Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft
File: X2c9L2Ia4xQHABdIu95jisvYYFA.mft (raw, json)
Hash identifier: tTTOzYNk8lrXBDUjExXN0F9a5ncofTVj3qOkDvSEgcs=
Subject key identifier: 6F:A8:9B:3E:B6:B7:51:D5:AB:A5:BC:C4:67:9B:4A:C5:5B:79:D8:78
Authority key identifier: 5F:67:3D:2F:62:1A:E3:14:07:00:17:48:BB:DE:63:8A:CB:D8:60:50
Certificate issuer: /CN=5f673d2f621ae31407001748bbde638acbd86050
Certificate serial: 019D985034D6DA7B58F1AE8600BB8FCD9AD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft
Manifest number: 0936
Signing time: Thu 16 Apr 2026 22:01:26 +0000
Manifest this update: Thu 16 Apr 2026 22:01:26 +0000
Manifest next update: Fri 17 Apr 2026 22:01:26 +0000
Files and hashes: 1: EFQb-DdMIUfYk8otFJG8FPsYqSg.roa (hash: xz8HTmmrpuajVW7QayylP4C5tRbZcnyfwKq4BdsJEEg=)
2: X2c9L2Ia4xQHABdIu95jisvYYFA.crl (hash: CbzDfAQdxy5ogIa8Au1zTWf8OmVbwALyS7pL373t7HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:34:d6:da:7b:58:f1:ae:86:00:bb:8f:cd:9a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f673d2f621ae31407001748bbde638acbd86050
Validity
Not Before: Apr 16 22:01:26 2026 GMT
Not After : Apr 17 22:01:26 2026 GMT
Subject: CN=6fa89b3eb6b751d5aba5bcc4679b4ac55b79d878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:48:53:21:6a:78:31:0d:46:15:9e:2a:9d:c5:
28:35:13:bc:d0:ca:69:c4:e4:f5:7d:73:54:9d:a8:
90:9f:7f:74:4a:0a:51:9e:60:48:b6:42:cd:f1:ac:
68:c2:da:1e:1d:4c:5d:cb:78:26:aa:b4:d8:cd:c9:
d3:69:17:4d:df:7e:e4:ce:29:a3:42:8b:b1:f2:1d:
b3:77:4b:52:9c:33:cf:33:69:7a:e2:be:5e:5d:d0:
be:17:77:af:f1:17:00:35:56:c5:2e:23:47:34:fd:
64:6b:fd:54:f1:77:26:ca:e6:c8:86:ad:5b:26:95:
0c:1a:5b:2b:55:d4:51:fc:4c:da:90:5b:7d:f6:76:
8c:d0:1d:57:50:55:7f:55:a5:ee:65:1d:e9:4d:d6:
a7:53:1d:01:99:29:4e:02:df:22:73:cf:00:d9:65:
b6:cd:17:7d:98:e3:51:63:f5:1f:c4:7c:0e:0c:f2:
ef:f4:09:66:0b:4e:fc:bf:a3:2e:14:59:32:b6:30:
61:a2:67:02:fe:d4:83:9a:9f:6f:62:e3:d3:25:8e:
22:4e:41:dd:9e:14:44:75:ae:c6:c7:51:77:f9:03:
b6:48:82:61:18:ee:96:45:be:b2:dc:8f:d5:7c:37:
6e:dc:83:1a:5c:82:d6:39:05:d2:74:11:fc:60:35:
a3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A8:9B:3E:B6:B7:51:D5:AB:A5:BC:C4:67:9B:4A:C5:5B:79:D8:78
X509v3 Authority Key Identifier:
keyid:5F:67:3D:2F:62:1A:E3:14:07:00:17:48:BB:DE:63:8A:CB:D8:60:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d1:a1:94:76:7d:3a:06:32:df:55:1c:46:12:b4:ac:aa:dd:
a8:d9:46:b0:e8:58:f5:e3:2a:dd:5b:62:65:d7:c5:8d:09:11:
5f:46:a9:da:e1:5b:90:55:74:e6:95:9c:90:19:b4:df:a0:cb:
e2:f4:ac:b7:45:ba:f6:a2:2e:d7:1a:95:e0:cb:43:dc:75:d4:
e0:99:4b:1e:58:07:9b:c9:ea:d3:b1:18:0a:ea:cb:92:4c:96:
a2:0f:19:d9:fc:ef:7d:6e:45:d1:44:ea:68:b9:4f:e8:05:71:
f9:ec:5d:5b:43:41:8f:40:92:9b:85:b0:7f:b4:94:c1:f6:55:
47:a6:93:de:0e:98:d3:41:e4:4d:ae:71:4b:cd:89:3b:fb:11:
90:6f:5f:f8:c8:7c:d6:e8:4e:e3:b4:40:7d:68:b8:6f:ff:77:
15:fa:27:00:c9:c1:2f:f6:29:5c:da:50:b5:b2:29:5d:2a:5a:
32:95:76:68:1f:02:6c:0b:cd:1f:aa:85:d0:79:c6:be:e6:20:
99:e3:36:51:d3:91:05:9a:ee:26:47:a1:f5:f2:27:3e:a9:76:
1c:06:9c:3e:09:73:99:d2:09:ea:30:a1:90:33:99:33:54:c7:
92:5e:85:b5:4e:25:a4:99:be:7f:9d:1d:52:45:ce:aa:24:a8:
55:84:d3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:31:53 2026 by rpki-client