Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft
File: XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft (raw, json)
Hash identifier: UzjpymW2/gT3TKop53DuvzGghOfSWimbodHRo61xNC4=
Subject key identifier: EA:54:BC:85:B4:9F:59:98:C7:2E:A9:FB:54:7F:CE:EB:E2:33:C5:45
Authority key identifier: 5C:8E:DA:6F:EA:6B:18:F1:0D:FD:6A:FC:0D:83:BE:FB:AA:69:C1:34
Certificate issuer: /CN=5c8eda6fea6b18f10dfd6afc0d83befbaa69c134
Certificate serial: 019D38D2E958E3F84D72DA166D61E1730CD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XI7ab-prGPEN_Wr8DYO--6ppwTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft
Manifest number: 03D2
Signing time: Sun 29 Mar 2026 09:00:39 +0000
Manifest this update: Sun 29 Mar 2026 09:00:39 +0000
Manifest next update: Mon 30 Mar 2026 09:00:39 +0000
Files and hashes: 1: XI7ab-prGPEN_Wr8DYO--6ppwTQ.crl (hash: YXgwaPPP7Zkg0bf9Uj3g1gdr7uq8oKlKK6tDWG3iEvc=)
2: me98_wsRR7Dre8BQObFIjOvSk10.roa (hash: IWaVGy6xlS7+7awuDuk9s6GrzSOf2jIVIAxnChH+pBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XI7ab-prGPEN_Wr8DYO--6ppwTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:e9:58:e3:f8:4d:72:da:16:6d:61:e1:73:0c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c8eda6fea6b18f10dfd6afc0d83befbaa69c134
Validity
Not Before: Mar 29 09:00:39 2026 GMT
Not After : Mar 30 09:00:39 2026 GMT
Subject: CN=ea54bc85b49f5998c72ea9fb547fceebe233c545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:88:a8:af:34:25:94:3d:1b:51:7e:d6:6c:93:
0b:85:2a:b3:72:25:e6:e0:24:35:a7:93:9a:68:45:
83:63:01:db:ce:c4:c4:db:07:7e:1e:f4:de:fe:3f:
66:87:5d:fa:03:b3:44:97:6d:dd:0e:f5:39:5d:8e:
4f:9f:50:b4:b4:ed:54:af:fb:45:1d:6b:5b:c4:ad:
62:de:9e:b7:69:07:ee:cf:e8:07:01:9a:19:15:4c:
1e:6b:94:8a:c1:c1:4d:23:01:b9:aa:33:3e:04:e4:
77:aa:65:16:dd:dc:e0:74:0d:03:2e:d9:a6:84:fc:
55:00:4d:28:a5:a3:e8:5d:16:78:92:82:6a:ba:70:
a9:2b:84:12:52:78:5c:36:d5:0c:c8:75:ff:6e:1a:
d7:17:da:46:06:c1:06:ae:c7:9c:67:14:e1:08:61:
b8:e6:e5:b0:84:d7:b9:a8:f1:79:78:bf:f4:49:62:
e8:c9:4b:7c:45:12:d6:62:27:7e:34:80:f8:ca:94:
b6:30:01:7f:b5:14:ad:02:56:1f:bc:5d:70:3c:bc:
19:a8:73:c2:23:dd:04:14:2a:2f:27:cb:cd:86:1b:
61:89:74:bb:55:95:c6:f7:d4:36:18:f2:9b:7e:58:
85:e7:bd:b4:19:52:08:44:da:f7:38:10:cd:e1:97:
04:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:54:BC:85:B4:9F:59:98:C7:2E:A9:FB:54:7F:CE:EB:E2:33:C5:45
X509v3 Authority Key Identifier:
keyid:5C:8E:DA:6F:EA:6B:18:F1:0D:FD:6A:FC:0D:83:BE:FB:AA:69:C1:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XI7ab-prGPEN_Wr8DYO--6ppwTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:50:11:8a:29:e4:20:ef:96:81:03:94:91:43:ee:62:2d:48:
26:5b:c2:32:84:48:0a:92:f7:de:ef:cd:15:0f:a4:40:97:7d:
1a:32:3f:dc:69:d1:0a:f7:a2:36:ad:c7:6e:13:16:51:8c:50:
4b:c6:40:93:30:ce:d2:aa:b5:8e:58:0d:fe:92:3d:a4:a1:34:
9a:29:65:f1:8d:44:bc:e4:80:1c:e4:99:16:c2:91:17:cf:b2:
e7:64:e5:bc:6e:d2:b2:f1:78:98:d7:ca:76:a2:75:e2:bc:5d:
ae:44:55:9d:72:f1:c9:4c:bf:46:16:a1:7d:01:07:99:f7:78:
12:98:ea:18:3f:40:10:13:d6:ee:6f:2d:d6:48:8d:ef:3f:e1:
20:c7:f2:f2:9d:6c:cb:97:95:01:cf:51:75:48:e3:8e:9a:d7:
dd:5c:1d:a1:57:4d:4f:e9:2b:de:82:0e:3e:a5:26:b0:17:ee:
70:a3:dd:a4:76:90:25:c3:85:62:15:c2:cb:0e:11:74:93:76:
4e:0d:b6:65:a6:a5:f7:e0:3f:59:fb:3a:1d:6c:3d:23:99:57:
4e:79:66:4d:e2:5b:07:60:11:b8:f7:3f:f8:24:56:03:56:71:
25:fd:ea:51:c0:6a:3e:fa:b4:c8:b7:42:27:d8:90:6b:60:25:
b9:11:ac:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:57 2026 by rpki-client