Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb6bf5-3ac5-413d-b898-4fef15e7dead/1/XM814TYW15djDR4lQAwTxiEfUAw.mft
File: XM814TYW15djDR4lQAwTxiEfUAw.mft (raw, json)
Hash identifier: /yDK3GCB1tpnx1c5kHdsmN8euek8DhNOtehIIk80Abs=
Subject key identifier: 7D:1A:BF:51:B9:0E:B6:C8:B6:59:CF:8E:99:BF:15:DE:D7:84:83:CE
Authority key identifier: 5C:CF:35:E1:36:16:D7:97:63:0D:1E:25:40:0C:13:C6:21:1F:50:0C
Certificate issuer: /CN=5ccf35e13616d797630d1e25400c13c6211f500c
Certificate serial: 019D389BC1094D943EB432E2DC74BF00BFDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM814TYW15djDR4lQAwTxiEfUAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb6bf5-3ac5-413d-b898-4fef15e7dead/1/XM814TYW15djDR4lQAwTxiEfUAw.mft
Manifest number: 024A
Signing time: Sun 29 Mar 2026 08:00:24 +0000
Manifest this update: Sun 29 Mar 2026 08:00:24 +0000
Manifest next update: Mon 30 Mar 2026 08:00:24 +0000
Files and hashes: 1: D30kUtfoFIu60sm6RYYK6TaB79k.roa (hash: pH+2Tpg4nCk6cSuxhVv6OIDISdwdQhjgBdPN7UeRmd8=)
2: XM814TYW15djDR4lQAwTxiEfUAw.crl (hash: th/ffft9R46N/q83qEuVg5qXMKpzQeYMw7eo0f+Mbfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb6bf5-3ac5-413d-b898-4fef15e7dead/1/XM814TYW15djDR4lQAwTxiEfUAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb6bf5-3ac5-413d-b898-4fef15e7dead/1/XM814TYW15djDR4lQAwTxiEfUAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XM814TYW15djDR4lQAwTxiEfUAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:c1:09:4d:94:3e:b4:32:e2:dc:74:bf:00:bf:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccf35e13616d797630d1e25400c13c6211f500c
Validity
Not Before: Mar 29 08:00:24 2026 GMT
Not After : Mar 30 08:00:24 2026 GMT
Subject: CN=7d1abf51b90eb6c8b659cf8e99bf15ded78483ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:db:6f:91:c7:5d:0b:00:06:92:3b:56:40:70:
04:90:3d:9b:92:b2:d0:ed:e7:ff:bb:78:ef:79:02:
03:d7:8e:e7:c3:83:57:a1:37:af:91:0e:1e:21:9c:
7c:e4:bf:b4:26:e2:db:10:03:a2:92:69:13:8d:1f:
c3:ed:86:ab:7c:e8:50:8b:eb:70:d5:5b:18:fa:ce:
14:f8:ab:61:8a:ac:7d:35:52:69:0d:51:20:e1:7c:
9b:6c:a4:98:fe:2d:03:fb:18:ae:74:42:4e:56:61:
fe:b5:f3:f8:07:bc:92:a1:a8:46:1d:6c:28:06:90:
9a:ee:12:8f:2b:3d:73:56:c8:ef:0e:66:3c:22:04:
d2:68:9e:77:33:05:9f:92:57:51:96:08:59:e9:40:
7b:34:5a:61:0c:75:cb:ed:9f:ab:1d:16:fa:c1:21:
3f:55:da:a4:c3:31:88:9c:12:bc:77:3b:87:4e:47:
09:45:f1:dc:c6:5b:a5:7d:76:bc:7f:d5:31:4b:60:
26:44:c3:95:4f:d3:c4:c3:76:81:3e:2d:5e:9f:e9:
12:3e:aa:64:2b:90:bf:ed:a7:b1:2f:28:ab:e3:d8:
f5:fb:00:63:c0:9e:24:af:72:fa:3b:e0:90:51:a9:
96:ca:64:4e:fb:a2:ac:55:0a:5f:00:01:cb:82:5a:
2b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1A:BF:51:B9:0E:B6:C8:B6:59:CF:8E:99:BF:15:DE:D7:84:83:CE
X509v3 Authority Key Identifier:
keyid:5C:CF:35:E1:36:16:D7:97:63:0D:1E:25:40:0C:13:C6:21:1F:50:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM814TYW15djDR4lQAwTxiEfUAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb6bf5-3ac5-413d-b898-4fef15e7dead/1/XM814TYW15djDR4lQAwTxiEfUAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb6bf5-3ac5-413d-b898-4fef15e7dead/1/XM814TYW15djDR4lQAwTxiEfUAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:eb:34:77:41:8d:e5:8d:a4:e5:a1:35:ff:66:1a:b7:c0:2e:
6f:00:52:e7:da:18:eb:45:54:3c:13:6c:ff:84:10:12:ab:76:
b7:bd:f6:a7:1c:db:ea:02:64:6b:38:4d:2f:c0:b1:c4:b1:ac:
ba:e0:85:6d:81:3b:b6:ed:3a:39:15:f7:b0:bd:c0:1b:a7:1d:
53:39:a4:50:68:ee:ad:c2:d6:aa:4c:0c:08:1a:58:e5:ec:25:
b6:95:05:71:22:bc:5f:65:1a:77:3d:b2:96:fa:bc:b8:b9:72:
04:7f:8e:e5:bb:a5:1f:87:0d:94:5e:55:0f:c3:45:55:a8:aa:
ef:8c:52:b0:95:89:f1:ca:5f:05:8c:4a:25:1b:7f:33:ca:76:
c1:64:15:8f:f0:33:e6:50:9a:ae:13:b4:d8:6c:a1:b5:7b:f7:
a1:cb:1a:e9:04:75:94:5e:63:4b:39:d6:a8:86:7c:47:3b:6f:
70:9b:59:e8:21:c5:c1:19:9e:13:0a:ef:e5:17:0e:ac:0f:b5:
b9:85:63:42:d7:9e:60:27:00:1a:be:b6:c3:e6:db:28:26:12:
5d:66:1a:63:c2:6f:5e:16:31:fd:f7:45:c1:c6:29:2f:5b:38:
fd:a5:77:e2:7c:81:b7:d7:2a:c1:56:75:b9:1f:07:eb:a5:bb:
c7:b2:5b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:07:03 2026 by rpki-client