Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft
File: XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft (raw, json)
Hash identifier: efypRkqHTEDCwCqq+Nj3rJ9jCEe50WMsNbaaRZnHRPk=
Subject key identifier: F9:BB:08:8A:3C:0B:AB:F9:0E:F6:1C:7F:39:80:F9:49:29:3E:54:92
Authority key identifier: 5E:3B:B1:3A:E1:7C:9E:55:4E:9C:EA:FC:FE:B4:8B:41:41:7D:A7:EA
Certificate issuer: /CN=5e3bb13ae17c9e554e9ceafcfeb48b41417da7ea
Certificate serial: 019D39E5FA672D4C4C983656CD991D9186CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjuxOuF8nlVOnOr8_rSLQUF9p-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 14:01:06 +0000
Manifest this update: Sun 29 Mar 2026 14:01:06 +0000
Manifest next update: Mon 30 Mar 2026 14:01:06 +0000
Files and hashes: 1: XjuxOuF8nlVOnOr8_rSLQUF9p-o.crl (hash: yDRP+HDqQYA9WwJgoGH/4hMZR8Fo2m/y2alfWGtNgoM=)
2: wl8tu_weubNfXZ1raiwB59IrcEQ.roa (hash: /fuDNkfWdHCDDOTyXjSm0MpspTRxJW6ZGeRcO5DS8Io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjuxOuF8nlVOnOr8_rSLQUF9p-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:fa:67:2d:4c:4c:98:36:56:cd:99:1d:91:86:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3bb13ae17c9e554e9ceafcfeb48b41417da7ea
Validity
Not Before: Mar 29 14:01:06 2026 GMT
Not After : Mar 30 14:01:06 2026 GMT
Subject: CN=f9bb088a3c0babf90ef61c7f3980f949293e5492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:eb:49:5a:ae:09:b0:73:ea:f9:19:86:95:ae:
73:22:64:52:59:eb:93:b1:fc:7e:0a:ff:eb:ce:a1:
f0:b5:0f:0a:2b:31:ff:a6:f6:37:23:03:ab:61:51:
34:19:e8:cc:8a:e3:be:72:8f:ef:12:b7:1a:fa:b6:
7d:ac:07:83:fd:50:34:42:b5:50:c2:6c:55:df:86:
5c:34:37:ac:c0:e3:a7:26:eb:71:73:cd:0c:28:84:
cf:2e:ca:16:93:b1:4b:ec:0b:1c:8d:6e:02:dc:f4:
e3:c3:f7:d1:2f:16:80:8b:f3:c6:25:f4:f5:a7:6b:
dd:c5:4a:16:15:70:4e:1a:56:22:15:5c:e8:83:13:
c4:a5:7d:91:75:aa:6e:c6:66:c6:9e:20:e3:bd:84:
20:64:33:19:9d:eb:2f:dc:a6:c8:85:06:7c:71:1b:
d9:61:af:d8:70:d5:da:04:84:ca:aa:0c:ea:ea:0d:
d5:38:a0:3b:ea:2d:e3:72:c3:d6:03:75:5b:59:29:
8e:6a:77:8a:c0:f1:45:e3:0a:88:47:4a:aa:f4:be:
36:12:29:e0:56:0f:14:87:f7:b3:bf:fb:bf:14:3f:
94:8d:aa:d3:7b:9c:b5:d9:f4:2d:ee:8e:88:cd:7e:
8f:35:8d:04:0d:a3:b7:6b:b0:9c:f5:87:d5:8f:a8:
03:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BB:08:8A:3C:0B:AB:F9:0E:F6:1C:7F:39:80:F9:49:29:3E:54:92
X509v3 Authority Key Identifier:
keyid:5E:3B:B1:3A:E1:7C:9E:55:4E:9C:EA:FC:FE:B4:8B:41:41:7D:A7:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjuxOuF8nlVOnOr8_rSLQUF9p-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:6b:58:fb:f0:7f:69:02:4e:c5:b2:ab:dc:18:96:2b:43:4e:
6e:ea:fa:6d:09:7c:af:69:56:19:c7:f6:ac:31:84:3d:99:be:
ea:aa:0d:ac:14:95:65:95:89:bb:9d:5b:d5:b8:f6:72:23:08:
ce:b2:6e:98:d1:c5:47:f3:ac:d0:8b:75:d2:ce:7f:d1:dd:20:
49:c6:cd:99:d9:16:05:fc:1d:32:65:af:b1:84:26:93:75:32:
b9:e4:6a:eb:54:42:ba:13:e3:19:95:cb:2c:82:9e:5e:df:c9:
73:33:33:23:09:64:20:99:96:0f:f0:19:ac:bc:7c:bc:a2:d5:
98:09:bd:1c:e7:4a:6e:5e:43:8e:68:fc:d7:1a:9c:5b:42:db:
1e:36:fa:2f:5f:f3:60:23:dc:d1:d5:10:e7:50:3d:c6:6d:89:
d0:c5:ef:07:e5:4e:47:7f:33:02:3c:c0:ca:39:46:c8:dc:a7:
94:44:b8:dd:8f:ae:28:ff:17:ed:8d:97:f4:6b:3f:50:1d:56:
d4:ca:14:69:ab:7c:2d:ca:26:28:d5:db:b1:bf:e2:15:1a:8e:
be:8c:07:48:79:02:80:27:89:b1:37:53:06:2f:d7:19:7b:68:
66:28:33:b6:7f:fa:bc:a0:e9:94:c8:f5:db:c5:0a:6f:d4:5b:
19:da:7c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:56:07 2026 by rpki-client