Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft
File: XtjeCCBk6z_rQCqHPli7aM9dSR4.mft (raw, json)
Hash identifier: ImA3UopufdxrsT+CPBX50pj4sWr2OlOgjkGPqFjEbjU=
Subject key identifier: 09:01:42:70:E3:0E:3A:0C:A0:22:DE:3B:C6:E9:34:07:77:47:3D:C6
Authority key identifier: 5E:D8:DE:08:20:64:EB:3F:EB:40:2A:87:3E:58:BB:68:CF:5D:49:1E
Certificate issuer: /CN=5ed8de082064eb3feb402a873e58bb68cf5d491e
Certificate serial: 019D37BFF13966E91B28CB80ABD5E2D3B627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft
Manifest number: 0A4C
Signing time: Sun 29 Mar 2026 04:00:19 +0000
Manifest this update: Sun 29 Mar 2026 04:00:19 +0000
Manifest next update: Mon 30 Mar 2026 04:00:19 +0000
Files and hashes: 1: V6ybFfc4rzpu3NrH9kaqGbFeKqk.roa (hash: CmcBK0JbdCkq9SyfG/xpgWBN+pvjaz0MINnXMk2x50o=)
2: XtjeCCBk6z_rQCqHPli7aM9dSR4.crl (hash: SKpbeMQhaJbBaW7/n9b+uP1f/5lwPz4rgEoE0wFWpo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:f1:39:66:e9:1b:28:cb:80:ab:d5:e2:d3:b6:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed8de082064eb3feb402a873e58bb68cf5d491e
Validity
Not Before: Mar 29 04:00:19 2026 GMT
Not After : Mar 30 04:00:19 2026 GMT
Subject: CN=09014270e30e3a0ca022de3bc6e9340777473dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:19:9d:16:6e:a1:7e:be:3d:8e:ec:7b:fe:7d:
c3:44:62:61:a9:8b:75:7a:02:04:ac:bb:2f:af:43:
83:e0:15:ae:6c:54:e2:f2:ab:b5:a6:ce:8d:ca:cd:
7a:f7:89:c3:dd:86:db:44:75:08:fc:fb:19:d4:d0:
3b:a7:d1:9b:b5:3b:fb:20:cd:3d:87:c9:8e:84:9b:
00:42:8b:a6:3e:8e:be:e5:40:02:44:78:86:ce:78:
eb:fa:06:2a:d3:38:f2:6a:e3:cc:c3:cd:a4:40:f2:
c1:eb:3a:5b:f8:53:1e:25:27:82:98:e8:80:ae:d8:
da:82:45:28:bd:31:7a:1c:98:3c:cc:4c:b8:a2:31:
97:4e:bf:ab:4d:a2:00:72:96:63:a2:08:6a:0f:4a:
02:72:17:63:0e:5e:4e:82:a9:99:d2:ce:8a:14:cd:
7e:50:64:bb:2b:78:f3:aa:39:d6:0f:b0:cd:0a:8d:
22:f8:6f:22:da:3c:ae:39:60:87:e2:9e:58:18:df:
a3:24:1f:30:cd:13:92:4d:1b:a9:cf:82:0e:0c:c0:
ba:50:a5:18:60:5c:50:69:d9:af:bf:db:d5:32:93:
a8:b6:af:ec:dc:12:ed:c3:3c:fb:db:d7:ad:34:a6:
17:60:b1:24:fd:af:c5:e0:da:54:9f:15:b7:5f:7d:
f6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:01:42:70:E3:0E:3A:0C:A0:22:DE:3B:C6:E9:34:07:77:47:3D:C6
X509v3 Authority Key Identifier:
keyid:5E:D8:DE:08:20:64:EB:3F:EB:40:2A:87:3E:58:BB:68:CF:5D:49:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:60:3a:97:24:2c:2f:4b:c9:bc:4b:4b:d8:0e:ed:62:42:17:
3b:ff:97:d7:c4:d5:03:0e:4d:d6:64:f4:72:7c:1a:30:ab:d6:
0a:79:d2:a0:a3:8d:71:ce:9d:94:16:e1:45:f5:08:74:87:1d:
cc:4c:93:53:61:db:2b:de:10:ac:12:4a:02:a8:b3:ff:a2:48:
22:a1:08:13:e5:ab:6b:f1:0c:bc:ec:83:8d:ef:7c:c2:ab:56:
82:23:47:3f:b6:70:75:88:28:78:74:2d:84:a9:5b:ba:8d:e4:
41:1a:fa:02:b6:98:19:6c:3c:eb:ab:77:28:66:18:67:0f:07:
3f:8f:f3:c8:fe:35:7d:15:d5:a7:86:81:00:45:72:12:78:fb:
f8:7a:8b:e8:61:cc:08:ad:8f:bf:b6:7b:30:0e:a5:b1:c2:4e:
e1:b6:f9:50:da:c0:4c:b8:50:15:b2:a4:a2:90:34:4e:50:4c:
56:2b:f6:a3:d9:92:57:ba:e2:26:25:a6:dd:5c:f2:d1:73:c8:
44:34:c3:41:47:4f:13:81:79:19:d9:f4:4c:1b:12:70:ad:a7:
66:0f:e6:eb:be:4d:6d:53:31:17:52:5b:39:2c:06:c4:ff:68:
e4:21:48:e8:7c:f7:8b:36:fb:0e:ae:0a:96:78:1a:7d:9f:da:
43:a5:d2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:56 2026 by rpki-client