Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
File: XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft (raw, json)
Hash identifier: o8/1s0BzhuNhbnHPmutBGnBE7DKAnXB7ZJf0wZRUVRI=
Subject key identifier: 3B:6C:51:6B:56:76:2B:98:87:AE:F8:C1:CD:8E:FC:0A:4C:6C:5E:E6
Authority key identifier: 5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
Certificate issuer: /CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Certificate serial: 019CE2C701FEC52630DA9CA0A2BFB46DE096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
Manifest number: 1868
Signing time: Thu 12 Mar 2026 16:00:18 +0000
Manifest this update: Thu 12 Mar 2026 16:00:18 +0000
Manifest next update: Fri 13 Mar 2026 16:00:18 +0000
Files and hashes: 1: Npw06d3i6OT6W1cbnDgGuSW4ge4.roa (hash: XuYzx4X8wj26HqV6SxCe8B8EhqEndYSd+I3KwtxjVxU=)
2: XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl (hash: U9gggLQplqZovvlO4V1P6VVio3tHPRfg/y7jD3h3S54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:c7:01:fe:c5:26:30:da:9c:a0:a2:bf:b4:6d:e0:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Validity
Not Before: Mar 12 16:00:18 2026 GMT
Not After : Mar 13 16:00:18 2026 GMT
Subject: CN=3b6c516b56762b9887aef8c1cd8efc0a4c6c5ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6e:ba:91:34:27:0a:a3:99:a7:e6:1f:08:4a:
48:4c:35:a4:3c:36:8f:2c:64:91:dd:a0:0a:9e:43:
1f:15:8b:cb:23:77:39:6f:92:28:95:45:ca:25:1d:
bd:7a:04:d0:c6:21:2a:e0:69:bb:e8:95:34:96:9e:
da:2b:3f:10:1a:02:a7:a8:49:84:a0:3e:df:2c:f1:
75:12:81:4a:bc:03:17:e7:0f:76:bb:39:09:b0:c9:
fa:c6:f9:e5:b5:5f:e6:57:dc:7a:51:3d:9d:70:66:
a1:f9:84:a4:50:16:9c:a1:54:d6:64:1e:59:ac:04:
69:6c:dc:ef:4d:59:e9:d1:ff:25:ca:d8:92:bd:d3:
a1:74:1e:d0:6f:39:c8:17:c6:7c:a9:e2:cc:4b:6d:
b0:40:e4:5b:95:7c:62:2c:98:1c:d4:bc:5e:77:0f:
63:4c:75:5b:68:86:e4:59:b0:df:7d:8b:b7:24:d7:
c3:25:65:11:d7:99:c6:4e:c3:2a:5c:52:9a:22:de:
4c:1c:52:05:c1:35:6b:5e:b2:23:de:64:f2:5a:97:
58:81:8f:49:69:40:5e:96:ce:1c:72:8b:80:75:1b:
51:6f:96:a7:75:21:fb:dc:9f:43:38:34:8a:d6:26:
f1:47:0f:d4:62:43:a1:6a:66:a5:92:29:48:a1:68:
2d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6C:51:6B:56:76:2B:98:87:AE:F8:C1:CD:8E:FC:0A:4C:6C:5E:E6
X509v3 Authority Key Identifier:
keyid:5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:5b:cc:30:7c:e6:6b:0b:40:69:27:8c:6f:13:89:f2:dd:2f:
45:13:d6:34:54:a4:e0:8b:67:f5:c5:76:d0:a7:df:d2:84:c7:
99:0d:7a:47:77:87:ea:cb:d4:71:34:40:91:f9:48:80:3c:62:
ad:30:24:96:84:3c:94:27:61:83:6e:16:60:86:ea:66:c4:a8:
db:6b:88:80:a9:8b:22:05:13:8e:b5:5b:85:87:02:ce:f8:1f:
6e:b0:5d:c1:b0:f2:3c:f5:ff:65:cc:e7:13:f9:b6:cc:19:e5:
b6:e1:20:53:9d:fd:cc:52:7f:99:12:3d:71:c8:6f:cb:86:c9:
a7:4e:bb:ca:67:8b:4b:a6:24:72:7a:ed:f3:05:53:4e:fc:1d:
14:0e:d4:27:e9:f4:a0:c5:ed:6d:c3:47:0c:c2:ce:30:75:87:
e6:61:da:92:cb:0e:73:9f:d1:d3:f1:ec:02:14:88:03:7f:69:
2a:c1:aa:25:15:28:0c:f3:54:13:c6:79:33:1d:d0:5d:3b:20:
55:46:73:f8:a1:ba:78:5b:27:f7:d2:f1:fa:c2:a5:b3:14:06:
9c:1f:5e:0c:de:ed:95:cd:e6:ed:f0:5a:99:6c:91:41:ee:90:
26:7f:24:64:e3:18:35:74:d2:b4:59:6b:cd:62:78:47:e9:3d:
2e:ff:69:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 18:19:51 2026 by rpki-client