Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft
File: XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft (raw, json)
Hash identifier: vGcnzYhtuyoW8xrDWu881eOhdVoOqRWtRHu3aFw/2hU=
Subject key identifier: 26:24:1B:88:E4:D4:F6:19:B3:D4:C2:3A:C6:97:24:3A:BB:EE:44:33
Authority key identifier: 5C:71:96:DC:5F:40:F9:6D:2D:E6:79:9D:C7:71:BA:A3:B5:3D:CD:82
Certificate issuer: /CN=5c7196dc5f40f96d2de6799dc771baa3b53dcd82
Certificate serial: 019D3865BE2106FFE6A2BA40CF13BF053545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHGW3F9A-W0t5nmdx3G6o7U9zYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft
Manifest number: 0362
Signing time: Sun 29 Mar 2026 07:01:25 +0000
Manifest this update: Sun 29 Mar 2026 07:01:25 +0000
Manifest next update: Mon 30 Mar 2026 07:01:25 +0000
Files and hashes: 1: B0AwT1AxvZConXxpfYlz8S5oSuI.roa (hash: /ba96dMiwiLgM5bGs3qQwa8ZJcQUvwrwpVlv05ryZOI=)
2: XHGW3F9A-W0t5nmdx3G6o7U9zYI.crl (hash: HgDhl2S41h5WC92QOTP1sUnpdoI+7lBHrQkY5fAwpEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHGW3F9A-W0t5nmdx3G6o7U9zYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:be:21:06:ff:e6:a2:ba:40:cf:13:bf:05:35:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c7196dc5f40f96d2de6799dc771baa3b53dcd82
Validity
Not Before: Mar 29 07:01:25 2026 GMT
Not After : Mar 30 07:01:25 2026 GMT
Subject: CN=26241b88e4d4f619b3d4c23ac697243abbee4433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:04:96:32:8a:2b:71:53:6a:6c:33:1e:56:a1:
48:8c:5f:54:ac:dc:62:ca:ac:af:f3:f0:9e:75:36:
c5:d5:bc:fd:b1:58:bd:7d:ee:2a:ce:ef:50:16:0c:
9f:b2:72:24:57:c2:be:32:b9:ae:84:f5:7f:a4:00:
5e:84:45:86:54:5b:62:68:63:c2:a3:1a:95:b6:47:
98:71:fd:9e:68:36:7d:a1:5b:a3:7e:e5:62:4c:b3:
1e:d2:d4:da:eb:76:a3:7f:d5:69:ec:c7:c6:ff:d7:
48:dd:f0:5b:bb:72:fd:68:7d:3d:39:4d:05:28:75:
41:b1:dc:7f:e8:05:17:19:c0:e8:d3:56:9b:3c:c1:
89:5b:be:47:2c:5f:f9:1f:45:0b:89:43:7f:4d:ec:
99:eb:05:5d:dd:23:6f:35:38:61:f8:8b:55:f3:4a:
bf:e0:b4:45:8d:e6:54:81:61:92:ed:d3:d3:f2:de:
a9:98:3a:fa:b4:e8:25:ec:26:50:90:33:41:61:66:
df:d7:6f:39:a3:d9:c4:15:26:8f:f6:7f:ab:86:d0:
29:7f:61:4c:b2:45:ae:73:16:fe:f8:7f:d0:6e:7c:
fa:b6:13:72:d6:ad:45:5a:24:ba:cf:fe:07:a6:65:
f5:61:87:da:7b:5a:82:3d:c3:75:9c:a4:a8:f3:3a:
77:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:24:1B:88:E4:D4:F6:19:B3:D4:C2:3A:C6:97:24:3A:BB:EE:44:33
X509v3 Authority Key Identifier:
keyid:5C:71:96:DC:5F:40:F9:6D:2D:E6:79:9D:C7:71:BA:A3:B5:3D:CD:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHGW3F9A-W0t5nmdx3G6o7U9zYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ea:59:55:bd:29:11:4f:a7:5d:b7:76:09:c5:b2:98:81:6b:
ec:b3:8b:0a:c5:65:3c:a6:6c:8c:68:40:ea:dc:8b:b9:3e:9f:
14:53:ef:5f:52:50:3e:44:da:bd:33:99:40:98:bc:58:e7:d8:
ed:4f:18:4f:86:89:ee:14:96:a6:ca:19:32:e4:10:e9:46:96:
3d:e8:9d:e7:f1:e0:d8:02:6c:25:f5:9e:9b:74:7b:e9:bc:e1:
77:fb:29:5f:a8:68:2a:3f:94:8e:b1:8b:9e:e6:48:9a:62:35:
2c:89:e9:2c:4b:22:77:e3:73:98:d4:03:8c:d1:15:f5:76:05:
67:fa:fb:57:42:c5:03:f7:5c:97:63:a0:b1:5e:7a:0e:f3:79:
d4:89:46:9f:8e:0b:bf:8d:58:d7:37:c7:3e:16:0d:7d:d1:d0:
bd:50:c6:58:c4:75:3b:b9:9a:2b:6a:3f:68:8b:7d:de:94:12:
fc:a6:11:5e:9e:c8:3b:23:e3:6c:62:89:63:2e:95:68:b5:f9:
52:a6:2b:89:11:20:3f:cd:c6:f5:bd:7e:d8:f8:cb:20:8a:62:
f9:dc:60:8a:b0:79:9f:06:51:a5:a5:bb:c8:a2:d7:c9:54:5a:
6d:08:11:5c:dd:96:00:54:13:5d:dc:44:94:aa:92:cb:8b:eb:
68:9e:55:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:49 2026 by rpki-client