Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
File: XJK5qSx-uRPD2lWAAsZz6CONscc.mft (raw, json)
Hash identifier: goWW8chYtfY7WQ2ddFO+krMoXApRGCLIrGuZL17uAT0=
Subject key identifier: 0A:80:94:5C:A6:EB:F2:48:C7:D0:4C:8A:35:A4:44:A6:C7:62:59:57
Authority key identifier: 5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
Certificate issuer: /CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Certificate serial: 019CABA257A25578E328E3B04E50AFCE0979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
Manifest number: 0F65
Signing time: Sun 01 Mar 2026 23:01:09 +0000
Manifest this update: Sun 01 Mar 2026 23:01:09 +0000
Manifest next update: Mon 02 Mar 2026 23:01:09 +0000
Files and hashes: 1: XJK5qSx-uRPD2lWAAsZz6CONscc.crl (hash: ciIl0gyviMzcb0KtSWldudcyBJO0DEpIdsCo7Q1OEJc=)
2: nbiO0Qsuka11ZNMxAFy9dEINXys.roa (hash: NaboMvIQcJu7trkWGRw22aXFbkdnEJpMvSjIpYA2/ik=)
3: qTb1hfW2cZsJLmGnL2cnlmiyFfY.roa (hash: hklYadmGWp1kEGK+jtsPBwTIyJolTP2I0OScsQI8ZQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:57:a2:55:78:e3:28:e3:b0:4e:50:af:ce:09:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Validity
Not Before: Mar 1 23:01:09 2026 GMT
Not After : Mar 2 23:01:09 2026 GMT
Subject: CN=0a80945ca6ebf248c7d04c8a35a444a6c7625957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c3:07:fa:2e:48:bc:ad:08:8e:5e:7b:4c:db:
f0:e2:b2:05:8f:8f:c8:3d:00:2b:56:ad:9c:72:53:
27:f1:ce:84:69:b0:5b:6a:4b:84:3e:31:c5:09:21:
54:17:49:c0:5f:1b:9c:93:1e:7c:d1:db:52:33:ea:
56:99:11:71:ac:a0:a7:48:78:3e:82:bd:38:a1:ac:
08:1d:77:21:9d:29:1d:69:db:ce:b8:42:0d:1f:34:
e9:22:66:8a:80:32:81:1e:67:71:4f:de:67:70:ef:
bb:8d:4d:41:9e:65:bf:52:e5:36:92:9a:94:a2:08:
bd:20:ac:17:11:0c:54:d8:73:6a:51:2d:18:37:ac:
7e:7a:90:b1:fe:8e:20:6b:14:05:4a:11:b2:fa:52:
15:59:e2:c1:61:df:c0:71:4c:52:02:26:6d:94:4b:
94:d6:8a:e0:99:46:98:e4:b8:f8:a5:3a:32:45:12:
37:99:8d:25:5d:6f:ab:6d:97:82:b4:c3:17:93:e4:
c9:b2:87:34:c6:cf:51:24:3b:92:d5:cd:30:c7:ac:
4c:9d:41:fb:b8:b8:0e:44:dc:94:ab:df:7c:01:51:
75:7d:7e:02:5c:fd:a2:4d:ca:bf:a3:8a:af:d1:a5:
46:30:a2:a6:ca:18:66:7d:1f:21:48:21:f1:cb:50:
9c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:80:94:5C:A6:EB:F2:48:C7:D0:4C:8A:35:A4:44:A6:C7:62:59:57
X509v3 Authority Key Identifier:
keyid:5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:70:ab:e1:a8:d9:01:c3:06:a0:08:6c:44:1c:3c:09:d5:55:
