Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
File: XL6eQwJOzGksM1OYuy2WcRaqwtk.mft (raw, json)
Hash identifier: c0glDb7lARzDKDGq52kCKF27u/tXbE3pRn9C0ZwlC44=
Subject key identifier: 2F:AD:E8:37:0D:57:0C:F6:D6:84:56:9D:04:CF:69:BA:6D:A3:29:C7
Authority key identifier: 5C:BE:9E:43:02:4E:CC:69:2C:33:53:98:BB:2D:96:71:16:AA:C2:D9
Certificate issuer: /CN=5cbe9e43024ecc692c335398bb2d967116aac2d9
Certificate serial: 019CE447F14F12578AE74C68A7CE0EA69B4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
Manifest number: 0E16
Signing time: Thu 12 Mar 2026 23:00:45 +0000
Manifest this update: Thu 12 Mar 2026 23:00:45 +0000
Manifest next update: Fri 13 Mar 2026 23:00:45 +0000
Files and hashes: 1: XL6eQwJOzGksM1OYuy2WcRaqwtk.crl (hash: 64oUtEAGMgFaiwenkYsO2JVRu1m/oajLpG2aQigC0L4=)
2: cdVP4VMQTXg2CT86yVWAypk62nQ.roa (hash: LC40P/qPiuezV8f6FpcmDk2skf+yITxCG3dFo+ERAAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 23:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:47:f1:4f:12:57:8a:e7:4c:68:a7:ce:0e:a6:9b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cbe9e43024ecc692c335398bb2d967116aac2d9
Validity
Not Before: Mar 12 23:00:45 2026 GMT
Not After : Mar 13 23:00:45 2026 GMT
Subject: CN=2fade8370d570cf6d684569d04cf69ba6da329c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9a:61:ea:b9:36:75:71:ee:e4:48:b5:ae:14:
c3:33:97:5a:40:f4:24:9f:c4:d1:14:31:79:ce:c6:
2d:d6:6e:16:f3:be:a3:55:35:2c:63:b9:44:0a:ab:
e4:f4:f1:95:e2:67:a2:54:05:0b:06:60:e2:97:94:
17:b4:4b:b6:07:61:57:7a:f6:d2:d7:e1:1c:1c:62:
6b:2d:90:d0:77:2c:43:e1:2a:f1:20:c6:74:b1:eb:
67:6b:88:e7:ab:ca:b0:e6:6b:58:6d:df:96:f2:0f:
28:95:92:a9:3c:c0:40:41:90:7c:f3:89:e9:13:23:
9e:14:74:9b:49:db:be:3b:d3:ff:1f:95:ef:46:d6:
ba:16:5e:f0:79:e4:79:28:5f:7f:bd:ac:79:80:18:
3a:60:a4:3e:3a:c1:aa:d6:e4:49:bc:26:a0:9a:97:
72:37:7c:12:0e:ad:b2:95:24:d9:c3:da:4a:3e:11:
67:cd:86:df:4e:41:03:ad:32:88:c2:97:f1:b9:65:
a6:2e:92:7d:e8:5f:2b:21:b2:47:9e:04:ab:fc:ab:
52:8e:2e:55:ae:b6:a6:b8:f6:43:1c:ac:cf:ee:44:
74:9b:e7:29:a8:f9:8f:fa:2b:c9:f3:45:41:20:8f:
44:bb:79:42:7f:1d:71:b9:3a:4d:2a:e9:d1:5f:7e:
b0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AD:E8:37:0D:57:0C:F6:D6:84:56:9D:04:CF:69:BA:6D:A3:29:C7
X509v3 Authority Key Identifier:
keyid:5C:BE:9E:43:02:4E:CC:69:2C:33:53:98:BB:2D:96:71:16:AA:C2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f0:69:0f:e5:a5:03:1e:75:0e:3b:6d:e6:ba:5e:7b:9f:c8:
92:17:3d:7f:43:b5:eb:3e:a2:77:a1:f5:5b:f7:31:81:62:09:
d3:53:b9:50:12:7f:b5:11:f8:71:85:15:0b:68:35:1a:b7:da:
9f:cc:29:2c:24:e9:6d:22:d6:a0:70:2a:ce:d5:97:61:09:8d:
28:b6:33:d3:e1:d6:f3:64:dc:6c:84:f4:2e:c8:5b:7e:ef:0d:
2b:26:9a:2d:da:c2:6e:fe:dc:88:d7:20:33:33:be:e0:1d:98:
a8:c6:2b:b1:01:3e:ea:dd:1a:0d:68:49:ce:94:b4:81:8d:4c:
5e:55:36:d1:c0:09:1d:ef:95:80:b0:7b:c4:dc:2d:c3:4d:0b:
b7:7d:cb:5d:bd:12:4d:b7:37:e6:8c:42:68:58:c6:31:77:4f:
fd:36:51:44:80:f1:6f:e6:96:8a:38:1f:37:d8:b5:e2:90:64:
90:7b:d7:6a:cf:d0:a5:15:9a:41:cd:5e:e2:a3:9f:f9:cb:19:
50:a3:33:f5:2e:3f:5f:7a:88:70:55:7d:48:00:d8:17:e1:87:
54:a0:71:2a:a6:f7:d2:61:90:ea:c3:86:9b:ef:4b:e7:68:3a:
ab:91:90:d8:e5:c9:03:33:20:7b:6d:63:66:49:e2:35:47:c5:
1b:29:45:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:57:22 2026 by rpki-client