Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
File: XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft (raw, json)
Hash identifier: 93uqN+iTJue9TwgFzaBn8ZrFdlagN4kIiAwghdGcQnk=
Subject key identifier: 74:21:3F:22:2E:38:91:21:DE:AE:4C:B4:57:DF:4B:34:81:89:9B:71
Authority key identifier: 5E:FC:CD:7D:7E:30:8F:81:80:70:51:F8:D4:87:E9:D8:29:C2:48:68
Certificate issuer: /CN=5efccd7d7e308f81807051f8d487e9d829c24868
Certificate serial: 019D3865E3110CB99D20154663F740D4FF4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 07:01:34 +0000
Manifest this update: Sun 29 Mar 2026 07:01:34 +0000
Manifest next update: Mon 30 Mar 2026 07:01:34 +0000
Files and hashes: 1: H7bzuNwWAw0WqWgCEkaaWLBrXww.roa (hash: qJ814Ut9PCA48je680EM2s8Vg9S3+E4bblZcpYFDxgI=)
2: XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl (hash: HlMZuQwr68OkQJNgwhNuTtyYlJpgSq5KZL5hyj2Dbh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:e3:11:0c:b9:9d:20:15:46:63:f7:40:d4:ff:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5efccd7d7e308f81807051f8d487e9d829c24868
Validity
Not Before: Mar 29 07:01:34 2026 GMT
Not After : Mar 30 07:01:34 2026 GMT
Subject: CN=74213f222e389121deae4cb457df4b3481899b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:55:03:56:6c:28:92:cf:f8:30:d3:27:47:1c:
be:03:b8:71:ff:ed:21:3c:b9:92:ca:7d:6c:3a:e9:
38:df:fa:89:bd:68:17:f6:20:d8:f7:f4:ef:67:71:
2d:78:33:ec:d2:95:bb:5a:00:e8:a3:77:97:5f:96:
5f:cb:56:b0:ff:0b:13:5a:c1:0e:d0:16:e2:2e:72:
db:dc:f0:22:cf:3a:58:56:a8:9f:fe:1d:5f:12:06:
a9:61:ec:16:43:00:ca:60:f5:db:ae:69:13:b5:c2:
36:8a:82:a9:2b:d9:cc:6b:7a:2d:71:15:c1:36:4b:
20:1f:1f:63:1f:2b:ff:96:d0:6d:90:e8:5e:76:ff:
6e:73:5f:2c:aa:f1:be:03:7a:58:fe:a4:8d:42:f5:
11:b2:01:3c:93:2f:ea:5c:48:92:9b:d1:ee:8d:5e:
3c:b9:34:d1:c6:1e:fb:83:a0:e9:b7:21:e8:a1:c0:
f0:2d:d8:29:88:69:7c:d6:2c:2d:c1:00:60:3c:30:
45:7a:ec:ba:d2:fc:68:2e:cc:ed:49:a0:fa:95:76:
18:00:d6:07:c9:87:e4:85:d1:a4:d1:e5:da:54:4a:
30:fb:55:27:4a:34:c6:e1:79:ef:62:29:eb:2a:73:
36:22:ba:f4:08:42:6d:c5:47:a7:90:a1:1f:7c:28:
5a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:21:3F:22:2E:38:91:21:DE:AE:4C:B4:57:DF:4B:34:81:89:9B:71
X509v3 Authority Key Identifier:
keyid:5E:FC:CD:7D:7E:30:8F:81:80:70:51:F8:D4:87:E9:D8:29:C2:48:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:47:98:50:dc:13:62:dd:ee:89:a5:44:ad:fa:52:f0:40:1c:
10:09:13:38:99:0b:6f:e5:da:69:47:0a:e0:35:e6:de:23:06:
91:35:c1:2a:51:21:0d:a0:91:bc:98:ad:d8:94:24:70:40:fe:
32:48:2c:55:fe:aa:db:8d:57:36:3e:f0:84:56:93:84:c1:5d:
a4:d0:9a:d8:7e:cf:5e:a7:18:a4:af:60:0f:86:a9:1d:01:e2:
ce:65:28:9b:a8:02:4d:47:34:12:ca:af:71:a1:87:e1:ab:9e:
df:3f:1d:34:f8:ef:c2:88:c7:f4:51:60:b5:65:73:5b:f5:13:
8e:1d:9a:5b:50:0b:c8:2e:a0:20:2a:6e:48:ee:eb:98:8d:d4:
3e:8c:f5:c7:52:a3:c2:1d:36:c9:62:4a:88:fe:85:3d:ec:22:
bd:6e:90:e3:b6:ca:e4:63:2f:f5:97:56:ee:31:c2:07:57:0e:
df:e9:39:55:8e:82:25:ff:a2:06:45:bb:f0:2f:22:c5:90:5a:
67:ba:58:40:ad:9c:89:55:82:d6:e6:0b:35:a5:5d:b7:f9:2b:
51:c2:a1:f4:72:18:b3:96:19:a0:d4:79:c3:84:ea:1f:7f:89:
92:5a:30:08:e5:36:1a:85:50:0e:86:d3:c0:af:b1:23:8a:f5:
d0:dc:a9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:08 2026 by rpki-client