60:7c:16:60:36:a2:8b:c2:a5:95:e3:eb:83:25:d5:75:45:b4:
56:5b:73:ba:94:83:dd:a9:0a:7c:9d:ca:5f:8c:22:58:7c:1d:
39:8f:2d:ce:53:8e:81:3f:aa:c4:0c:ee:9d:05:60:95:00:ef:
41:06:4d:49:ff:fc:b1:6f:c5:62:2b:95:0a:eb:ae:9f:1f:68:
20:92:1b:a2:ed:01:25:1e:ce:4b:88:2b:36:b9:0e:d8:ea:25:
c6:b7:93:ea:43:c1:4f:54:f8:e1:30:01:9d:2a:a8:ce:35:fa:
4d:8e:c6:fd:59:1a:76:68:07:65:01:cf:f2:75:fe:a9:bb:81:
e0:5f:02:f4:48:75:7a:94:b7:2c:03:ca:fe:16:3a:cb:c5:15:
7b:00:4b:59:b3:91:75:32:1d:1f:a2:fe:9e:ca:9e:96:b8:de:
6f:f6:2d:c3:aa:56:0e:47:3a:98:80:11:88:b5:21:5f:f5:78:
02:67:4a:3d:6a:1b:21:7d:75:ee:5e:b4:a8:e1:a5:bb:63:ba:
50:58:4c:1d:a8:2f:51:fd:61:8d:3c:27:a9:d4:2c:1a:df:f4:
01:04:81:db:9a:69:40:09:9a:7c:73:e9:63:33:8f:2e:0c:19:
59:31:18:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyroleiVXjjKOOwTlCvzgl5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjOTJiOWE5MmM3ZWI5MTNjM2RhNTU4MDAyYzY3M2U4MjM4
ZGIxYzcwHhcNMjYwMzAxMjMwMTA5WhcNMjYwMzAyMjMwMTA5WjAzMTEwLwYDVQQD
EygwYTgwOTQ1Y2E2ZWJmMjQ4YzdkMDRjOGEzNWE0NDRhNmM3NjI1OTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8cMH+i5IvK0Ijl57TNvw4rIFj4/I
PQArVq2cclMn8c6EabBbakuEPjHFCSFUF0nAXxuckx580dtSM+pWmRFxrKCnSHg+
gr04oawIHXchnSkdadvOuEINHzTpImaKgDKBHmdxT95ncO+7jU1BnmW/UuU2kpqU
ogi9IKwXEQxU2HNqUS0YN6x+epCx/o4gaxQFShGy+lIVWeLBYd/AcUxSAiZtlEuU
1orgmUaY5Lj4pToyRRI3mY0lXW+rbZeCtMMXk+TJsoc0xs9RJDuS1c0wx6xMnUH7
uLgORNyUq998AVF1fX4CXP2iTcq/o4qv0aVGMKKmyhhmfR8hSCHxy1CcVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAqAlFym6/JIx9BMijWkRKbHYllXMB8GA1UdIwQY
MBaAFFySuaksfrkTw9pVgALGc+gjjbHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEpLNXFTeC11UlBEMmxXQUFzWno2Q09Oc2NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85Njk0NjMtN2Y2YS00NTAzLWFiYzQt
ZDZiNTZhYmEzZWI3LzEvWEpLNXFTeC11UlBEMmxXQUFzWno2Q09Oc2NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy85Njk0NjMtN2Y2YS00NTAzLWFiYzQtZDZiNTZhYmEzZWI3
LzEvWEpLNXFTeC11UlBEMmxXQUFzWno2Q09Oc2NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQXCr4ajZ
AcMGoAhsRBw8CdVVYHwWYDaii8KllePrgyXVdUW0VltzupSD3akKfJ3KX4wiWHwd
OY8tzlOOgT+qxAzunQVglQDvQQZNSf/8sW/FYiuVCuuunx9oIJIbou0BJR7OS4gr
NrkO2OolxreT6kPBT1T44TABnSqozjX6TY7G/VkadmgHZQHP8nX+qbuB4F8C9Eh1
epS3LAPK/hY6y8UVewBLWbORdTIdH6L+nsqelrjeb/Ytw6pWDkc6mIARiLUhX/V4
AmdKPWobIX117l60qOGlu2O6UFhMHagvUf1hjTwnqdQsGt/0AQSB25ppQAmafHPp
YzOPLgwZWTEYtw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:12:42 2026 by rpki-client