)
2: XtmdScSw5GsnhoQnMeFTSFyKxIs.crl (hash: QDYC74sO/JSiP2Poy0wXvQ+s431jfFvsFBHr/Pi1zXA=)
3: fYv6u6ZqsaaVuf2RxvvaolhNBjk.roa (hash: jVk92j+q/o1dRJaAKw+eFCSe6j9s2E6quPaItwZl0/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:ea:64:77:e4:7f:8e:f9:4c:f4:9b:e5:36:97:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Validity
Not Before: Mar 2 01:00:49 2026 GMT
Not After : Mar 3 01:00:49 2026 GMT
Subject: CN=6e4943fd9b3e5d708ee13b020a8079e57d50ad9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:17:12:c5:1f:cf:c6:db:a4:65:a1:9e:81:b8:
4d:4e:6a:9c:e0:fd:64:ab:21:8c:96:f0:5a:a4:67:
fa:b5:a4:d1:d7:21:38:63:32:14:97:62:1d:1b:47:
84:da:da:db:98:ec:52:c2:38:c3:9e:b2:c8:53:62:
2d:d7:0a:06:d1:be:58:d9:20:46:2b:7e:30:72:a0:
b5:27:a0:7c:e8:f1:b0:7e:d5:32:fd:32:b5:47:0c:
b2:cf:bd:80:9a:51:38:e8:50:83:1e:15:4e:96:56:
22:c7:72:f8:01:22:cf:22:18:53:20:1f:96:66:fd:
9c:67:7f:d6:4e:b9:f3:8f:09:8c:5c:c2:6b:22:a6:
ae:69:91:80:1b:e3:37:60:56:11:fd:e6:36:7a:c2:
8e:5d:61:de:47:9d:44:56:96:c4:3f:d9:b0:a8:15:
55:7c:b5:e5:e9:e4:5a:b1:9f:b9:f8:9d:fe:b9:12:
51:28:40:06:c3:61:e6:e6:34:66:e4:17:c6:eb:29:
ec:9f:91:cc:9f:3f:9a:36:2b:12:f7:64:98:c1:41:
b7:a8:84:7c:4d:ac:c4:00:4a:5f:28:a7:f0:cf:8f:
de:c9:df:86:75:68:d0:37:ae:3b:4a:cb:82:cf:8b:
fa:67:59:e2:03:d8:f5:86:50:7f:36:4e:a5:38:f1:
36:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:49:43:FD:9B:3E:5D:70:8E:E1:3B:02:0A:80:79:E5:7D:50:AD:9B
X509v3 Authority Key Identifier:
keyid:5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:30:67:9d:f3:f0:5c:23:66:aa:ae:24:a6:ba:02:7c:39:79:
38:70:8f:f3:8a:cb:88:9e:16:63:bc:e7:77:65:97:31:08:4b:
4d:42:c8:83:4b:2e:d6:32:9c:1f:30:b0:ad:8f:9a:06:88:e6:
e9:75:53:0d:24:9d:8f:fc:1a:fd:d4:07:b1:c1:67:21:e1:60:
1f:91:d0:b6:bd:d9:cf:61:51:5e:9a:45:97:1b:86:65:00:6c:
b7:32:e6:17:52:6e:ec:db:65:22:d8:bf:7e:c5:6e:fd:83:3a:
20:26:72:b5:f8:3c:0c:be:c2:99:41:1c:0e:11:a4:dc:64:fd:
ec:57:a3:5c:ab:52:a5:e5:a1:77:50:53:df:0a:25:85:58:7b:
5d:db:eb:6a:b5:db:68:bf:b6:d5:fb:98:ab:e5:e9:4f:aa:e2:
e4:f2:01:cd:b0:16:35:bb:1f:7f:ae:5d:24:cc:db:a5:f2:0c:
05:d2:f7:a1:39:31:ee:07:2a:9a:1d:68:c2:86:56:8f:cd:70:
bf:48:bf:08:b0:4c:18:d8:e9:fa:8b:b7:f2:ac:d6:f0:0a:22:
85:85:f8:2d:a4:7e:ed:45:19:b2:2c:af:27:f6:f2:cc:05:b4:
5d:04:e3:b6:2b:36:59:08:16:32:8c:41:05:5e:24:8f:9b:16:
28:9b:ed:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:06:32 2026 by rpki-client