Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.mft
File: XfJyIcGPyv50iSvA6Xv17nw0T6c.mft (raw, json)
Hash identifier: LIVcdo0/ghfMBfPPC5hH9vH0bJdsrP3f8xJ4/b8pF78=
Subject key identifier: 9A:F5:0E:E9:9F:F6:9A:63:58:15:C8:D9:AD:92:92:F4:DA:F8:8A:4E
Authority key identifier: 5D:F2:72:21:C1:8F:CA:FE:74:89:2B:C0:E9:7B:F5:EE:7C:34:4F:A7
Certificate issuer: /CN=5df27221c18fcafe74892bc0e97bf5ee7c344fa7
Certificate serial: 019D371BEA9F49E8F8F77D4F654F2FFF2F98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfJyIcGPyv50iSvA6Xv17nw0T6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.mft
Manifest number: 0E7A
Signing time: Sun 29 Mar 2026 01:01:09 +0000
Manifest this update: Sun 29 Mar 2026 01:01:09 +0000
Manifest next update: Mon 30 Mar 2026 01:01:09 +0000
Files and hashes: 1: WIz4ju7mKgyhClPjYmZVPgV4tVg.roa (hash: bp+DO940zxxbXrDgbAxxoKvL8L9u5E+uFAMTt7Qg4XQ=)
2: XfJyIcGPyv50iSvA6Xv17nw0T6c.crl (hash: Z9hnI3vR8l0xzueLKbnVriIiLl0dUOvqRYGjX46yZrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfJyIcGPyv50iSvA6Xv17nw0T6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:ea:9f:49:e8:f8:f7:7d:4f:65:4f:2f:ff:2f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df27221c18fcafe74892bc0e97bf5ee7c344fa7
Validity
Not Before: Mar 29 01:01:09 2026 GMT
Not After : Mar 30 01:01:09 2026 GMT
Subject: CN=9af50ee99ff69a635815c8d9ad9292f4daf88a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c9:83:f8:42:33:eb:9b:e8:be:6d:9b:cd:2c:
8d:42:12:5e:2c:75:a9:ed:2f:c8:1a:7a:a3:8d:3e:
12:fc:51:5f:2e:d6:4b:4e:cd:02:01:4b:0c:bf:49:
dd:2c:d4:e0:a8:b0:73:45:1a:b0:99:e5:0c:0a:d9:
82:f3:66:74:2b:d3:a3:fe:24:4d:d0:3e:f7:40:28:
28:5f:1f:94:91:bd:eb:76:35:82:cc:2c:0f:25:c7:
f4:2e:ae:5c:a9:a3:e9:b6:4e:ca:05:52:6b:d2:90:
7a:88:78:ad:89:72:d6:86:ed:b2:6f:36:79:5d:3a:
e6:82:86:b4:27:7e:84:19:18:66:ee:9c:5c:0e:23:
74:28:a2:7c:90:cf:9c:7d:82:fd:1c:a7:b4:df:cc:
38:37:76:42:76:6f:43:4d:c0:70:7f:42:b4:35:aa:
29:03:6b:da:4f:79:8c:7b:10:c4:2c:90:35:b0:fe:
a6:cc:22:97:5d:8a:e6:cf:e7:26:aa:d1:6a:12:e2:
cd:e3:92:13:07:7c:5c:59:c2:0f:ba:53:9d:c2:61:
c5:fa:ea:b8:71:d0:09:56:92:fc:29:eb:b2:58:1b:
67:64:25:02:a1:3b:2c:33:41:a9:fe:a9:23:08:89:
fd:fe:f6:71:3a:0e:69:7e:e0:db:f9:76:0b:52:fd:
c1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F5:0E:E9:9F:F6:9A:63:58:15:C8:D9:AD:92:92:F4:DA:F8:8A:4E
X509v3 Authority Key Identifier:
keyid:5D:F2:72:21:C1:8F:CA:FE:74:89:2B:C0:E9:7B:F5:EE:7C:34:4F:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfJyIcGPyv50iSvA6Xv17nw0T6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:9a:75:06:0f:95:8f:92:9c:8c:f7:6f:6f:e7:c4:94:cf:49:
f8:0e:1d:62:ad:ac:7b:fd:dd:50:75:39:73:0d:9c:71:8e:50:
c9:4f:29:ae:ba:eb:24:8f:17:26:a1:48:31:9b:50:e2:cf:db:
c4:6a:0f:50:76:fc:e6:0b:83:0b:4f:0f:f7:7b:00:10:60:52:
48:93:1d:bd:93:72:5c:d4:48:74:a7:2c:4a:f7:d5:d5:19:72:
81:d4:3f:e6:48:c9:c1:74:b6:2b:29:20:f4:41:89:be:67:45:
15:56:ef:aa:f8:59:cf:f7:02:3e:07:0e:29:52:97:ae:6c:10:
45:58:bd:88:2f:3e:10:5a:4f:1e:8a:b7:dc:8f:22:12:2e:d5:
18:18:3a:c6:a8:42:af:8d:a9:99:b9:58:26:9b:f7:24:27:6a:
b4:5e:fe:66:82:fc:99:7c:53:d0:23:01:42:53:7b:5d:aa:67:
57:67:b3:21:e4:ad:ab:7a:8a:5a:02:b7:e0:bf:8b:70:6b:25:
24:0b:58:5e:98:72:16:e6:2e:4b:eb:f0:80:e2:71:0c:7f:d0:
03:6c:c2:9b:f3:7e:b7:13:77:77:78:2d:3d:88:0e:84:88:db:
cf:02:b7:41:55:84:7c:8b:ba:61:9f:b8:aa:c6:e0:52:f8:d4:
cc:5f:db:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:49 2026 by rpki-client