Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
File: XAAsRHm7TJbiI0OZznH1YDRSmdA.mft (raw, json)
Hash identifier: Osefq9iy+BNuvoMFpKxVRTUDI/bdzmzuHCjh8WIvOQc=
Subject key identifier: 51:59:E7:8E:00:D3:E0:C9:75:F5:75:5F:0E:9C:29:75:A1:8B:EF:6B
Authority key identifier: 5C:00:2C:44:79:BB:4C:96:E2:23:43:99:CE:71:F5:60:34:52:99:D0
Certificate issuer: /CN=5c002c4479bb4c96e2234399ce71f560345299d0
Certificate serial: 019CAB6ACBFBCA2D4273DE15DBC5152337F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
Manifest number: 0ADA
Signing time: Sun 01 Mar 2026 22:00:28 +0000
Manifest this update: Sun 01 Mar 2026 22:00:28 +0000
Manifest next update: Mon 02 Mar 2026 22:00:28 +0000
Files and hashes: 1: XAAsRHm7TJbiI0OZznH1YDRSmdA.crl (hash: ZXnyUNJ1LnwgrxuqAScUNyF3lDVTPKm7DgvWLtD5mQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:cb:fb:ca:2d:42:73:de:15:db:c5:15:23:37:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c002c4479bb4c96e2234399ce71f560345299d0
Validity
Not Before: Mar 1 22:00:28 2026 GMT
Not After : Mar 2 22:00:28 2026 GMT
Subject: CN=5159e78e00d3e0c975f5755f0e9c2975a18bef6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:17:8b:43:71:fb:c9:b4:a8:e7:e3:99:08:7c:
fb:7f:21:40:7e:a5:3c:66:d0:fe:b4:de:71:b9:3c:
da:fa:4c:56:6b:77:1b:f3:61:17:a3:f8:80:ab:eb:
e6:4b:a3:16:3b:1c:6e:ab:2f:c5:b1:0c:49:f4:f7:
a6:21:87:e8:44:38:92:0b:91:0a:c2:9d:30:c5:2a:
c5:1c:70:83:0d:7b:c4:7b:db:28:cc:d5:5e:38:06:
a9:9e:a8:21:76:ef:31:40:d3:45:4e:19:4a:5b:47:
5c:65:8f:42:8a:e6:65:40:12:37:43:7f:44:60:66:
4a:e3:51:fd:7d:ae:89:c3:de:4e:51:1a:27:f2:d1:
91:e4:3c:55:c6:39:85:70:ef:6f:a2:de:6e:3b:cf:
0c:0b:8f:6f:49:da:3c:05:f3:84:eb:16:cd:d6:85:
d5:d6:93:2b:01:0a:c6:37:da:5d:6b:ff:21:d1:bb:
24:bc:19:22:14:84:ab:30:76:33:60:7b:6b:02:00:
82:6e:7c:50:32:02:33:57:9e:93:6c:22:c7:66:82:
71:57:f4:56:e6:2a:3a:6a:38:be:c7:98:38:7b:59:
18:62:d9:8c:fc:f4:31:3f:21:d8:1f:1e:37:bc:f4:
bc:89:da:e1:8e:68:d8:59:c2:58:4b:ee:1b:89:b9:
3b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:59:E7:8E:00:D3:E0:C9:75:F5:75:5F:0E:9C:29:75:A1:8B:EF:6B
X509v3 Authority Key Identifier:
keyid:5C:00:2C:44:79:BB:4C:96:E2:23:43:99:CE:71:F5:60:34:52:99:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:87:94:7b:cc:d4:87:e1:d9:b0:a1:b8:ee:f0:23:d3:7b:9d:
1e:ff:68:06:3c:6e:81:03:46:84:31:3b:6c:c8:ff:3f:fb:68:
ea:3f:44:07:ab:e6:a8:b9:37:e2:99:db:bd:6d:bd:2a:b4:8f:
b3:8f:11:86:aa:52:09:c8:b2:2b:bf:7e:eb:75:d6:28:39:d0:
5a:24:40:50:71:8d:0f:21:52:95:ad:ee:f9:01:be:fe:3c:dc:
a4:d1:9b:0a:47:d8:93:1c:e1:d8:da:5d:0f:de:c9:53:73:73:
36:de:3b:3e:01:c4:eb:5f:d6:c3:83:46:64:f0:99:aa:0d:ae:
05:c2:d6:78:2b:30:f3:05:98:78:54:0d:74:e4:51:7a:c2:d9:
dc:f1:8e:c7:8f:6d:7c:18:8c:db:89:18:75:74:6f:36:17:89:
29:00:9d:43:f1:ec:72:c2:cb:71:61:cc:1c:67:a2:1b:31:04:
f8:e9:b3:5e:68:7e:01:07:cd:d9:c4:c1:82:ae:16:ce:7b:4f:
47:bf:2f:68:c1:0a:8c:ad:ab:78:f2:42:4e:54:e1:03:7e:17:
01:d1:40:7c:6b:b1:33:82:cb:45:b9:2d:5d:5c:b2:a0:35:a5:
6c:ef:8f:78:01:1b:be:c8:49:4c:3d:4c:fb:83:5c:94:d7:1a:
69:7c:f1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:49:58 2026 by rpki-client