Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/650c64-275d-44e1-84dc-f5b81ccf09cd/1/XiYr5dEt_b4keeOiBxP0V-k_Bps.mft
File: XiYr5dEt_b4keeOiBxP0V-k_Bps.mft (raw, json)
Hash identifier: jG8zllspPPOxGCB3P5WOzCdDHuvM78fykie8swq2j5w=
Subject key identifier: F2:DC:81:34:C7:CC:3F:66:CD:15:70:E3:1C:0D:F4:AE:00:A9:AB:DA
Authority key identifier: 5E:26:2B:E5:D1:2D:FD:BE:24:79:E3:A2:07:13:F4:57:E9:3F:06:9B
Certificate issuer: /CN=5e262be5d12dfdbe2479e3a20713f457e93f069b
Certificate serial: 019D39408E51FC72EBAC16A6D6E87E5F863C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiYr5dEt_b4keeOiBxP0V-k_Bps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/650c64-275d-44e1-84dc-f5b81ccf09cd/1/XiYr5dEt_b4keeOiBxP0V-k_Bps.mft
Manifest number: 029B
Signing time: Sun 29 Mar 2026 11:00:25 +0000
Manifest this update: Sun 29 Mar 2026 11:00:25 +0000
Manifest next update: Mon 30 Mar 2026 11:00:25 +0000
Files and hashes: 1: XiYr5dEt_b4keeOiBxP0V-k_Bps.crl (hash: ZGKjDKcUidUdp695uoFOWNPt5qFpzzPMLHUUSFRotLQ=)
2: neK2XJpGtxENiwluKI1Nc9rcRww.roa (hash: 4JvFz8LvX6hWtb2+k7f5WYEW+8p5Nkh6T42RNRqex7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/650c64-275d-44e1-84dc-f5b81ccf09cd/1/XiYr5dEt_b4keeOiBxP0V-k_Bps.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/650c64-275d-44e1-84dc-f5b81ccf09cd/1/XiYr5dEt_b4keeOiBxP0V-k_Bps.mft
rsync://rpki.ripe.net/repository/DEFAULT/XiYr5dEt_b4keeOiBxP0V-k_Bps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:8e:51:fc:72:eb:ac:16:a6:d6:e8:7e:5f:86:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e262be5d12dfdbe2479e3a20713f457e93f069b
Validity
Not Before: Mar 29 11:00:25 2026 GMT
Not After : Mar 30 11:00:25 2026 GMT
Subject: CN=f2dc8134c7cc3f66cd1570e31c0df4ae00a9abda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:52:58:82:99:08:f5:bf:12:49:a0:2a:7c:78:
bc:fd:32:d8:72:c6:b7:b8:f3:87:22:d2:c2:f1:de:
89:44:99:70:63:3b:a6:54:b4:93:d1:95:e3:c2:a0:
45:2e:2e:95:60:78:80:27:f0:63:91:2b:2c:51:93:
b2:00:f3:6d:74:b6:e3:e4:52:d2:7f:55:8f:cf:e9:
55:7f:1e:01:ff:ad:3f:d4:70:21:df:f1:65:64:b6:
fd:a3:73:14:a7:4b:8f:b7:05:3f:f7:06:e5:e3:b7:
12:ba:41:b7:2c:91:3e:9f:19:9d:1d:fc:e8:0f:b2:
72:bb:71:06:67:1e:69:b6:d5:c4:32:79:24:7d:69:
00:75:48:58:a6:42:08:ff:50:11:06:3d:3f:b7:f2:
8f:00:55:7c:f9:64:ba:42:8e:82:71:a7:d1:3e:3c:
67:1a:74:3c:9a:e3:a9:d3:98:a6:1d:ce:7c:62:b3:
f0:59:a7:b7:1e:93:48:7e:80:c9:01:04:42:27:65:
24:15:7e:a4:b7:f4:b6:ec:be:1b:19:ab:44:82:bf:
88:44:32:66:d8:48:4b:3a:ee:57:35:4e:4b:b3:0f:
f7:20:20:ae:ab:cd:35:f3:63:47:04:89:df:a7:78:
73:59:8c:10:cf:66:c7:f1:62:a7:24:8c:97:e7:f2:
9e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DC:81:34:C7:CC:3F:66:CD:15:70:E3:1C:0D:F4:AE:00:A9:AB:DA
X509v3 Authority Key Identifier:
keyid:5E:26:2B:E5:D1:2D:FD:BE:24:79:E3:A2:07:13:F4:57:E9:3F:06:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiYr5dEt_b4keeOiBxP0V-k_Bps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/650c64-275d-44e1-84dc-f5b81ccf09cd/1/XiYr5dEt_b4keeOiBxP0V-k_Bps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/650c64-275d-44e1-84dc-f5b81ccf09cd/1/XiYr5dEt_b4keeOiBxP0V-k_Bps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:8f:93:f4:73:cc:57:0d:09:9b:50:c0:5b:97:1e:3b:8c:a2:
ad:29:b6:a8:24:8b:47:fa:dd:d6:98:6b:ea:bd:31:84:0a:17:
89:68:7c:25:2e:c6:25:3a:aa:2a:56:e9:c1:cf:b2:53:c6:6d:
d1:b3:11:49:d2:47:c3:cc:fc:a3:a6:39:a8:16:93:94:07:c2:
0d:e7:30:ba:8a:02:47:f9:f3:59:88:79:77:f9:c8:f0:2f:d3:
5f:b7:00:29:d8:f1:22:9f:a0:fe:70:10:dc:e5:05:17:96:b1:
52:70:df:4e:eb:7e:bf:1c:50:85:dc:be:f2:7e:e3:87:8d:c6:
3b:3d:20:2c:ce:28:c3:38:2f:ce:6d:4a:8c:ac:57:f1:f2:5e:
83:2d:68:22:aa:9d:b7:9d:71:93:5e:d1:29:f9:05:b8:55:78:
b1:f2:09:5d:dd:a0:15:a3:04:05:4d:75:90:4c:73:69:8c:42:
b3:82:5e:7b:2c:94:76:a1:99:76:11:1c:21:b9:46:9a:5a:36:
0c:b6:28:91:77:cd:d6:9d:1d:61:1e:52:f0:35:60:36:3c:01:
af:e1:d4:15:1e:74:c8:5f:df:4c:18:a1:1f:e6:47:d1:be:34:
aa:6d:b7:0e:db:3b:e8:4c:7d:47:51:05:3b:fd:4e:65:8e:c4:
07:b6:4f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:28 2026 by rpki-client