Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
File: Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft (raw, json)
Hash identifier: B9Jy6BkpjeYP3HJHGo6OcDp4s6FV96C1mWAA9+nX954=
Subject key identifier: 4C:4A:EA:31:5B:D1:A6:D1:8A:B4:EB:48:01:FB:04:85:82:95:ED:F8
Authority key identifier: 5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74
Certificate issuer: /CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374
Certificate serial: 019D382E84737C760DAA29365E1CF6E7314D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:01:05 +0000
Manifest this update: Sun 29 Mar 2026 06:01:05 +0000
Manifest next update: Mon 30 Mar 2026 06:01:05 +0000
Files and hashes: 1: GqSD-huFyN5KnbmOJE2G9Ex44l8.roa (hash: 3Qs/JfYQSZ6IzynE4ipg87qcZBEyHL3uWN4yF6V7P0w=)
2: VS_M4cAagWUGuW9fqRkh-RrWxeM.roa (hash: hZcQF43INC8Yz5JTh0PAiO/K0ZNFR1rzI3rKsJwe74E=)
3: Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl (hash: IuJ14tww+5aP6bvrlhkx5O2ZEiahb5RzZSeWxu+gmAE=)
4: rwfC2i-yhf4UtPPyaXqIB4OR2c8.roa (hash: 7pkGwTQxoCILPcgqkjDlu2UDM7lXD5BJiZpj+8CPoC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:84:73:7c:76:0d:aa:29:36:5e:1c:f6:e7:31:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374
Validity
Not Before: Mar 29 06:01:05 2026 GMT
Not After : Mar 30 06:01:05 2026 GMT
Subject: CN=4c4aea315bd1a6d18ab4eb4801fb04858295edf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:64:e5:8a:ba:67:47:77:a8:1c:61:51:c9:d0:
f9:67:21:70:c0:22:a2:d3:ca:f9:a5:06:14:05:80:
6e:a0:d6:6d:35:cb:f7:7c:7b:95:67:5b:c4:e6:43:
39:5a:eb:09:ac:8e:c8:ad:ce:ea:ef:c1:0e:d6:50:
00:b2:f0:a6:a6:5c:77:f0:11:90:e6:f9:1e:8d:eb:
75:67:70:39:41:dc:04:b1:ae:e0:0c:65:df:2a:14:
05:7e:04:33:87:ab:3f:f9:54:80:ed:c1:d8:2b:3c:
4d:97:19:4d:b6:e2:1b:75:3b:8e:b4:43:53:8e:c7:
41:a1:22:41:13:aa:65:26:62:fb:93:a7:44:1c:3e:
c3:90:e1:cc:93:5a:e0:35:1a:20:2a:78:79:fa:b2:
ed:eb:51:53:44:87:4f:c6:8e:16:07:75:89:fe:49:
3c:fc:6f:22:e0:44:27:c2:c3:ec:4b:97:c7:1d:96:
47:92:54:90:38:ad:f3:67:7f:13:56:04:c6:42:11:
56:10:0b:85:db:d4:83:e1:42:0f:f9:72:3f:d5:4d:
0a:ec:d1:a5:f8:ad:34:65:d2:50:45:a0:61:6c:12:
1f:ab:8c:d0:4d:93:dd:0a:a8:8c:92:47:2f:db:7d:
7a:f0:49:e0:25:ee:db:f1:47:07:d5:c8:be:d7:ec:
b8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4A:EA:31:5B:D1:A6:D1:8A:B4:EB:48:01:FB:04:85:82:95:ED:F8
X509v3 Authority Key Identifier:
keyid:5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f0:cd:09:23:2b:fb:db:69:19:90:8a:fb:60:24:dd:1f:cc:
81:3a:a3:95:46:0b:80:f2:4c:d5:1d:7e:49:d2:64:d2:2a:cb:
f7:48:98:d6:35:04:e6:9f:70:1f:f6:d3:d3:be:ae:bb:bc:80:
78:32:24:a8:e6:46:bd:0d:94:77:64:58:68:3d:4a:23:98:f0:
71:40:a9:50:4e:0b:c1:d0:30:7f:f1:8c:d9:c8:4b:9f:89:5e:
76:8f:f0:32:fd:6b:ed:26:63:b4:20:0f:da:98:17:c7:95:60:
19:27:49:fd:7e:1c:72:67:58:21:50:cd:8f:2a:ba:7a:21:2e:
22:ca:15:4e:e4:5d:1a:d4:c5:75:b5:a1:4f:4a:a0:b9:4a:8e:
fe:ed:f1:1f:26:ae:4b:53:00:56:4c:5a:86:b4:d0:d1:65:e3:
c5:7a:2b:f6:2e:f4:9d:4a:48:81:93:89:b0:63:62:2a:2f:9e:
c2:c6:48:dc:da:69:f3:d2:33:5c:7a:04:89:6f:dc:5a:74:e7:
4b:94:fc:d5:3c:b1:5f:9f:27:da:8b:21:6f:dc:1a:1a:8f:6b:
a8:ae:a7:50:a0:2f:fb:e7:5e:ca:ce:aa:a6:03:3d:e1:aa:2b:
4f:53:da:31:55:f0:1b:ea:c0:a5:3d:5e:69:14:17:36:6e:d0:
b2:c2:98:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:57 2026 by rpki-client