Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
File: X5PadXwX_jig5s1wJ1xzyMaciW4.mft (raw, json)
Hash identifier: /jCa86vyOgR53gxG3oM9tpdOvcM1lch91d4CIJ+1aZ0=
Subject key identifier: B2:3D:5D:88:9F:C3:DB:01:2E:B9:72:30:2B:03:27:45:10:2B:B9:61
Authority key identifier: 5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E
Certificate issuer: /CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e
Certificate serial: 019CABD92627FBCF6F79B937AE531A599729
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
Manifest number: 0C12
Signing time: Mon 02 Mar 2026 00:01:00 +0000
Manifest this update: Mon 02 Mar 2026 00:01:00 +0000
Manifest next update: Tue 03 Mar 2026 00:01:00 +0000
Files and hashes: 1: EhpMBlG4nDKvcGQKRYPAEZtRdEU.roa (hash: 00M7VIQ9njSy4l1huIv3bbpiOTYXp7U9IOJHNMG4ZKk=)
2: X5PadXwX_jig5s1wJ1xzyMaciW4.crl (hash: bgbWktyiZHTe+hhjJQTI1aAM/ROoVtCv+CuVbJ46++o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:26:27:fb:cf:6f:79:b9:37:ae:53:1a:59:97:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e
Validity
Not Before: Mar 2 00:01:00 2026 GMT
Not After : Mar 3 00:01:00 2026 GMT
Subject: CN=b23d5d889fc3db012eb972302b032745102bb961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:99:6f:3e:28:bb:49:60:95:e6:cd:77:95:db:
bb:27:7e:72:2f:76:81:7b:61:ac:7a:29:e0:a7:93:
7c:ed:6f:e6:b7:bf:a1:96:6b:94:14:67:fe:01:2d:
c7:19:55:11:ba:cd:3b:9a:a8:84:a8:c5:b6:a3:d0:
53:28:68:2a:30:73:a0:39:78:e4:b0:31:ef:06:32:
ef:3f:18:39:c8:b3:aa:1a:bb:09:25:dc:87:02:a9:
1f:81:6e:d4:fe:df:f4:dc:3c:f2:89:62:b8:a9:d8:
a3:81:34:a4:7f:88:69:ef:75:d1:7c:55:c7:97:53:
fc:05:ba:a4:1b:89:ef:33:87:2f:59:48:7c:8d:52:
3c:19:45:58:14:2d:02:81:3b:5f:9f:9a:29:aa:ae:
7f:8f:ed:50:3c:a4:a8:3a:21:81:72:0d:b1:49:68:
50:f6:1f:13:b6:5b:94:ac:e6:c8:f3:bd:18:11:e0:
2b:47:1f:0b:ad:26:43:20:a5:4d:85:75:9f:23:7f:
5b:e3:94:5f:65:76:b6:3f:3f:32:c5:e9:6f:49:7e:
b2:a3:54:1e:b2:28:db:f9:29:6f:e7:4f:04:e5:9f:
da:b2:2d:f4:87:b9:c0:01:12:9c:19:75:a4:0f:1c:
d7:93:e0:cf:c8:6f:81:a0:af:a8:aa:08:d4:ab:03:
a1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3D:5D:88:9F:C3:DB:01:2E:B9:72:30:2B:03:27:45:10:2B:B9:61
X509v3 Authority Key Identifier:
keyid:5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d6:ab:a9:93:7d:92:73:bd:be:c6:7c:68:92:f7:c1:3f:b0:
a7:61:b3:d4:31:1c:38:80:dc:1b:08:ac:21:c3:cb:41:51:d5:
67:c3:32:0c:6c:19:b6:ce:62:bc:d4:1f:df:d1:17:42:45:3b:
99:09:0e:77:83:4d:d0:34:87:a1:05:f4:75:aa:10:ef:71:11:
16:d8:8b:1b:ad:88:0b:e7:02:27:d8:98:49:92:a3:01:6e:fb:
c7:09:01:e0:f4:5d:d8:64:7c:8f:2b:bc:96:78:c6:50:39:0e:
0d:22:db:33:2b:07:ba:5c:15:a4:bc:00:30:0a:a1:82:fe:42:
1b:69:2d:a7:40:ee:1d:96:eb:91:ad:95:14:6d:0d:4b:af:12:
a4:44:2b:9f:41:39:86:0f:69:61:46:69:d0:aa:8f:47:e4:e5:
f1:60:29:51:b4:0d:90:3d:68:15:4b:8d:9b:eb:1c:cc:55:97:
54:c8:ab:4e:b4:d0:1b:5e:fe:45:00:a4:ab:3d:82:f6:88:35:
b0:75:f6:6d:98:49:c8:a0:86:49:47:66:9f:c2:fa:06:9c:bb:
c1:37:c6:25:62:77:85:9f:86:82:70:99:2f:fd:73:6e:f9:f5:
3e:77:65:35:4d:76:96:b8:c1:03:e7:74:a0:ba:16:ba:53:11:
35:70:58:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:25:00 2026 by rpki-client