Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
File: XsF2nT_wQhJGmOMcRytju_G7ta0.mft (raw, json)
Hash identifier: 7qeQEL891mv2jsIJ16OFoZ2sxwq4xFCRBFJNbpU6nQ8=
Subject key identifier: 3E:AB:8A:1A:89:14:3C:B2:C7:B6:18:CB:94:5F:40:5E:9A:C4:14:AE
Authority key identifier: 5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
Certificate issuer: /CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Certificate serial: 019D42B19E2D2AF22426E718E6EFE91138AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
Manifest number: 0688
Signing time: Tue 31 Mar 2026 07:00:29 +0000
Manifest this update: Tue 31 Mar 2026 07:00:29 +0000
Manifest next update: Wed 01 Apr 2026 07:00:29 +0000
Files and hashes: 1: Gkzr8cmq5l-SJW535VAbg6PLMB0.roa (hash: Y4hmK6YPKNo9n40cQMscOcZSxtVZskzUJfJT11sn8vQ=)
2: XsF2nT_wQhJGmOMcRytju_G7ta0.crl (hash: +P/TC47q3m0azPOX/4QyDQxvZth3DyH5PtkqkkhSB3s=)
3: bo5WfapXlg-B8bHycWZVlbYa0_E.roa (hash: zgeOYcSCXR5A+F5TcrL2+OPIXguhUzoA2nj4CspJY/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 31 Mar 2026 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:42:b1:9e:2d:2a:f2:24:26:e7:18:e6:ef:e9:11:38:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Validity
Not Before: Mar 31 07:00:29 2026 GMT
Not After : Apr 1 07:00:29 2026 GMT
Subject: CN=3eab8a1a89143cb2c7b618cb945f405e9ac414ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d5:47:e4:8a:32:bb:38:8e:d9:d1:5c:59:22:
5d:f6:c6:69:6c:e2:cd:c2:07:3c:f1:00:1d:7b:06:
b7:b2:bb:d4:24:ff:06:86:8d:17:fc:f5:c9:1c:b3:
47:43:53:85:b9:06:cf:56:e3:9a:a8:40:59:35:f5:
68:2f:05:7b:9a:5f:2d:c9:29:5b:9f:a2:b2:33:cb:
e7:45:d0:2c:c1:cb:66:c6:e4:8c:0b:fd:e3:c1:2f:
ac:22:1e:8c:e4:1a:31:61:fc:5e:af:96:a2:e6:1c:
75:cd:b1:80:6b:bd:58:4f:7c:45:37:4b:78:c0:13:
18:05:15:5d:98:57:18:f9:08:f3:6a:3b:9e:f9:db:
0e:e2:19:ed:7f:41:df:86:6f:b5:24:3f:b0:40:b9:
ed:6c:61:1f:25:ba:93:21:7d:cb:87:24:77:68:fe:
59:f5:3c:14:2f:fc:68:cc:94:e0:28:ab:4c:f5:d4:
63:3f:9e:f5:25:45:92:c4:22:7d:12:d8:4b:76:70:
83:b0:ce:43:9c:6f:90:78:cd:f5:f7:16:c5:1f:6f:
a3:9d:40:de:d3:d9:29:b3:a9:38:71:88:a7:79:4e:
9c:8f:45:e9:1f:e8:ac:21:42:23:6f:f3:fc:5c:08:
fa:a1:ef:72:6f:ea:32:73:76:8a:19:06:c4:60:21:
92:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:AB:8A:1A:89:14:3C:B2:C7:B6:18:CB:94:5F:40:5E:9A:C4:14:AE
X509v3 Authority Key Identifier:
keyid:5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:27:d0:18:9e:68:2c:2c:ec:71:d5:4e:13:28:68:32:dc:64:
22:2c:c3:36:f5:4a:24:b8:e1:29:88:da:d7:77:40:fd:53:cc:
8f:ca:35:d7:36:82:8c:12:bd:8e:db:7a:25:c2:07:ff:a5:5f:
c1:b1:cf:b3:67:4b:01:c3:a7:c6:d3:c6:00:6f:0c:ea:96:46:
64:4d:d7:01:8b:f8:30:db:96:d6:09:37:5d:21:30:f9:8a:28:
2b:85:2a:c4:a1:f8:d6:2c:6f:9e:d8:54:10:3e:85:5b:88:e4:
85:3e:ab:5a:59:d1:21:48:60:7b:c0:ff:f3:45:4d:9e:e8:79:
f3:4b:ba:d9:cb:0f:4d:ae:37:3b:d0:64:39:fe:fb:bb:f2:07:
83:3f:08:67:fd:3f:e5:99:2e:6c:0d:be:6a:59:6d:52:74:0e:
2f:f2:42:b0:82:82:b3:49:6f:69:8e:ac:df:29:4f:c0:e0:bd:
85:7b:92:03:b9:24:bf:e5:a5:04:77:8f:0f:77:83:7e:f9:8d:
da:75:c5:b1:24:b6:24:b4:e6:44:d5:c4:f5:3d:7a:8d:94:2f:
15:f9:a1:fd:9a:3f:a1:c6:98:e8:0a:cf:74:ee:f9:99:58:83:
51:bb:21:d9:ad:db:23:4a:92:f2:c5:61:89:ed:14:5a:bc:5c:
8a:1d:a5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 09:20:35 2026 by rpki-client