Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
File: X4rRNUEr-QQb5f0I50okEg2z7sc.mft (raw, json)
Hash identifier: lnfAsXLU9jggLmynUVhoiCjhqhxnw1SH8C7FW2xcGo0=
Subject key identifier: B4:CE:E6:F2:E4:07:41:97:8E:26:4D:88:22:91:D6:F7:56:C6:D1:37
Authority key identifier: 5F:8A:D1:35:41:2B:F9:04:1B:E5:FD:08:E7:4A:24:12:0D:B3:EE:C7
Certificate issuer: /CN=5f8ad135412bf9041be5fd08e74a24120db3eec7
Certificate serial: 019D38D2A2B99FE274567A4C4207E9B61C42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
Manifest number: 0CE2
Signing time: Sun 29 Mar 2026 09:00:21 +0000
Manifest this update: Sun 29 Mar 2026 09:00:21 +0000
Manifest next update: Mon 30 Mar 2026 09:00:21 +0000
Files and hashes: 1: X4rRNUEr-QQb5f0I50okEg2z7sc.crl (hash: k9mFHPBtY+oHqO9J2DMAvXe1ig0AlXnhN5Q6PcSHhmM=)
2: s48bE7zPFBsdxI3PwTkDcvxFl10.roa (hash: LCQZLSRk+w6NsXbM56XYTWWTkMECSvsvXOz9oSXfsiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:a2:b9:9f:e2:74:56:7a:4c:42:07:e9:b6:1c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f8ad135412bf9041be5fd08e74a24120db3eec7
Validity
Not Before: Mar 29 09:00:21 2026 GMT
Not After : Mar 30 09:00:21 2026 GMT
Subject: CN=b4cee6f2e40741978e264d882291d6f756c6d137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cc:0f:76:91:f4:ca:ee:4a:12:ef:9c:70:80:
1a:a3:86:de:e5:f9:d1:62:31:4b:5a:b1:72:e8:f7:
67:f8:d6:12:aa:7d:ab:9c:f6:2c:e7:0c:15:d9:38:
9e:67:5a:ed:57:0e:7a:db:01:6f:7e:90:f5:3f:41:
af:34:43:24:4b:02:25:05:4f:a6:bb:3f:06:91:69:
b3:44:9a:27:cf:74:33:63:0e:5a:35:04:7f:fd:d7:
28:e1:25:fb:cb:76:65:c9:9a:59:08:91:05:56:55:
f3:98:00:f6:13:1d:fe:b8:9b:35:7d:4a:a7:28:8f:
20:60:ef:af:3a:2b:d1:b0:14:5d:cc:a9:32:9f:cf:
db:3b:fc:ce:13:72:7e:20:93:77:d2:0c:39:70:ca:
59:7a:b4:e2:89:2b:64:1d:a1:a7:6d:f7:48:2c:90:
79:e9:b4:ba:bc:f9:cb:fd:bd:83:49:12:ba:de:76:
f6:25:12:57:2d:fa:00:e1:d5:c0:7b:f1:50:66:d1:
77:bc:26:8e:6a:1a:2b:c2:95:73:55:58:b9:9f:17:
2d:2c:4d:b0:fc:03:ee:4b:79:6f:7a:90:fa:9b:93:
60:6b:6b:de:82:05:8f:15:04:ce:27:4d:5f:ec:76:
fb:fc:f0:ad:5b:f3:0d:01:54:78:65:a1:6d:1d:94:
b6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CE:E6:F2:E4:07:41:97:8E:26:4D:88:22:91:D6:F7:56:C6:D1:37
X509v3 Authority Key Identifier:
keyid:5F:8A:D1:35:41:2B:F9:04:1B:E5:FD:08:E7:4A:24:12:0D:B3:EE:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:43:02:a0:ab:33:7b:c2:e3:af:13:62:88:40:60:e4:d9:14:
84:65:5f:c5:cd:e4:de:be:27:a7:7d:38:c8:a1:11:e2:c9:c7:
d0:80:b3:ca:91:52:c6:a5:67:eb:15:ad:aa:3a:22:5b:75:57:
09:06:f6:77:d1:06:80:c9:72:b0:98:f7:15:11:63:1c:65:c0:
eb:b2:0d:3d:ec:d7:a4:6a:ff:84:38:73:96:6a:4e:a8:d5:f6:
c9:56:db:0e:e3:6b:0c:58:9d:c3:59:70:75:bf:1b:b2:0c:37:
67:73:40:f6:5c:b2:09:ed:12:9a:11:e8:31:90:a1:c6:d9:ce:
84:d5:cc:83:ac:da:87:49:39:35:3c:fa:b8:c1:0c:19:62:d0:
b3:a0:75:ba:32:89:dc:cb:65:bb:af:ec:49:b6:c9:c9:f0:c6:
57:04:d4:f6:f0:6e:3d:87:28:80:bd:b8:41:bb:c4:c6:65:9e:
0d:d8:5e:fa:1d:0a:72:8c:2f:c7:0b:42:a1:6e:49:bb:8d:ad:
fa:59:5e:f0:5f:94:8c:b7:1f:7c:6a:d4:73:a6:80:d1:d9:6c:
56:a4:c5:3f:f5:9f:d8:5a:46:36:12:70:b0:83:c4:a4:ec:78:
9d:a8:76:d0:55:7d:eb:00:b2:3e:21:71:c9:f9:f0:fe:72:d2:
9e:d0:e0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:24 2026 by rpki-client