Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
File: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft (raw, json)
Hash identifier: V6X7OQY0y4p0TzM9rBULzrGE8Qt4sYyRDOZFpqa5Ur8=
Subject key identifier: F6:77:DE:2D:88:AC:44:26:6E:2B:91:15:F8:BE:6C:D2:65:7C:8D:02
Authority key identifier: 5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
Certificate issuer: /CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Certificate serial: 019CAEA350C81B45B81C561A0FCA20E9C869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
Manifest number: 12AC
Signing time: Mon 02 Mar 2026 13:01:04 +0000
Manifest this update: Mon 02 Mar 2026 13:01:04 +0000
Manifest next update: Tue 03 Mar 2026 13:01:04 +0000
Files and hashes: 1: Tj86XfWCuCApPHfYX3OGv6qhNv0.roa (hash: KavhnQrG+XPERodqs0bRhCLXxZdjDwTVYFBmFO2dVKc=)
2: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl (hash: 2cFUubEg78LkW1PFEd/o/9My0Ek7XEXATxE760dv8KU=)
3: lz8LsNgX1D_wsrCHWat-j5v2uVI.roa (hash: vw9y4aHyYuZp50dhE6CiKPwsukwzG4Dv5+i3W21W3u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:50:c8:1b:45:b8:1c:56:1a:0f:ca:20:e9:c8:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Validity
Not Before: Mar 2 13:01:04 2026 GMT
Not After : Mar 3 13:01:04 2026 GMT
Subject: CN=f677de2d88ac44266e2b9115f8be6cd2657c8d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b6:05:ed:36:71:12:d5:70:9a:5e:3a:95:59:
e5:18:c0:25:47:52:f1:d7:8d:ba:6e:eb:c6:e8:f8:
73:3a:8f:44:22:ee:6c:9a:64:c9:4c:85:27:61:63:
cd:26:bc:7c:a8:0d:d1:a9:48:87:be:98:40:64:16:
e3:15:d2:2f:e1:86:ea:81:80:80:c4:6a:fc:7b:99:
1c:4d:1e:ed:23:d4:a1:bd:c6:40:4d:d9:8e:f3:66:
8e:c6:5d:7a:19:50:a9:ff:5f:05:44:96:86:81:70:
c6:9f:dd:22:b4:14:99:2e:49:b9:01:fd:74:dd:ca:
9d:45:c5:6b:30:e8:86:38:23:0b:7e:50:e3:2b:df:
8c:52:80:cb:d7:d6:1a:24:a9:8a:ab:09:41:72:6c:
b4:5c:5b:c9:8b:0e:f2:f7:d2:c9:88:c6:60:8a:ea:
22:59:8d:2f:f0:10:1f:5e:cb:01:a7:0a:a6:bf:92:
1e:06:dd:0c:14:ce:fe:1f:ec:fc:e7:80:69:a1:df:
f1:a0:f7:35:10:0d:63:8d:8b:ec:c4:85:fe:b4:81:
40:ec:b0:d2:49:61:3f:0b:96:2b:a2:e0:f5:e9:b3:
75:98:8d:7b:00:2e:02:8d:04:e6:4c:1f:4f:4c:b6:
a6:3c:2e:fa:c7:5d:52:bf:c5:04:80:de:ae:10:95:
32:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:77:DE:2D:88:AC:44:26:6E:2B:91:15:F8:BE:6C:D2:65:7C:8D:02
X509v3 Authority Key Identifier:
keyid:5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:88:12:6e:61:6f:70:e2:9e:46:ca:fe:99:e1:01:0c:5a:1a:
8a:7c:24:5e:18:33:b1:95:91:04:aa:e7:35:be:55:6e:7c:ba:
5e:8f:41:72:d1:f9:dc:df:8d:15:3d:77:f6:19:40:de:26:5a:
b8:dd:0d:d3:9b:6e:11:70:48:39:25:c0:1f:26:14:24:c5:68:
00:6e:27:6e:34:b4:23:ac:24:d9:51:48:5e:53:e2:6a:16:ee:
7c:7e:60:d4:61:9f:16:9f:ce:a8:3d:b0:a5:fb:b4:c9:8d:5f:
3a:aa:a3:6b:04:95:2a:b8:05:72:98:4a:fd:3e:44:f0:e9:f7:
2f:ea:f9:1d:fb:6d:2f:94:24:77:47:2c:81:88:9b:16:f9:e3:
ca:30:c0:7b:3b:09:9c:d4:80:41:3b:d0:5b:1b:de:2b:96:3d:
91:6b:be:72:eb:9b:bb:42:9f:22:3b:b1:e5:03:e3:a6:f6:c5:
7b:3e:35:10:31:76:83:0d:f7:9c:a2:88:ba:09:56:3d:77:05:
16:d9:e5:97:e4:ed:c3:a9:77:7e:5e:e2:ce:c1:3e:53:d9:68:
fb:8c:95:2a:7b:89:ae:3a:1d:4c:f4:b8:01:d0:1b:3a:27:15:
1c:c8:a0:6c:7a:ce:39:38:69:0b:87:79:35:85:7d:08:8a:fa:
67:dd:9b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:30:03 2026 by rpki-client