
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
File: XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft (raw, json)
Hash identifier: /ZE1ovbLyXItZQybEcLH3Q9u5NlAJeAJY8PgQyERlXM=
Subject key identifier: 25:23:FF:2B:E4:08:D1:F9:9E:C0:8E:A3:6A:68:5B:AE:D9:14:1E:D5
Authority key identifier: 5D:15:BD:A8:CE:98:7D:7E:4A:AB:1C:35:51:78:DC:A3:3E:3B:8E:A4
Certificate issuer: /CN=5d15bda8ce987d7e4aab1c355178dca33e3b8ea4
Certificate serial: 019CA9EAE77C06D7EBD2EF208B8E531D11B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
Manifest number: 0796
Signing time: Sun 01 Mar 2026 15:01:09 +0000
Manifest this update: Sun 01 Mar 2026 15:01:09 +0000
Manifest next update: Mon 02 Mar 2026 15:01:09 +0000
Files and hashes: 1: XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl (hash: TzGlGYzB07EPanAOc4X2YB+nWEw3Ctpjmnnv+/9XXCQ=)
2: _z_wVcXFgGyo2KL2OVSqBhSh8xw.asa (hash: /1A8zlKWYmqlgxFi5Pz0OpVqaauhxn3c+pURid2tACQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:e7:7c:06:d7:eb:d2:ef:20:8b:8e:53:1d:11:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d15bda8ce987d7e4aab1c355178dca33e3b8ea4
Validity
Not Before: Mar 1 15:01:09 2026 GMT
Not After : Mar 2 15:01:09 2026 GMT
Subject: CN=2523ff2be408d1f99ec08ea36a685baed9141ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7b:5d:89:ce:c3:a3:50:08:0e:55:11:e8:e7:
86:ed:38:11:ca:a0:58:86:94:61:dd:ee:af:3c:9e:
eb:2f:9d:7a:2f:19:a8:0c:bb:f5:2a:38:db:9b:d4:
29:a3:ff:9c:92:75:48:6c:49:1b:5b:af:59:cd:7c:
2d:51:b1:05:c8:76:6b:2d:5c:21:88:97:6c:0e:fb:
59:0e:13:2d:4c:91:e0:81:cd:ed:d8:66:a4:62:cf:
81:91:03:34:90:25:d0:9a:4a:95:ac:dc:c1:79:d1:
86:3b:46:94:d8:76:ac:4f:73:e2:80:28:e9:44:3c:
11:54:57:b5:f9:aa:d8:91:d9:c6:a4:c1:ad:d1:b3:
5a:cc:ad:ca:18:f0:cc:8b:1f:36:c9:a2:e1:f7:dc:
61:a2:93:52:d7:6c:ea:28:0d:8b:ea:5a:f5:3a:be:
99:39:4d:c1:ba:f6:25:94:fd:18:66:f0:83:29:98:
ed:01:7e:64:ec:c6:95:aa:b2:d7:72:09:06:b1:98:
e0:08:bb:61:8c:b6:bb:13:64:7a:26:0d:87:d1:14:
7b:c2:81:15:58:bc:6a:c1:ca:41:62:75:69:75:01:
f8:f3:a9:4d:20:30:ba:a6:97:3b:c1:84:40:74:f3:
a7:14:d0:e9:40:df:75:76:f9:22:db:10:b8:a7:5d:
64:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:23:FF:2B:E4:08:D1:F9:9E:C0:8E:A3:6A:68:5B:AE:D9:14:1E:D5
X509v3 Authority Key Identifier:
keyid:5D:15:BD:A8:CE:98:7D:7E:4A:AB:1C:35:51:78:DC:A3:3E:3B:8E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:47:1d:1c:5b:fe:ea:d2:76:e5:6f:a7:8b:89:69:d9:f5:c9:
86:b4:5d:bc:b2:23:c0:66:15:bf:97:bd:77:99:64:8a:68:45:
42:02:bf:d7:ff:20:5e:37:03:be:f1:b4:82:10:8b:1b:12:a9:
f8:bf:a0:5e:82:d7:4d:63:7f:9e:44:45:1c:04:55:3a:66:40:
50:6c:e0:9e:bb:ae:d6:c8:b6:2d:03:49:d9:99:2b:1c:db:d6:
2c:fb:10:9e:ef:b5:7d:e7:be:56:40:f4:36:48:1b:5f:21:fc:
7e:bd:4e:c9:37:f6:10:82:5e:5e:ea:f5:0b:12:c6:bb:8b:e9:
08:4d:c2:53:06:82:ab:a1:2f:f8:cc:e9:72:1d:5a:8b:63:32:
7c:03:af:1b:f9:87:af:0c:e5:d6:f7:fe:2b:db:89:43:cc:6c:
16:de:39:cd:27:f4:ae:46:72:26:d9:96:00:6f:bb:a2:43:3e:
86:3d:2f:cc:7a:e5:c3:24:49:8b:4c:87:ad:a6:7b:ff:f4:74:
80:e9:6f:4e:dc:5a:d3:5b:6b:58:2f:d5:69:04:46:b4:24:40:
09:ae:5e:55:eb:3b:98:e9:a4:5b:f7:1c:9c:31:ce:04:6c:0e:
1c:7d:67:88:fa:4f:01:46:6d:77:9e:1a:d5:cb:04:c9:05:ec:
79:74:69:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:38:18 2026 by rpki-client