Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
File: XinALSYfkT6lv4PCvHwzQUpCvMo.mft (raw, json)
Hash identifier: vnM2SZzDTKbwHA3ea6cNmwNFNwCAFD3ffy0eU10LLGs=
Subject key identifier: C9:4C:0B:76:16:F7:5D:32:6D:5F:04:C6:06:0C:39:FF:1E:77:F4:0A
Authority key identifier: 5E:29:C0:2D:26:1F:91:3E:A5:BF:83:C2:BC:7C:33:41:4A:42:BC:CA
Certificate issuer: /CN=5e29c02d261f913ea5bf83c2bc7c33414a42bcca
Certificate serial: 019CAB342A548F1D837D5F832447676FE2E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
Manifest number: 0F2E
Signing time: Sun 01 Mar 2026 21:00:48 +0000
Manifest this update: Sun 01 Mar 2026 21:00:48 +0000
Manifest next update: Mon 02 Mar 2026 21:00:48 +0000
Files and hashes: 1: XinALSYfkT6lv4PCvHwzQUpCvMo.crl (hash: FMmimCvnQxMwZ47lGFu8tOdrl6MU5nLqaDWYshSzd1U=)
2: _4iBeTs5cxfGTAtYktUUrEwV_VA.roa (hash: N664oCzOfQ38VT4ESVgwevGf4XPQ0H5eTMOYBDJq9m0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:2a:54:8f:1d:83:7d:5f:83:24:47:67:6f:e2:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e29c02d261f913ea5bf83c2bc7c33414a42bcca
Validity
Not Before: Mar 1 21:00:48 2026 GMT
Not After : Mar 2 21:00:48 2026 GMT
Subject: CN=c94c0b7616f75d326d5f04c6060c39ff1e77f40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:31:7c:87:1a:1b:2f:32:d1:ef:11:11:0f:fa:
c3:e7:98:46:8d:b9:bd:a4:d6:3c:96:e5:f8:87:b9:
26:38:57:90:98:0f:87:83:97:00:5a:c6:3c:d0:56:
07:01:d7:22:5d:8e:a5:8b:bb:c9:45:c5:c3:42:2e:
a4:61:09:34:9f:4b:87:7f:67:70:d8:64:b0:06:cd:
e3:96:78:d5:0f:8f:8d:e2:47:e7:ca:41:06:0a:0e:
8a:0b:c9:c7:e6:fc:b7:87:80:13:e4:39:04:59:90:
eb:a6:15:10:86:3c:38:c0:8d:52:25:89:82:74:28:
e5:22:14:b2:11:38:4f:7e:c4:6b:49:4b:13:f2:f7:
dc:64:25:0d:d0:4d:0d:37:2b:98:0d:6d:49:3a:c7:
eb:40:33:0a:5f:7c:17:3b:8a:50:65:f8:de:14:fb:
e4:05:6d:ef:8c:69:25:45:9c:57:b8:72:ac:9e:51:
c8:12:ef:68:38:f8:52:58:fc:2b:59:8e:87:6b:b7:
47:59:dd:fb:90:a9:ca:69:c7:af:ea:c0:53:fe:49:
91:22:6f:c7:97:ca:da:35:86:b9:00:f3:aa:12:c4:
c5:8c:ca:e7:73:08:74:75:59:13:7a:0e:45:b4:4c:
a9:bd:00:7c:4e:cb:4f:df:a1:d8:35:b7:94:f5:b0:
af:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4C:0B:76:16:F7:5D:32:6D:5F:04:C6:06:0C:39:FF:1E:77:F4:0A
X509v3 Authority Key Identifier:
keyid:5E:29:C0:2D:26:1F:91:3E:A5:BF:83:C2:BC:7C:33:41:4A:42:BC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:44:4e:70:40:0d:69:93:18:62:42:cb:2c:ff:e2:5e:b5:95:
31:21:5f:16:14:4f:9d:9d:66:be:92:35:3c:82:f5:74:f1:df:
97:5e:e0:6d:a6:6f:7a:8c:ec:0f:f6:39:9b:6e:d3:b6:3e:7a:
c9:14:8d:43:9c:19:01:6b:13:db:ac:07:2e:60:08:61:2e:e9:
6d:ea:b7:98:11:fc:e2:b1:49:8f:4c:85:62:2b:31:15:51:cd:
ae:3b:d8:d3:51:f8:28:12:c8:b0:0b:c7:8d:27:bf:15:ea:57:
bf:ad:78:10:53:9a:30:71:87:c5:87:4c:3b:c8:a8:48:60:c2:
7f:86:6a:0e:0b:69:4c:c7:b4:9f:19:2b:45:3a:47:b8:51:1c:
dc:1b:b0:d1:25:30:a2:67:b0:9c:98:e4:e9:44:33:7e:1d:8f:
0a:78:59:3e:54:90:8d:05:ec:8b:0f:d3:ac:3b:08:8c:50:4b:
34:2f:84:c8:11:b0:01:06:9a:17:2f:86:5e:53:62:85:34:b2:
da:b5:88:13:82:d0:a4:80:4c:d0:f5:27:37:6a:2d:55:60:ce:
25:9a:c3:92:6a:b8:25:20:2a:2c:3f:08:f3:40:5e:00:0e:25:
0f:2d:18:1e:ba:8b:7a:c1:25:f6:d5:f0:b8:b1:85:d0:23:bc:
99:8a:15:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:57 2026 by rpki-client