Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
File: XdE5iXay9IdyW8E9f66-0-Ftgsk.mft (raw, json)
Hash identifier: oM5pwyNO+CXUg7+7uGWALJZhQUKHu1wQt8XQbKnQLKs=
Subject key identifier: 2E:7E:C9:6A:B0:FA:A9:0C:AE:E4:74:8E:6B:E2:90:9F:B8:13:69:84
Authority key identifier: 5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
Certificate issuer: /CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Certificate serial: 019D39AF1E19A15428B2326F8ECC75C3D8E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
Manifest number: 06B0
Signing time: Sun 29 Mar 2026 13:01:10 +0000
Manifest this update: Sun 29 Mar 2026 13:01:10 +0000
Manifest next update: Mon 30 Mar 2026 13:01:10 +0000
Files and hashes: 1: 1yTxuvJTgzp3vueVNPtMM4HSlnE.roa (hash: C3mQ9ASRyTlSwgnHvOngoGQirohvWMvEni68YFNubqo=)
2: XdE5iXay9IdyW8E9f66-0-Ftgsk.crl (hash: WDSNPp2t78WRwQ8lh8XXDKCoiO3hJqB6jgGWEqvh/CU=)
3: xweu5qCO47VIbmMKNVD40EQTVOU.roa (hash: 2Ggr+oJ9NSlt1DGrtrpkA0zHBUc5XOHY+zg99GvfTiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:1e:19:a1:54:28:b2:32:6f:8e:cc:75:c3:d8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Validity
Not Before: Mar 29 13:01:10 2026 GMT
Not After : Mar 30 13:01:10 2026 GMT
Subject: CN=2e7ec96ab0faa90caee4748e6be2909fb8136984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:51:e3:1d:ac:9a:b9:f8:9b:3f:ac:40:d0:90:
79:5b:70:3b:9a:6e:7c:1e:72:11:90:93:7b:04:32:
fd:35:63:eb:ac:e0:a3:63:66:81:29:e5:4d:71:4f:
d5:fd:18:a1:8c:55:9d:3d:16:68:55:04:40:e8:c9:
11:4d:74:f1:82:ab:f0:65:8b:3f:65:e5:2c:56:36:
73:7a:fd:2a:1c:d0:7b:22:c7:08:41:82:41:22:c2:
37:16:33:14:41:d7:ef:c7:09:57:ef:fe:92:04:3a:
70:8f:ee:7f:ab:94:c9:c2:33:80:7b:ab:d6:0a:e9:
d4:3f:a5:e5:96:db:a5:38:be:c2:18:6e:73:49:dc:
e6:17:6c:cc:77:b5:71:04:2f:f6:70:c6:34:79:e1:
81:17:39:6a:09:32:c4:eb:75:2f:48:f6:f1:31:85:
cf:aa:15:45:1d:cb:10:32:18:23:4c:6d:d3:6c:2c:
6c:43:26:82:a7:f8:5c:14:e6:43:da:e3:86:b5:c4:
31:c3:a4:9a:8a:54:2d:ba:67:d1:81:dd:0b:9a:4e:
e9:72:57:70:82:ea:53:d1:e6:7a:bb:75:ba:27:fc:
11:18:95:b7:06:76:aa:36:7e:5f:98:60:a5:f2:60:
d5:15:2f:82:0d:a2:7f:71:da:c9:5f:94:cd:57:19:
46:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7E:C9:6A:B0:FA:A9:0C:AE:E4:74:8E:6B:E2:90:9F:B8:13:69:84
X509v3 Authority Key Identifier:
keyid:5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ae:f6:2e:5e:11:82:49:35:df:4c:4a:93:cb:33:e0:b2:ba:
ec:8d:bd:83:07:cd:5e:b6:68:02:1e:b2:f1:66:ab:6a:69:27:
a2:5f:52:c8:28:a3:43:8f:60:cd:df:30:a9:fa:1e:33:05:71:
05:b5:4c:71:03:a0:2e:f2:79:91:9d:ef:e3:4c:54:64:cf:78:
dc:8d:a0:bd:0c:77:57:b8:cf:e4:ce:5b:c4:c2:91:5b:b7:bd:
ee:c4:f2:91:ac:33:5f:d2:15:2b:17:72:d5:21:84:db:63:f3:
03:f9:a1:89:d7:3f:b3:75:a3:e0:df:d5:c5:f5:bd:75:d5:37:
7d:95:ac:45:85:3d:3f:f8:09:2f:04:2b:de:23:30:5c:f1:24:
49:35:86:65:88:04:37:59:23:df:c0:b5:2f:a0:7e:3e:a5:d2:
c4:91:be:98:3c:24:44:66:8e:e4:bc:6a:7c:e7:2f:5c:4c:f2:
d5:11:12:6c:d5:29:bb:9c:f3:28:b8:09:3b:4d:1e:01:e9:08:
b8:88:b4:04:2c:b0:85:85:03:27:0b:e5:7e:9a:4b:fc:ed:57:
0d:0e:10:76:82:44:94:e2:16:e5:8b:fd:21:d2:ba:a2:d8:4b:
d7:66:28:0a:a1:a1:55:89:de:ab:41:7b:a0:d8:bb:39:f9:e4:
88:84:af:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:24 2026 by rpki-client