Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
File: XtmdScSw5GsnhoQnMeFTSFyKxIs.mft (raw, json)
Hash identifier: ZO8LykVvIt+xH9da+RmIz3gWzhRSnVEUEpGAeHGg1Hc=
Subject key identifier: 57:2F:51:2D:B4:FC:7A:9F:FC:FA:81:A0:A9:72:59:C4:CC:01:B4:D9
Authority key identifier: 5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
Certificate issuer: /CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Certificate serial: 019CADFE502876694101F90C0B8B568694B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
Manifest number: 0F29
Signing time: Mon 02 Mar 2026 10:00:50 +0000
Manifest this update: Mon 02 Mar 2026 10:00:50 +0000
Manifest next update: Tue 03 Mar 2026 10:00:50 +0000
Files and hashes: 1: 1-nsaGOYJDQs8nE83JBsjbwYRoPA.roa (hash: ZorqeuTKQ8BzMES+IbO5PhiAMx62C25+2z4OV8xpzBs=)
2: XtmdScSw5GsnhoQnMeFTSFyKxIs.crl (hash: XVIX/qJ8Ic15Oawuh7JfiAjfbphwF+n4NZumwchFrTU=)
3: fYv6u6ZqsaaVuf2RxvvaolhNBjk.roa (hash: jVk92j+q/o1dRJaAKw+eFCSe6j9s2E6quPaItwZl0/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:50:28:76:69:41:01:f9:0c:0b:8b:56:86:94:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Validity
Not Before: Mar 2 10:00:50 2026 GMT
Not After : Mar 3 10:00:50 2026 GMT
Subject: CN=572f512db4fc7a9ffcfa81a0a97259c4cc01b4d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a3:cb:a8:ff:a1:7c:1b:45:c2:ce:9c:4a:7f:
eb:c3:5f:e2:80:6b:fe:17:68:ed:cb:e3:ed:4d:45:
dd:28:8c:09:f3:bc:05:3b:f3:b6:06:2b:29:62:d6:
ea:db:68:87:c3:d4:b5:77:5a:5e:d9:8a:d1:65:ea:
86:9c:ba:63:07:42:6e:ac:73:d6:80:c3:bf:79:29:
8d:cc:60:46:0d:30:e8:b9:3d:23:ad:20:5a:74:df:
ec:14:66:f1:22:f9:16:00:24:b8:b7:31:96:db:4a:
a2:29:6e:d3:81:f8:67:eb:1b:2f:04:05:80:27:3b:
a3:e6:2b:65:20:d7:25:05:ed:66:9a:9d:83:61:38:
b4:14:6d:26:cd:7f:d4:37:9b:87:58:49:aa:81:ea:
6e:22:c3:81:19:e5:5e:0e:eb:23:2c:64:7d:7e:34:
be:9e:0d:ca:fc:7f:e1:7c:e8:f1:50:28:f4:65:fc:
3c:35:e8:9f:ba:a7:14:63:c1:27:bd:54:0c:c3:c1:
d4:6f:df:9f:0a:47:86:a6:15:e5:9d:cf:99:8f:39:
62:5b:4b:72:b9:fb:9d:5c:3f:2c:27:e4:1a:4b:aa:
d2:32:17:b9:60:05:19:0f:3a:ec:4c:4e:fc:54:7d:
4d:78:cf:72:5e:3b:9a:cc:98:54:e0:6a:16:a9:be:
3f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2F:51:2D:B4:FC:7A:9F:FC:FA:81:A0:A9:72:59:C4:CC:01:B4:D9
X509v3 Authority Key Identifier:
keyid:5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f8:dc:dc:69:a7:17:8f:f1:46:8e:1c:8a:2c:48:16:f0:1a:
08:4d:de:a3:e3:b4:ba:77:bf:d2:a7:8a:9e:0d:4f:a2:97:f9:
27:24:06:28:8a:b5:8b:0f:68:07:16:90:76:41:56:7a:c4:41:
54:24:bf:47:3c:31:bb:fe:71:f1:45:cd:90:b3:68:c8:f0:d1:
98:2e:f4:ee:26:c5:6a:a9:03:ca:6e:7b:ac:08:6c:59:71:4d:
68:81:f0:86:df:fc:91:03:ce:0c:0c:4b:b1:ee:a0:50:d1:bc:
0d:55:34:14:73:a2:50:54:14:e1:0a:46:a4:91:ea:6f:6a:26:
6c:43:bf:2c:91:a6:cd:4a:b9:8b:69:c9:5d:6e:00:a6:6d:32:
f3:bd:77:f6:0a:01:87:2e:0e:1f:96:c4:ae:8e:35:f5:b6:80:
c3:20:c8:2a:d0:b8:bb:61:11:40:c3:f6:38:4c:2e:40:84:00:
e1:bd:19:53:35:e0:ca:49:90:c8:75:0d:32:f9:ee:7f:ca:2c:
86:de:46:ec:81:91:ae:c2:e7:07:ec:17:ae:80:6b:b0:f4:8d:
d5:60:78:59:c5:b8:f8:bd:93:9c:b5:7c:81:ce:c9:fd:b1:91:
33:3c:90:5e:17:71:e4:0f:b0:e4:9a:99:ae:37:b0:0c:c0:bb:
49:2c:2d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:50:44 2026 by rpki-client