Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
File: X1B54OWHxH_xTSAhEvTu94sHhJE.mft (raw, json)
Hash identifier: AsXD5VCOXXXhrCHuLXwh6FnBO9x7MxfYq9n1KOytgDw=
Subject key identifier: CB:2E:DF:D3:DF:FA:4F:AF:F9:7F:10:A6:82:35:4B:29:86:C8:76:32
Authority key identifier: 5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91
Certificate issuer: /CN=5f5079e0e587c47ff14d202112f4eef78b078491
Certificate serial: 019CAD229AAE2EE93FE243A8E0006EB1CE05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
Manifest number: 0A6A
Signing time: Mon 02 Mar 2026 06:00:51 +0000
Manifest this update: Mon 02 Mar 2026 06:00:51 +0000
Manifest next update: Tue 03 Mar 2026 06:00:51 +0000
Files and hashes: 1: 7bGl1Xdi6Pm1X1Ab1Zfe3WxrCvQ.roa (hash: WitY0IfqjKazmEtgATl+1ViOVRltHmA3RLHFAZFUngo=)
2: X1B54OWHxH_xTSAhEvTu94sHhJE.crl (hash: rPljHDSNA43ouVhpngiKm1BxQ2WE/dVZtuZRy5otQJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:9a:ae:2e:e9:3f:e2:43:a8:e0:00:6e:b1:ce:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5079e0e587c47ff14d202112f4eef78b078491
Validity
Not Before: Mar 2 06:00:51 2026 GMT
Not After : Mar 3 06:00:51 2026 GMT
Subject: CN=cb2edfd3dffa4faff97f10a682354b2986c87632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:67:e7:a7:a0:bc:1c:c7:34:9c:0a:bb:5c:1f:
d4:b3:e8:55:7c:8c:8f:16:9a:2a:67:ec:a1:35:8d:
53:4d:dc:27:e8:43:30:b5:9e:bb:f3:78:f0:35:46:
15:4b:7d:9d:35:6e:6f:7b:6d:6b:f6:bf:84:42:74:
66:89:ba:0d:68:1b:e1:b9:14:bd:21:ea:27:c7:05:
04:8e:cd:05:6a:0f:e9:f5:93:cc:41:f7:ec:67:e6:
66:b1:7a:08:b0:95:c3:65:c2:ab:7f:91:37:1c:fa:
b3:c7:29:0d:15:b2:ce:ba:fc:8b:1e:5c:6f:ca:f3:
b9:d3:19:f8:36:13:21:bb:48:44:7e:2f:bc:eb:0e:
9f:d0:28:d6:73:68:10:0d:9c:07:06:ba:64:2d:bb:
5a:fb:f5:f4:22:b7:44:9d:86:34:17:39:4c:17:3d:
7b:d8:ae:6d:be:c4:b3:cb:e2:cb:df:72:23:78:d2:
d3:ea:99:10:2b:e2:61:f4:53:d2:6a:b0:cb:03:a1:
9d:39:46:88:13:8d:51:b6:e6:5d:44:a0:97:39:cf:
33:99:fd:3d:fe:0c:6c:9c:15:82:a8:53:07:2c:45:
90:0c:5f:ed:55:c6:06:d2:d6:11:51:33:b6:2a:16:
a8:f1:ba:27:1c:40:8d:a4:a6:f3:6d:be:25:ce:81:
86:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2E:DF:D3:DF:FA:4F:AF:F9:7F:10:A6:82:35:4B:29:86:C8:76:32
X509v3 Authority Key Identifier:
keyid:5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:80:b0:4b:a7:41:be:88:23:3c:01:1a:61:4c:48:63:05:dc:
0a:57:f6:3a:81:ef:77:ab:6a:5a:37:4b:7e:1d:88:bf:f0:be:
6d:54:ef:9f:6d:f4:da:90:a8:d4:9f:81:84:fb:63:ab:81:0a:
f2:0a:65:45:eb:ef:3c:de:15:76:43:10:7a:06:08:d8:be:45:
f5:ba:65:6e:8f:a9:98:ef:21:1b:0d:3e:1d:26:92:86:76:b0:
8f:cd:57:03:db:ec:5e:ab:97:fa:fa:13:99:3b:51:da:92:ac:
43:3c:e7:81:1a:37:39:27:84:0e:f8:46:97:d4:06:a9:67:ec:
60:d2:c1:3f:6b:01:c2:3d:dc:63:b8:58:cb:7d:eb:4f:d9:ec:
a2:76:09:1b:db:76:38:3a:f9:a5:da:9b:10:92:23:02:50:9f:
b7:bd:68:51:12:aa:55:04:c4:ac:16:15:b7:9e:9d:62:25:50:
f0:d4:65:a8:b8:3f:43:de:72:ac:d1:d9:d4:19:d9:7e:f2:42:
aa:43:f4:54:db:d2:87:64:75:85:be:9f:7a:3f:d9:79:91:b8:
17:a1:c1:1d:10:92:b9:7b:b0:f4:81:d7:c9:3a:6b:f7:a7:8b:
55:be:0d:06:c2:7c:74:99:7d:82:a9:da:f0:b7:b5:c7:61:f7:
61:7e:22:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:31:15 2026 by rpki-client