Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
File: xb14VKoFD9blUPx80CtVhzC_u3o.mft (raw, json)
Hash identifier: f8uAs9+5brqMftNrmUjqz2Qq0H+M1HyQWUg5rwrlVIQ=
Subject key identifier: 98:B5:7F:E7:04:9F:98:CF:DF:94:DB:CD:53:B6:8E:0B:0B:FB:20:11
Authority key identifier: C5:BD:78:54:AA:05:0F:D6:E5:50:FC:7C:D0:2B:55:87:30:BF:BB:7A
Certificate issuer: /CN=c5bd7854aa050fd6e550fc7cd02b558730bfbb7a
Certificate serial: 019D394109E7653C6F183135BCAF4AFE2EEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
Manifest number: 07DE
Signing time: Sun 29 Mar 2026 11:00:56 +0000
Manifest this update: Sun 29 Mar 2026 11:00:56 +0000
Manifest next update: Mon 30 Mar 2026 11:00:56 +0000
Files and hashes: 1: CQU1i8i4vqvuY4KqJGZlaSLhz1o.roa (hash: CuYb2a2XddVX7SxALr1d1KIhl+UGwYzhtlyXuVxbI4M=)
2: xb14VKoFD9blUPx80CtVhzC_u3o.crl (hash: noLKA4TSucN9/Oec0oxLJHU7l0J28sBAlh41uUTs3pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:09:e7:65:3c:6f:18:31:35:bc:af:4a:fe:2e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5bd7854aa050fd6e550fc7cd02b558730bfbb7a
Validity
Not Before: Mar 29 11:00:56 2026 GMT
Not After : Mar 30 11:00:56 2026 GMT
Subject: CN=98b57fe7049f98cfdf94dbcd53b68e0b0bfb2011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:35:14:e2:ae:33:62:e3:00:4c:98:a8:db:81:
f9:3a:47:e7:eb:50:64:93:8e:28:36:aa:d9:35:56:
22:85:a3:ea:46:db:70:f3:3f:1c:39:6d:6d:6c:e5:
2c:92:32:45:e5:17:dd:13:ba:77:fc:7c:d2:a1:d7:
86:19:2e:d8:65:a2:01:99:66:58:69:88:39:b1:ac:
a7:03:95:75:60:ff:36:07:d9:56:ba:66:2d:7f:c4:
5a:76:c5:31:7b:aa:8e:91:a3:6e:91:34:d2:5f:d5:
a7:8e:94:68:79:82:76:08:4e:18:55:8c:94:7f:f5:
fe:8f:15:ae:de:9a:9d:5e:f7:fc:27:10:67:18:75:
3a:e1:a5:a2:b1:64:f5:e4:61:bc:17:d8:c3:d3:a8:
bc:45:6a:b7:b3:88:9b:54:0e:72:b7:f1:c0:e4:51:
83:ec:5f:4b:fe:95:4b:31:20:eb:ce:3c:aa:3e:56:
64:df:1f:49:a2:98:d7:89:9c:5c:1e:54:f0:93:9e:
84:45:b2:a7:e3:ba:3b:b4:61:5d:d4:5c:1b:34:3e:
fe:3c:c8:26:f1:cf:8b:47:94:47:2a:c9:16:86:61:
a4:72:13:9f:b3:0f:72:df:2a:3c:8b:3b:2c:34:72:
c2:3f:6c:ff:04:c5:bb:f1:e4:c0:29:5a:1f:83:01:
7a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B5:7F:E7:04:9F:98:CF:DF:94:DB:CD:53:B6:8E:0B:0B:FB:20:11
X509v3 Authority Key Identifier:
keyid:C5:BD:78:54:AA:05:0F:D6:E5:50:FC:7C:D0:2B:55:87:30:BF:BB:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:d4:7d:27:11:55:fb:60:60:5a:b2:04:a8:d8:cd:95:23:76:
69:ca:9c:73:0d:65:75:01:3c:a3:d5:09:db:f5:4c:0c:37:cc:
6d:c7:31:41:d9:dd:1b:9a:71:45:d6:77:50:63:24:c1:5b:a9:
4d:68:26:81:1a:48:c0:f2:c4:1f:f1:81:51:04:06:35:02:83:
58:56:66:76:2c:d4:93:70:b6:28:0e:aa:08:df:18:b7:59:5e:
27:98:54:59:0c:f6:09:4a:08:e5:9e:2b:4b:f5:d3:f2:c4:be:
59:aa:cf:5e:ed:9d:85:b8:2f:54:c0:4c:8c:20:81:05:76:29:
94:17:a2:98:1e:b3:a3:8d:fe:26:ad:ce:35:7b:56:2f:88:29:
dd:b0:fe:66:ce:ba:fb:9a:7f:58:a3:81:79:1b:6d:6f:c4:db:
63:bb:60:73:0f:24:1b:89:c5:6b:5e:fa:ca:3b:31:49:e9:a8:
d6:bc:5f:53:81:cf:85:53:04:27:c3:20:fe:a7:bd:1f:d0:2e:
49:ef:b4:52:45:40:d0:27:c7:ef:cd:df:31:fc:46:9a:cc:52:
7c:35:dd:66:63:6f:7d:87:8c:a5:fc:7b:bf:19:52:c6:a8:3f:
f0:de:b1:1c:da:a8:0b:74:9e:76:8c:8c:87:5b:2f:30:45:43:
fe:7d:ea:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:02:06 2026 by rpki-client