Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
File: XPVjIet-o-5Fze0ChmhCDjf6L6w.mft (raw, json)
Hash identifier: +mi9sN8hqZ/MeCeb9CqRC/55TDeIoDnhLMz3IYWcDP0=
Subject key identifier: 72:19:37:97:92:13:22:E2:04:33:F8:7D:61:41:7E:40:91:8E:3B:15
Authority key identifier: 5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
Certificate issuer: /CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Certificate serial: 019D39E56BF81ECB998B11DF0EB956FD9196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
Manifest number: 15A1
Signing time: Sun 29 Mar 2026 14:00:29 +0000
Manifest this update: Sun 29 Mar 2026 14:00:29 +0000
Manifest next update: Mon 30 Mar 2026 14:00:29 +0000
Files and hashes: 1: F7EvqKPuCJrRbauscLqXiKU0tSU.roa (hash: Rn1QP+hzXdWW26eL4q5uEtv+FD1RDx8ao69irkAES9U=)
2: XPVjIet-o-5Fze0ChmhCDjf6L6w.crl (hash: +CR+dJsmoJSwdiLxX37/YeA9PNFd1qg3ANv+1zOa4Pk=)
3: a7oKAtXpujbjcSp7xIWIBbpbuwo.roa (hash: uOToHNzKGxHUJP96PSZDBVfJ0h4D91Ag2KcuZFpXViQ=)
4: bklYzzrT2LyqE_eolbd4uJqpn88.roa (hash: hL8JImvIqT8exdBOwwwQRZtRNMgq3QcD8ZDf3TXxPgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:6b:f8:1e:cb:99:8b:11:df:0e:b9:56:fd:91:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Validity
Not Before: Mar 29 14:00:29 2026 GMT
Not After : Mar 30 14:00:29 2026 GMT
Subject: CN=72193797921322e20433f87d61417e40918e3b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:41:7b:c6:97:46:d7:67:a2:72:99:83:76:38:
a7:d8:aa:64:13:ac:20:9a:22:03:b9:a5:f6:bb:37:
b8:c8:7e:a4:62:c1:ed:0c:fe:54:bc:d6:e1:d6:2f:
e1:bb:4a:49:e4:c8:61:c0:7f:86:11:3f:ae:96:f6:
de:7b:07:be:1f:55:65:e1:6d:f3:3e:fe:00:f4:1b:
57:78:29:3b:78:75:42:88:97:4b:98:32:fb:28:f9:
ae:86:dc:67:ac:76:1b:5a:b7:7c:02:fa:f3:1a:f0:
0c:8d:da:75:93:7c:fc:27:75:39:ca:58:f8:01:48:
cc:a2:63:4e:d0:8c:fc:5a:d6:dc:6a:a6:37:a5:a4:
e0:e3:27:e1:29:88:c3:1c:99:90:81:e6:86:8e:af:
be:a5:29:1d:a4:a2:2e:31:af:5a:e2:29:e6:e8:4d:
c6:3d:90:9b:36:6e:fa:c9:a3:06:41:77:a1:e6:3f:
fd:46:ff:53:73:fe:66:e7:4e:aa:d7:72:2f:06:cd:
46:2d:e1:67:9a:ec:66:33:57:99:de:c6:f2:51:c5:
f2:ca:55:ec:6a:7b:a7:f8:39:03:78:ef:55:c2:5e:
3c:08:3c:75:5b:a0:00:15:67:14:bc:72:ed:23:b6:
85:11:eb:c4:8c:fa:b6:8a:41:25:54:20:41:c3:61:
38:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:19:37:97:92:13:22:E2:04:33:F8:7D:61:41:7E:40:91:8E:3B:15
X509v3 Authority Key Identifier:
keyid:5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:5a:73:9d:50:ff:b6:55:61:ea:e8:05:d0:cd:c1:27:d5:b5:
ed:7b:79:13:5e:58:94:5a:33:b6:a9:72:a4:93:16:5d:a0:19:
61:2d:3c:38:97:3a:d4:86:d1:f2:01:4d:a4:77:50:c6:86:11:
e2:48:dc:15:95:c9:10:de:49:4e:21:05:10:2f:be:e3:29:13:
8c:2f:0b:fb:00:9e:c9:42:b3:7d:f1:a6:32:21:a5:b1:39:16:
73:dd:96:c2:f9:99:32:74:7f:94:42:50:06:90:87:b8:6a:33:
a6:e1:45:44:da:8f:d1:bf:4f:68:bc:ae:30:05:d3:fa:d9:ac:
d5:96:62:de:cc:cf:0b:84:94:7c:7f:ea:f7:fc:38:f7:fc:cc:
b6:0c:7d:0a:6d:1f:ef:96:02:e4:6d:25:70:ca:cc:9f:6d:84:
4c:16:0e:07:18:36:10:17:1b:f8:82:c3:7d:c9:b9:25:ce:6a:
fc:ce:6b:24:b1:a7:1f:79:f3:b8:74:87:e6:fc:6c:42:7b:f9:
37:8b:c4:f0:cf:e3:29:47:e2:69:ba:5f:f0:70:e5:fb:fc:6f:
24:8e:36:87:92:36:ba:7b:3c:58:48:af:41:e2:80:05:68:e0:
b5:26:91:c0:ed:52:a1:01:d4:ab:cd:15:ed:7e:51:90:a5:27:
02:86:90:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:18 2026 by rpki-client