Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft
File: XiNRj6qblKQtGjtNn2O5dDlNBmI.mft (raw, json)
Hash identifier: PZOg0kSmHTIWltAEPAW43HvnnEUn9meV0JP0jfVb2vo=
Subject key identifier: 24:78:10:7B:40:1E:22:DA:8B:7E:9A:04:DF:53:39:EC:2E:66:C5:A4
Authority key identifier: 5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62
Certificate issuer: /CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662
Certificate serial: 019CA945BD657DF70E87A4BBAC036E479141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft
Manifest number: 0686
Signing time: Sun 01 Mar 2026 12:00:45 +0000
Manifest this update: Sun 01 Mar 2026 12:00:45 +0000
Manifest next update: Mon 02 Mar 2026 12:00:45 +0000
Files and hashes: 1: 0-9sd-qmadUujczOz2WkJX2kNQA.roa (hash: GjNrMaOgADYzx542miG7jXCQg7xlwiNJxr+8IrSPpjc=)
2: LNYXeGK0fNHFOXoFsTX923sjqo4.roa (hash: HMZywae9ctDuPusaGMZ0nvtbkQTFjTevWXrmDyy57E0=)
3: W8vZ8aoRVKjvxUVny_OfYjJN6yo.roa (hash: FSZFedNs1YnxbjhewAgdDVFznFYlPK2O05FcBLwFtyk=)
4: XiNRj6qblKQtGjtNn2O5dDlNBmI.crl (hash: jJi1xaPRoNKmVJOwHqktB+wq8Cz5NkIvzmVIqgNBi2I=)
5: jTMK8c4Hxe-_GmhnJl2cbhlhwi4.roa (hash: EV9l1WgVc2rsgYc/+T8QGA8A2PJD5mEc20rAUOjgeu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:bd:65:7d:f7:0e:87:a4:bb:ac:03:6e:47:91:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662
Validity
Not Before: Mar 1 12:00:45 2026 GMT
Not After : Mar 2 12:00:45 2026 GMT
Subject: CN=2478107b401e22da8b7e9a04df5339ec2e66c5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:25:28:37:cc:26:0d:2e:ec:50:69:b4:2e:f8:
72:37:86:02:1a:a0:e1:dc:52:a9:54:96:5a:b6:c5:
f4:7d:f8:46:e7:6c:13:00:43:71:0c:3e:a7:ed:15:
d1:df:dd:62:a9:2e:05:a5:4f:d0:24:dd:1a:b9:a7:
d5:50:30:9a:fd:5f:1c:a9:ab:3b:bb:19:7f:71:e1:
0b:9c:aa:0f:e9:e5:0f:f3:9b:da:2d:c8:79:ca:6b:
2b:46:70:04:49:5c:46:d2:69:d0:fc:85:08:c4:95:
a3:f6:f1:97:3c:93:b4:89:d2:94:c8:00:21:af:ab:
c9:71:dd:cf:f7:5e:d8:b2:83:cf:0e:77:c2:f9:c2:
78:f4:a4:63:ff:12:4c:f0:ac:9b:6c:e3:a5:cd:d3:
9f:60:29:f8:b6:e9:46:96:0d:b5:c2:21:9f:f6:24:
09:05:db:27:f7:c9:fc:76:07:05:69:fd:3a:ac:ac:
72:bd:9c:8a:2b:21:54:a8:d5:74:25:3d:e6:7a:d5:
cb:d8:41:5e:4c:70:0f:a5:89:75:c7:e8:15:bc:70:
eb:e5:38:87:ae:73:68:9e:f6:05:0e:27:12:2b:1b:
9b:68:bf:06:b5:35:91:d9:89:32:3e:12:eb:82:8d:
e4:36:1d:74:ee:21:7c:15:af:df:0e:03:dd:d2:bb:
d5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:78:10:7B:40:1E:22:DA:8B:7E:9A:04:DF:53:39:EC:2E:66:C5:A4
X509v3 Authority Key Identifier:
keyid:5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:cc:3a:dc:39:05:ea:f5:42:57:83:23:bf:21:af:37:d9:7a:
a8:38:bd:07:43:d4:3c:a5:1e:e7:62:eb:08:9c:80:70:12:9a:
d5:51:95:23:2a:55:67:52:0f:cf:71:33:96:81:af:d4:15:48:
30:a9:15:93:3c:1a:e3:90:61:fa:1a:5a:b0:75:5d:63:e6:70:
2a:7f:ac:7b:ce:d9:0e:11:c4:e5:8f:db:12:c9:13:db:5c:a6:
68:5a:36:40:29:35:9d:8b:99:ef:73:66:43:7b:29:0e:60:b3:
a3:e9:84:88:c6:03:86:9e:83:4e:4d:c2:f7:97:1b:0e:41:93:
c8:7c:27:3c:8c:52:69:3c:39:f2:ce:c3:70:ce:96:06:bf:f1:
c2:db:26:52:11:95:f3:c1:93:34:68:7b:e5:1a:9f:b5:f3:35:
b6:f4:ad:53:1a:e6:3e:f2:a5:cd:9b:c6:48:c7:cd:62:cb:8e:
4e:1a:9c:1a:32:f7:96:26:20:31:e0:fa:08:e2:b0:74:8b:9a:
43:03:9f:63:c8:6e:7e:35:73:c3:2b:98:61:02:b6:a3:96:9a:
c5:e9:6a:19:ef:c1:c4:79:4f:56:87:40:13:db:b0:3f:ab:97:
5b:0f:23:f7:d7:9f:37:00:78:69:2f:f9:c6:61:32:7f:37:6b:
9a:8c:96:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:44 2026 by rpki-client