Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
File: Xx-gbV262kPeRPTksdyUkrsofJ0.mft (raw, json)
Hash identifier: YJRsCzOZ/rBntsBkkqbEOBj7AmSKeNkzIoKO0JQ3+88=
Subject key identifier: BC:E3:7C:A8:61:D2:A9:85:C6:C5:57:B1:A7:80:67:45:06:6B:05:DC
Authority key identifier: 5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D
Certificate issuer: /CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d
Certificate serial: 019D38D3A043E20A4A7C6CDB459CBE5C718F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
Manifest number: 17FC
Signing time: Sun 29 Mar 2026 09:01:26 +0000
Manifest this update: Sun 29 Mar 2026 09:01:26 +0000
Manifest next update: Mon 30 Mar 2026 09:01:26 +0000
Files and hashes: 1: Xx-gbV262kPeRPTksdyUkrsofJ0.crl (hash: txXzFZBk32nihE3zr1L4VrwJrB2PESOuZm1uguSwm0o=)
2: sR6--VSf1TJg6XBqIQJFjdqQwjk.roa (hash: +a/LmYhJ6hoUTDiKTmsqLp0iqelM6C3OOFZARtNpILA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:a0:43:e2:0a:4a:7c:6c:db:45:9c:be:5c:71:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d
Validity
Not Before: Mar 29 09:01:26 2026 GMT
Not After : Mar 30 09:01:26 2026 GMT
Subject: CN=bce37ca861d2a985c6c557b1a7806745066b05dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:39:56:8c:fd:8f:d3:db:b4:eb:a0:75:71:4f:
cd:24:7f:ff:6e:04:14:95:86:53:f6:5a:af:6b:fa:
93:40:84:a9:e2:0c:59:da:90:e9:a9:68:62:bf:f8:
17:1e:21:b0:7e:b7:3a:0f:d8:46:85:68:ce:e3:60:
fe:68:78:16:b6:96:bf:66:ee:c4:ff:ea:60:77:3d:
fe:eb:86:41:30:8c:57:a1:dd:cc:df:31:8d:2e:0e:
e7:cf:ee:1f:87:1b:b4:db:a1:0f:9c:92:46:c7:0b:
8b:a2:ff:ac:1c:ec:9b:2a:43:41:61:71:f2:f1:66:
7e:f6:4b:e0:1a:a4:80:8e:99:59:5b:71:f6:43:ba:
38:cb:9f:96:4c:8d:5f:df:91:5d:43:a1:89:16:92:
24:3d:57:45:2b:2a:a7:ca:5d:25:dc:b0:db:f4:58:
0e:38:d1:86:a8:7a:0f:17:5c:c7:90:8b:2a:46:9a:
c7:9b:0d:15:c8:77:56:e2:b6:2d:7c:5e:88:dc:d5:
df:1d:f5:4a:bf:91:bd:54:6b:5f:c3:94:cd:26:8b:
2f:7d:f0:c6:15:73:c8:b1:d5:fe:89:fb:24:01:27:
25:49:77:d2:0e:7f:c0:99:c9:9f:48:e9:a6:2d:c5:
d9:56:66:c2:50:03:94:27:dd:26:e6:e0:c6:ac:0b:
e7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E3:7C:A8:61:D2:A9:85:C6:C5:57:B1:A7:80:67:45:06:6B:05:DC
X509v3 Authority Key Identifier:
keyid:5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:8e:3e:ec:0d:16:57:4a:72:61:eb:0e:78:7b:46:7d:1b:9c:
68:25:f5:77:2e:99:11:b8:b4:f8:c8:c1:ec:81:b2:25:2d:c5:
bd:51:a8:26:3c:e7:67:22:27:2d:93:f6:98:da:8b:6e:10:67:
d0:72:27:e7:ac:06:ed:4e:bb:fb:f9:28:fe:22:0b:1b:ed:38:
d9:b8:a1:77:9b:30:d4:86:74:33:e6:0d:50:67:ff:ff:72:78:
bb:3b:b1:6f:15:fa:31:b9:c3:b0:db:f4:e4:42:59:d8:1a:07:
86:ab:56:26:83:76:97:48:78:01:65:e0:8c:55:e7:f5:0c:10:
cc:f8:89:4f:f5:e3:31:6a:16:39:64:11:d8:1f:6b:43:33:68:
c1:72:f3:0f:64:c8:1f:e8:81:2d:74:12:d6:50:bb:db:d8:1e:
a4:b4:72:bf:53:73:bf:8f:17:9c:08:9b:6a:48:95:86:70:85:
f2:80:46:04:36:c5:cb:8c:db:52:10:43:b0:e5:44:ab:06:7b:
a4:6f:26:42:3a:a7:dc:0d:39:f7:37:c6:08:da:8e:f8:c7:11:
e3:5a:82:9e:2d:d9:45:00:d2:db:d6:3b:2a:da:14:17:cb:a7:
f8:22:36:3f:32:98:c5:65:66:36:72:9d:7a:ff:fc:f4:36:c9:
84:df:0f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:47 2026 by rpki-client