Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft
File: X2c9L2Ia4xQHABdIu95jisvYYFA.mft (raw, json)
Hash identifier: iL/wUKHGx+f4T8qM0ddT/NjaLgEZ+jWJltLWuzYh+Vk=
Subject key identifier: 42:1C:08:E1:4F:CD:72:C2:40:30:CF:57:BA:5C:7F:A8:C1:1B:D3:5E
Authority key identifier: 5F:67:3D:2F:62:1A:E3:14:07:00:17:48:BB:DE:63:8A:CB:D8:60:50
Certificate issuer: /CN=5f673d2f621ae31407001748bbde638acbd86050
Certificate serial: 019CAAC62B6FBE5298BA4C6F38AECE23F1B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft
Manifest number: 08BB
Signing time: Sun 01 Mar 2026 19:00:39 +0000
Manifest this update: Sun 01 Mar 2026 19:00:39 +0000
Manifest next update: Mon 02 Mar 2026 19:00:39 +0000
Files and hashes: 1: EFQb-DdMIUfYk8otFJG8FPsYqSg.roa (hash: xz8HTmmrpuajVW7QayylP4C5tRbZcnyfwKq4BdsJEEg=)
2: X2c9L2Ia4xQHABdIu95jisvYYFA.crl (hash: AbJVVB5fy9vJmhkoB7C02+Psehf+G03HxhTqkMMY/RA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:2b:6f:be:52:98:ba:4c:6f:38:ae:ce:23:f1:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f673d2f621ae31407001748bbde638acbd86050
Validity
Not Before: Mar 1 19:00:39 2026 GMT
Not After : Mar 2 19:00:39 2026 GMT
Subject: CN=421c08e14fcd72c24030cf57ba5c7fa8c11bd35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ba:8a:f0:05:77:7a:4d:9b:24:8d:0f:3e:3a:
7b:ed:7b:dc:b4:a4:c9:d0:61:c8:21:37:38:c8:42:
a2:c0:07:42:0f:7e:37:6e:42:21:44:e1:69:87:7c:
6b:ae:a2:a1:73:a7:f5:6d:b6:fa:42:f5:3c:68:26:
6b:14:81:90:14:62:fb:8b:ce:65:b0:b7:54:5e:59:
ad:0c:a1:28:d2:dd:0a:22:aa:e8:2d:96:17:8e:b1:
e7:93:8c:3c:19:e3:9e:6e:c4:a6:d9:8d:a2:46:c7:
69:46:ba:e2:cb:e0:58:40:b6:a5:be:91:06:19:65:
13:4a:0f:f9:8f:78:fc:20:48:85:25:51:12:bc:8d:
d8:0d:f0:8c:6a:d0:c7:8d:8c:11:39:a2:0f:41:74:
78:a7:4c:27:23:8d:aa:68:2a:93:37:de:82:b7:f8:
3b:43:86:e9:5e:51:80:85:70:58:28:82:80:c3:23:
e7:f6:f4:ef:27:07:8b:fd:f6:c1:f3:66:56:5f:56:
80:71:0d:67:48:dd:d5:41:3d:ae:c9:4e:b9:4c:5e:
41:d5:f6:12:93:09:9e:c8:5c:99:00:11:39:fb:2f:
a3:62:81:bb:2f:d3:9d:e9:54:90:f4:a3:d2:40:14:
60:41:9a:5f:a6:3f:e6:46:af:49:40:00:17:3f:96:
c2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1C:08:E1:4F:CD:72:C2:40:30:CF:57:BA:5C:7F:A8:C1:1B:D3:5E
X509v3 Authority Key Identifier:
keyid:5F:67:3D:2F:62:1A:E3:14:07:00:17:48:BB:DE:63:8A:CB:D8:60:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:6d:c5:19:1b:47:e7:2c:d5:97:cf:5b:35:3a:29:71:07:2f:
c7:3c:76:f7:4d:ca:9c:3c:28:1a:f9:a4:89:24:73:c7:bf:0e:
36:ef:ef:a6:a3:bc:6e:b4:0c:ef:8d:ef:0a:90:2a:53:8e:43:
67:0e:4c:a2:02:1e:03:95:68:41:5e:0e:0d:e6:7c:81:55:33:
1f:d0:f2:95:c0:d9:0a:3f:37:b6:0a:b5:e8:ad:d8:de:74:1a:
61:38:96:06:8e:83:0c:c5:94:4d:df:b5:14:43:4e:46:3b:3c:
c1:7b:61:6e:8c:2f:59:8f:03:76:73:4c:3c:65:55:61:2e:ff:
54:32:d1:1a:6a:62:41:de:2f:6e:36:f3:d7:0d:da:b5:7d:4f:
93:1b:11:a2:da:19:41:19:f0:58:ce:b2:74:21:32:39:b9:d8:
91:e8:09:18:43:4e:b2:bb:bd:d5:d5:db:33:04:35:47:82:13:
d1:2a:40:96:50:25:8b:a0:09:24:bd:a2:33:03:ce:d2:b0:1c:
03:38:9f:d0:f4:f0:38:f8:62:f8:37:a9:23:a3:94:b3:c8:df:
a8:e8:02:a3:16:44:d6:3a:80:c2:5b:06:d6:a2:81:7e:b4:10:
95:b4:eb:78:74:88:43:49:8c:5a:2f:d3:ee:c3:c5:ed:b0:08:
0c:33:9b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:49:59 2026 by rpki-client