Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft
File: XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft (raw, json)
Hash identifier: e6wD9FpGwcFyDdBrShB8MNPKRimVdrENcAS8CgAD/Sc=
Subject key identifier: 9B:CB:E4:B0:D5:F7:A6:54:4B:DE:E8:60:3D:F5:7C:49:20:51:AD:60
Authority key identifier: 5E:80:3B:66:B3:06:00:8F:B1:72:C2:DF:D5:22:B5:65:50:57:36:0D
Certificate issuer: /CN=5e803b66b306008fb172c2dfd522b5655057360d
Certificate serial: 019D389BE27D17A1CA922E71C94D908536E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft
Manifest number: 14AF
Signing time: Sun 29 Mar 2026 08:00:33 +0000
Manifest this update: Sun 29 Mar 2026 08:00:33 +0000
Manifest next update: Mon 30 Mar 2026 08:00:33 +0000
Files and hashes: 1: XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.crl (hash: ZeiBHEVYHxNMnJfMKASGXxz64UcuolK5ubeb55ksMgI=)
2: fWRyoPqsq-qBSdxIWeERvOiM9FQ.roa (hash: xi+aWZFnVHDnRFBiu1WZojI31+OjhpCl/iLDjILOSEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:e2:7d:17:a1:ca:92:2e:71:c9:4d:90:85:36:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e803b66b306008fb172c2dfd522b5655057360d
Validity
Not Before: Mar 29 08:00:33 2026 GMT
Not After : Mar 30 08:00:33 2026 GMT
Subject: CN=9bcbe4b0d5f7a6544bdee8603df57c492051ad60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9e:a5:01:c6:d7:74:a1:42:ec:a7:25:d0:ee:
3c:23:74:20:3c:0a:81:65:b3:aa:9c:d3:07:f4:08:
90:65:94:11:5f:29:db:77:a7:9e:6b:76:ba:8a:82:
80:d0:cd:b3:1d:28:9b:81:32:b4:f3:43:69:4e:53:
23:2e:12:77:e8:c5:09:cd:ee:cf:2e:bd:43:d1:2c:
a2:62:bb:19:16:23:bd:fa:3b:87:ca:9b:30:61:65:
d8:3d:30:8d:23:76:ca:20:f7:52:62:51:44:31:34:
31:61:09:a5:15:b2:31:ce:a1:e3:9a:3a:98:86:0b:
a5:22:66:03:0d:41:4c:da:d6:d9:26:0c:2c:03:f1:
43:ab:83:ca:14:d1:f1:fd:8a:46:8a:e9:22:34:4f:
4f:a5:a5:e8:90:ef:b4:ab:a7:67:e7:af:d2:61:16:
0c:c9:a7:a0:3f:07:07:d9:5f:22:e7:b4:a2:04:c5:
a9:27:2a:b2:5b:be:eb:89:4e:40:b5:5e:3a:5b:10:
e6:70:69:e6:b6:79:06:6a:da:b3:92:d5:f5:e6:e7:
96:52:68:39:54:25:09:09:bd:92:de:6c:14:6a:bc:
ed:26:af:6c:f7:e6:c2:9d:d0:8c:75:3d:57:98:be:
80:bc:0f:c0:92:95:9f:67:04:d8:de:8a:52:83:9b:
53:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CB:E4:B0:D5:F7:A6:54:4B:DE:E8:60:3D:F5:7C:49:20:51:AD:60
X509v3 Authority Key Identifier:
keyid:5E:80:3B:66:B3:06:00:8F:B1:72:C2:DF:D5:22:B5:65:50:57:36:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c6:47:02:f7:25:be:58:07:5c:6b:5b:60:c1:d2:7f:7b:15:
d4:34:12:b8:02:2d:2f:ba:53:4d:91:27:a7:a2:c9:1e:a4:f1:
47:29:34:68:be:80:d5:b9:65:a9:d9:61:bc:d1:d0:4c:cf:30:
d4:84:d0:da:55:cf:78:d0:66:c1:ea:ee:b4:42:c3:bc:92:21:
9e:f5:2c:87:56:35:2f:f8:9c:66:c7:97:57:14:96:dc:fa:d5:
9e:3c:74:7b:04:f1:23:ee:f0:ae:5c:d6:b4:1f:61:dd:00:28:
05:e8:49:5d:08:63:bb:56:78:dd:75:77:39:63:d7:0f:0d:2b:
07:84:de:52:07:cc:9b:46:75:a4:14:37:1d:8a:1d:76:39:d2:
8c:49:05:13:43:5d:a9:f0:a0:d8:3b:07:40:8d:f7:63:70:0b:
10:19:24:ae:37:13:b5:35:dd:c3:8a:8e:60:22:28:6b:e9:de:
aa:52:f9:9e:40:a9:6f:8a:90:69:dd:51:d8:75:a1:7c:e5:95:
35:7b:1d:0c:a3:26:f3:e5:1a:50:4a:27:af:69:d0:42:9e:45:
07:e8:28:2b:a6:21:1b:59:e5:7c:07:ec:1f:f4:7c:b7:f5:ef:
7c:19:8e:5e:ae:3b:ba:e7:12:c4:07:b2:be:87:0d:ab:cc:6c:
44:87:6d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:31 2026 by rpki-client