Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft
File: XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft (raw, json)
Hash identifier: 4NUNKMLi3RZ93wh9B0IOZyB5MhxBxUjHmwBCyG0YzXw=
Subject key identifier: 00:74:AE:BB:87:B1:B5:08:D0:77:EF:B2:46:4B:A8:F7:10:94:5C:CF
Authority key identifier: 5E:35:ED:04:3C:8D:E1:51:BE:BD:C0:9D:FC:BF:FC:C7:DC:77:59:C7
Certificate issuer: /CN=5e35ed043c8de151bebdc09dfcbffcc7dc7759c7
Certificate serial: 019D3865E1F1175EE5A1044C8190CF9988BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 07:01:34 +0000
Manifest this update: Sun 29 Mar 2026 07:01:34 +0000
Manifest next update: Mon 30 Mar 2026 07:01:34 +0000
Files and hashes: 1: XjXtBDyN4VG-vcCd_L_8x9x3Wcc.crl (hash: 43H6TYcev0m0LHe9CXMUVgTXfWiswgUOuRe4b31R0Ow=)
2: XzphqRpkRrzjOv5FtFqro4DwZLQ.roa (hash: h/AVe6fTP5tyOHDPmKSbzLzgs09QReFXbQnEVOq2pVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:e1:f1:17:5e:e5:a1:04:4c:81:90:cf:99:88:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e35ed043c8de151bebdc09dfcbffcc7dc7759c7
Validity
Not Before: Mar 29 07:01:34 2026 GMT
Not After : Mar 30 07:01:34 2026 GMT
Subject: CN=0074aebb87b1b508d077efb2464ba8f710945ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:23:cd:43:4c:00:de:98:d8:67:76:30:86:0c:
bb:a0:e9:cc:a2:c8:3c:1b:5e:82:3f:ee:3a:ac:5b:
c4:20:67:96:33:fd:bb:fa:2f:77:4b:73:e0:bb:9b:
46:fd:83:d9:51:0c:2c:67:5b:5b:12:53:8b:24:68:
50:c4:f6:14:b8:f2:83:fc:5d:93:e6:c1:87:be:73:
c3:ff:84:ea:7b:bb:4d:77:2e:19:b9:8b:50:99:9a:
6e:4d:ac:e0:71:0e:35:76:2b:b7:11:bf:43:f2:d6:
73:2c:fa:78:c1:ba:d5:72:68:4c:bd:38:b3:b9:21:
ab:af:9b:7b:8b:78:4d:80:1d:82:22:be:b3:78:94:
5b:22:57:de:1a:bc:0d:89:1b:f5:d1:a2:88:36:1d:
0f:c5:4f:07:da:bb:fc:3f:68:1c:12:d7:1c:21:1d:
7c:16:ae:6a:ed:76:89:b3:37:6e:f1:c7:5c:d7:72:
b9:b5:0d:bb:33:c7:4e:30:89:bf:76:60:c5:62:34:
08:9c:58:2b:81:a1:1a:db:ba:01:82:40:04:b3:7f:
c7:e3:67:e8:c1:a9:56:72:99:5b:df:59:85:4e:8e:
b8:9d:a9:02:80:70:aa:c5:e6:42:48:53:bf:4a:fd:
81:c5:33:6a:20:3d:fa:d9:ed:07:d0:f1:48:45:ae:
bb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:74:AE:BB:87:B1:B5:08:D0:77:EF:B2:46:4B:A8:F7:10:94:5C:CF
X509v3 Authority Key Identifier:
keyid:5E:35:ED:04:3C:8D:E1:51:BE:BD:C0:9D:FC:BF:FC:C7:DC:77:59:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e6:47:33:d5:36:bb:ba:3b:05:c2:c3:56:6c:73:e7:d7:2f:
f5:bb:7b:7a:5c:08:02:90:bd:09:94:a7:53:25:ec:a8:e2:8b:
80:74:d1:58:b2:84:7f:06:0f:2d:cd:ab:cf:1b:dc:28:78:b3:
ca:3a:fe:3b:5f:40:7d:fb:d3:80:4e:ed:43:ca:68:40:85:a3:
17:7b:30:ea:81:98:c6:9f:32:48:88:4e:40:0c:4e:96:4a:62:
b6:b3:a4:b9:56:d2:34:1f:ab:51:da:74:ac:eb:7e:15:3d:f2:
5b:86:6b:06:5f:40:8c:b4:b5:0c:88:93:a0:50:53:fc:d3:99:
25:92:ac:9b:2e:9c:e3:e6:ef:f3:c2:b7:6c:a1:20:e9:24:0e:
52:1d:23:c2:de:96:91:a2:42:f0:e2:65:96:6f:35:44:be:83:
eb:1b:b8:64:c1:e5:c0:bc:f3:6b:5d:ac:14:bb:b6:9e:88:2b:
ba:66:b7:ab:11:65:1c:5f:50:bb:9b:68:ab:2f:79:ae:0d:57:
b6:7f:d3:39:e3:3f:f2:13:3a:15:33:98:3e:4d:e4:48:7f:2f:
bb:28:bd:cd:5f:99:2c:b1:f5:01:6d:c3:4e:7b:7e:d9:a6:13:
8a:07:11:0f:7e:ad:97:b1:71:7f:22:d9:2c:91:19:10:23:d5:
0d:71:0b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:20 2026 by rpki-client