Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1a2a0f-9481-4be1-85f5-d78d95426cae/1/XysVZaEP0TRg6V8en-CMIIjCyx8.mft
File: XysVZaEP0TRg6V8en-CMIIjCyx8.mft (raw, json)
Hash identifier: XNtG2I7Il7C4Tt7HrlG6e4NaXOpBNL7Yn6VeR2NoNAc=
Subject key identifier: 3E:AE:15:14:8A:9D:61:B0:6E:01:DF:C9:4D:26:6A:DE:83:0A:93:66
Authority key identifier: 5F:2B:15:65:A1:0F:D1:34:60:E9:5F:1E:9F:E0:8C:20:88:C2:CB:1F
Certificate issuer: /CN=5f2b1565a10fd13460e95f1e9fe08c2088c2cb1f
Certificate serial: 019D37525D2E0713895CD7A9F992263C2093
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XysVZaEP0TRg6V8en-CMIIjCyx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1a2a0f-9481-4be1-85f5-d78d95426cae/1/XysVZaEP0TRg6V8en-CMIIjCyx8.mft
Manifest number: 8C
Signing time: Sun 29 Mar 2026 02:00:37 +0000
Manifest this update: Sun 29 Mar 2026 02:00:37 +0000
Manifest next update: Mon 30 Mar 2026 02:00:37 +0000
Files and hashes: 1: XysVZaEP0TRg6V8en-CMIIjCyx8.crl (hash: +f2YN7IL/JQKZEmEDsPuXXy7Rz+UUGhf95j1+HR/0+4=)
2: vm8yl7UbsZH9NAHEQzIodWMmimI.roa (hash: Q0uQ98zQcJyDm7dzGXwkuXWtJLhZX6D4OwDjNRtFEO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1a2a0f-9481-4be1-85f5-d78d95426cae/1/XysVZaEP0TRg6V8en-CMIIjCyx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/1a2a0f-9481-4be1-85f5-d78d95426cae/1/XysVZaEP0TRg6V8en-CMIIjCyx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XysVZaEP0TRg6V8en-CMIIjCyx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:5d:2e:07:13:89:5c:d7:a9:f9:92:26:3c:20:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f2b1565a10fd13460e95f1e9fe08c2088c2cb1f
Validity
Not Before: Mar 29 02:00:37 2026 GMT
Not After : Mar 30 02:00:37 2026 GMT
Subject: CN=3eae15148a9d61b06e01dfc94d266ade830a9366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8a:d9:5c:db:fa:55:1a:a3:ec:0b:91:f5:a3:
7a:8e:b9:47:70:95:e4:0c:91:f0:4a:61:ff:ab:83:
8a:87:a5:40:44:81:e2:a9:a4:73:c4:c8:45:86:cd:
f0:85:ce:10:65:cc:bb:c3:4e:cb:c4:2e:3c:02:c1:
5a:34:81:4e:97:82:c8:2a:50:32:41:38:ed:89:aa:
c0:44:b8:e3:78:6b:12:2e:60:36:17:8e:53:5a:20:
3a:c9:09:cb:3d:22:04:5f:a4:29:c9:d8:52:50:20:
09:b2:a8:8f:26:d2:a2:c4:55:80:18:20:c1:17:c9:
38:8f:03:de:f1:b3:75:bf:6d:c7:b4:6c:c1:91:c4:
f3:9b:9c:16:5c:ce:a8:07:98:d2:8f:8b:25:79:a6:
6b:33:a3:92:46:18:49:8d:59:b6:81:c5:15:ae:21:
c3:a1:fa:f4:27:54:c0:93:1e:24:f2:34:a0:64:dd:
9a:5f:19:ea:01:d0:55:91:c1:21:87:21:41:25:2e:
20:8f:e4:b4:27:43:3a:0e:b1:0a:f0:28:f4:12:76:
5c:63:2d:1c:c7:fd:d1:19:27:7f:ed:0a:23:35:ba:
0f:ad:f1:5e:12:ff:a6:6d:91:bd:99:59:73:2d:47:
7c:1b:7a:ea:2a:fe:35:a1:57:c1:95:c8:e5:1f:29:
7f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:AE:15:14:8A:9D:61:B0:6E:01:DF:C9:4D:26:6A:DE:83:0A:93:66
X509v3 Authority Key Identifier:
keyid:5F:2B:15:65:A1:0F:D1:34:60:E9:5F:1E:9F:E0:8C:20:88:C2:CB:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XysVZaEP0TRg6V8en-CMIIjCyx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1a2a0f-9481-4be1-85f5-d78d95426cae/1/XysVZaEP0TRg6V8en-CMIIjCyx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1a2a0f-9481-4be1-85f5-d78d95426cae/1/XysVZaEP0TRg6V8en-CMIIjCyx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:43:56:65:ce:48:90:90:aa:a0:e3:ef:3d:99:39:25:66:f9:
d5:7e:58:03:10:84:e9:cf:4b:92:1c:69:fe:73:a5:2e:ce:05:
52:0b:c6:64:85:bb:3a:7d:44:eb:9f:80:cd:0e:09:b6:ce:d2:
e1:51:c0:e7:f1:64:92:0a:de:54:55:75:23:c7:60:09:2b:23:
58:37:62:11:a2:e6:05:c9:6a:5d:6a:fe:97:5a:1d:6d:fa:1d:
19:d6:23:73:30:ab:18:db:55:e5:22:61:18:e8:46:62:7c:5d:
44:f5:a6:4d:73:e8:d2:19:b9:85:58:35:fa:85:d1:a8:36:21:
de:05:a0:c0:0b:76:eb:7a:27:d9:bc:57:87:8e:0d:be:ef:2a:
6c:08:c7:04:97:72:69:22:a9:0b:96:24:04:58:3b:d3:7e:e7:
a2:74:5e:2d:ff:b6:49:9f:05:23:e5:cc:3a:9f:54:d1:87:12:
75:f2:fc:6f:90:a4:2c:42:86:56:c2:d4:23:00:70:bf:59:96:
13:9e:19:a7:00:4d:2c:24:c1:99:c7:30:11:66:29:fd:48:44:
04:98:b0:a0:05:5b:cc:73:a3:8b:7c:c8:85:cf:5d:2b:43:cc:
19:b8:ed:7c:40:12:48:8f:02:3b:77:b6:f3:2e:ef:df:84:70:
3a:9a:69:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:05 2026 by rpki-client