Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
File: XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft (raw, json)
Hash identifier: LSPcsxXacpNDWZDSCvkdX8qws5fxwsCn92+LP5MeTi0=
Subject key identifier: 6C:CA:17:E6:D6:01:A4:C1:E0:23:EB:EE:25:A2:17:A6:DA:46:47:40
Authority key identifier: 5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B
Certificate issuer: /CN=5e67660af7523c61b7f95d08488d583e9d514f6b
Certificate serial: 019D25831F0B107D492198E63C5C3D4A4A2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
Manifest number: 08A2
Signing time: Wed 25 Mar 2026 15:00:43 +0000
Manifest this update: Wed 25 Mar 2026 15:00:43 +0000
Manifest next update: Thu 26 Mar 2026 15:00:43 +0000
Files and hashes: 1: XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl (hash: 05G238T69OS1XI2aeiA6AZIDmhPtbibStzdAwDVMjoc=)
2: i5WP_AihTIXhPy_BVXYv71HxOto.roa (hash: VJGbYlBp9HGyGJZxGUnm0bEpFbqRPbJagnJqTdbqGUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:1f:0b:10:7d:49:21:98:e6:3c:5c:3d:4a:4a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e67660af7523c61b7f95d08488d583e9d514f6b
Validity
Not Before: Mar 25 15:00:43 2026 GMT
Not After : Mar 26 15:00:43 2026 GMT
Subject: CN=6cca17e6d601a4c1e023ebee25a217a6da464740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:44:0e:49:1e:97:b7:8c:df:dd:5b:a7:c9:29:
27:cf:38:bd:d6:89:58:dd:4c:e3:ac:b6:44:64:a4:
dc:2c:4c:9a:23:18:e5:70:fc:c7:cd:60:f6:92:6f:
ae:32:de:ed:f9:7e:d5:a0:2d:34:52:29:69:6c:55:
68:14:46:02:b4:fa:5c:35:ba:2a:b7:fc:35:25:cc:
a4:8f:b0:7b:db:1f:ae:75:11:76:c3:63:27:cf:ff:
dc:1f:3a:83:49:97:fb:ac:cc:36:ce:0c:0a:14:91:
a2:22:92:37:a1:fd:da:20:b7:9e:38:8e:0a:0e:9c:
2b:aa:b8:a5:0c:7d:12:35:30:3b:37:ee:91:a7:66:
96:b4:4e:dd:9d:30:a8:1e:7e:32:f2:4e:0e:5f:d7:
cc:87:ee:3d:9f:a6:7e:4a:b7:83:57:15:7d:1c:92:
8f:2f:24:58:77:3e:38:c0:31:ee:a6:7a:08:00:bf:
2e:28:d7:95:08:b1:55:06:b1:82:6f:1f:36:90:9c:
7b:e0:90:8a:13:64:e0:53:50:cc:ee:20:1a:e7:1e:
a4:9b:65:6e:54:21:1c:ec:06:78:55:dd:41:50:66:
af:05:e9:ea:0f:a4:59:e2:4c:2f:7f:ba:e6:e1:a1:
c3:89:a3:2f:12:dd:57:7d:50:83:09:dd:c1:30:c7:
0b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CA:17:E6:D6:01:A4:C1:E0:23:EB:EE:25:A2:17:A6:DA:46:47:40
X509v3 Authority Key Identifier:
keyid:5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:7a:54:06:d5:17:19:65:64:fb:82:ea:f5:ee:d3:d6:54:94:
90:9e:c7:5e:5f:ea:22:02:84:9f:a3:7d:a9:e8:9f:04:20:19:
e7:29:18:3c:e0:11:4a:53:2d:41:d8:8b:8f:14:fc:4d:96:b8:
0b:41:6f:5e:a9:70:35:00:4a:10:ad:f9:a1:8c:0e:a7:40:81:
00:b6:c9:a2:e9:81:54:c9:fd:bc:56:02:8b:0c:11:81:73:c0:
ed:80:e8:e1:57:a7:59:87:87:fc:d7:e9:20:4d:6b:27:3b:cd:
58:70:71:38:ae:00:bb:c3:28:21:f7:86:0f:b6:ec:e5:6d:10:
ae:0b:ef:c8:4a:a5:66:03:dd:8c:18:70:17:d8:f0:d0:44:ba:
7f:89:5d:ad:dd:dd:8e:49:42:ed:08:f2:7d:52:ba:62:6c:c9:
f5:87:13:e8:1a:03:27:fd:50:8e:c6:11:36:3c:9f:df:2d:00:
1d:84:59:74:ed:6b:7a:42:46:80:06:47:e8:8f:13:cd:47:cc:
e1:a2:4b:8d:1e:57:63:ab:e5:95:bc:98:65:f0:bc:11:ab:cd:
b5:49:97:24:b0:f7:3c:db:2f:02:91:4c:fd:c7:98:fa:80:8d:
98:92:52:16:02:e5:41:04:bb:3c:a4:67:70:02:25:7a:43:a9:
1a:1d:27:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 19:24:32 2026 by rpki-client