Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
File: X0qPBO8v6-VPnbapovhWWUtuLwg.mft (raw, json)
Hash identifier: e7f81b+c/O6v/GJCy/zH4wJ+jFuWx58KR+Fe2Eu3VPc=
Subject key identifier: D4:A0:C5:B2:E9:93:F9:7E:A5:B3:A5:D2:ED:BF:E8:B9:D4:3D:E7:32
Authority key identifier: 5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08
Certificate issuer: /CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08
Certificate serial: 019CA97D2F52EA12FABA5C89D99861DFADF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
Manifest number: 13E5
Signing time: Sun 01 Mar 2026 13:01:19 +0000
Manifest this update: Sun 01 Mar 2026 13:01:19 +0000
Manifest next update: Mon 02 Mar 2026 13:01:19 +0000
Files and hashes: 1: 2Pl1WOLsPcEe3IssGI6GqTdAUd8.roa (hash: xEvziGYE9gFL6LzKGBIz1s8KI0YFj5pJymQRSZymNEM=)
2: X0qPBO8v6-VPnbapovhWWUtuLwg.crl (hash: lwt8dkqYlcevH8wKDe3IZ4HgKJ6NgsEMOidpV15WLBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:2f:52:ea:12:fa:ba:5c:89:d9:98:61:df:ad:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08
Validity
Not Before: Mar 1 13:01:19 2026 GMT
Not After : Mar 2 13:01:19 2026 GMT
Subject: CN=d4a0c5b2e993f97ea5b3a5d2edbfe8b9d43de732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5f:37:c8:74:3f:14:ab:f5:f5:b7:5a:6e:b2:
86:ea:6b:53:84:1d:f2:be:6a:3b:c5:b9:a9:0e:13:
92:ae:d0:fb:87:80:59:7f:ac:a1:7f:2a:26:1c:c2:
5c:ab:a0:d0:83:4c:b0:55:e4:55:1c:f2:17:7e:87:
cc:d8:50:c4:cb:d0:4f:02:04:9c:34:30:9d:cd:10:
2d:6a:9b:22:f9:7b:16:46:31:23:0d:92:40:c1:03:
9a:cb:34:17:2b:6d:c8:1d:ea:d7:71:5d:55:ab:e8:
3b:df:90:89:04:e1:d7:a5:a1:4c:2b:8c:36:49:dd:
8b:25:83:c9:2c:6e:06:7c:38:85:50:b2:b1:11:0a:
77:b7:4d:4b:5a:17:86:98:52:4d:84:00:b4:ca:b5:
e2:ae:4c:84:9a:90:e1:55:0e:6b:ab:53:bb:c9:47:
77:e9:d9:b1:23:05:b7:95:3f:57:b9:42:ce:76:e4:
de:44:ee:c8:f7:e4:87:53:cb:a1:b0:1a:31:93:ce:
d2:b6:b3:95:bf:97:c8:fc:3a:a1:e7:97:1e:3b:20:
f2:cd:f1:40:e6:a6:b8:fa:5a:67:42:a9:6e:0b:31:
25:29:ca:00:7a:5e:89:c3:11:78:2c:13:6c:b2:49:
d5:40:09:d6:2c:5b:75:7d:d4:93:2c:d6:17:b6:4e:
e3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A0:C5:B2:E9:93:F9:7E:A5:B3:A5:D2:ED:BF:E8:B9:D4:3D:E7:32
X509v3 Authority Key Identifier:
keyid:5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:98:66:43:54:e4:04:03:cd:b7:98:bd:fe:19:62:3b:49:4d:
ee:0d:7d:b0:70:f2:16:4c:9e:87:fa:7d:85:15:e7:b7:7d:ba:
da:23:1d:0e:15:92:79:06:0b:23:7b:09:cd:f3:ec:8b:64:86:
59:72:03:ee:af:ea:1f:1c:e8:f8:7f:8a:97:70:56:71:25:08:
94:25:07:e7:d1:e4:67:d6:f3:66:51:57:d7:8a:dd:f2:4e:37:
a9:1c:61:04:96:2e:ac:ea:c2:15:90:a8:ff:a0:19:81:3e:3c:
87:0f:60:e7:8d:8f:14:29:9e:c9:c5:f9:35:b5:73:75:3e:e1:
d4:28:1c:a4:a3:e1:2b:d5:95:18:52:9d:54:c1:40:97:d2:44:
cd:5c:04:9d:b1:53:87:cc:c7:81:b9:50:b7:16:7c:6b:6a:40:
01:d6:c9:10:ee:09:f4:7f:40:3a:05:f9:4d:f0:50:21:8e:ff:
f5:6e:16:09:fa:b4:3a:ee:ab:27:79:ca:69:1f:50:a1:7d:f0:
73:52:13:78:ec:83:3d:8e:b0:7d:b1:61:27:12:a1:b5:6a:26:
09:30:ed:ba:db:3b:54:f3:2e:35:39:b1:42:68:8b:bc:d2:17:
cd:bc:78:d6:c1:f9:8c:6e:b1:4b:94:99:a1:14:1c:56:76:a5:
1f:81:c1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:16 2026 by rpki-client