Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
File: XYLKb462haVz5dHZH48GEhqwKjc.mft (raw, json)
Hash identifier: /3OVF6tkDdX2bX3bR8Njj8OIQToPxHrIMoB3f5J+aAM=
Subject key identifier: 11:0F:37:5D:CA:33:82:3C:2F:BA:CD:8A:09:3B:21:D2:29:F5:04:0F
Authority key identifier: 5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
Certificate issuer: /CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Certificate serial: 019D38D34A29D7965B738EB0E9B551AD266F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
Manifest number: 14C7
Signing time: Sun 29 Mar 2026 09:01:04 +0000
Manifest this update: Sun 29 Mar 2026 09:01:04 +0000
Manifest next update: Mon 30 Mar 2026 09:01:04 +0000
Files and hashes: 1: Sg_4XUAI-4zoY2AzgRoGFITRYgE.roa (hash: J1EWDPsgpuehOfFX0CglsLJx+tt5cw97sY3WgurbJXo=)
2: TeQy6kFDHKNYmWvI94KK1SajumM.roa (hash: 9uvICF7tqz4KyCQG2zRzp+9JspsGn3aZOu1Zg1a40nY=)
3: XYLKb462haVz5dHZH48GEhqwKjc.crl (hash: p1ibs641MsOUlzOtxtCkiQl18kPFtWutPqldHlUd8PM=)
4: dhOZf_4fAgQZi4_moQSI8o9EFj0.roa (hash: 5T/3rUQwrhAAxuFwErHVP6jvrc57b61OVidSPKCnMBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:4a:29:d7:96:5b:73:8e:b0:e9:b5:51:ad:26:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Validity
Not Before: Mar 29 09:01:04 2026 GMT
Not After : Mar 30 09:01:04 2026 GMT
Subject: CN=110f375dca33823c2fbacd8a093b21d229f5040f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4d:01:56:82:d6:f5:57:d2:54:32:cd:be:08:
bf:9f:bc:51:1c:40:54:eb:ae:cc:32:d1:4e:e3:e8:
fd:ef:25:36:18:3b:65:4a:28:44:57:d0:86:61:40:
34:b0:bb:b6:5d:fb:05:10:1d:d9:a7:99:07:32:f5:
05:36:98:ad:f4:12:c5:00:ae:5f:36:bf:00:1a:ce:
98:24:9d:d8:d5:fe:59:8d:98:ae:ee:ea:41:0a:e6:
06:e5:e3:72:62:c0:8a:df:6c:1b:58:3b:e2:4f:c9:
c7:7f:ce:d7:c8:9c:f9:fe:9d:ef:3a:ae:ed:b7:57:
0c:58:21:2c:8a:63:a4:73:e7:52:7c:a5:e6:85:de:
03:8c:a4:c0:96:84:cc:5a:64:ea:aa:30:70:b5:09:
08:5b:e1:07:ef:6e:14:2b:4b:8d:d8:da:3c:5b:50:
6c:e9:9a:7b:83:d5:6e:7d:91:26:a1:c7:fb:d6:58:
d7:ed:2f:13:b4:ce:80:2d:d4:6d:fc:ac:a5:a4:01:
6b:b4:3b:bc:8d:74:90:15:5f:8d:2f:f3:a0:0b:df:
54:5d:0c:55:28:27:26:7d:47:ae:31:a4:d9:2e:e0:
dd:cf:b9:fe:b3:f1:ab:93:46:24:0f:f9:a6:90:56:
75:63:75:b6:a5:3d:1d:49:17:c7:08:12:3b:7f:70:
cb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0F:37:5D:CA:33:82:3C:2F:BA:CD:8A:09:3B:21:D2:29:F5:04:0F
X509v3 Authority Key Identifier:
keyid:5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:00:51:de:90:61:63:42:3d:f2:aa:e4:8e:67:5c:65:84:3d:
f4:13:56:10:35:46:28:1f:44:17:69:1f:e0:f7:73:87:3d:e4:
19:78:e6:8a:b8:a9:5a:72:fa:af:24:ff:78:15:c9:b6:f1:a5:
ff:ed:50:77:88:4d:88:38:ba:e0:24:92:c1:2a:24:13:52:1f:
af:0f:67:77:03:9f:eb:53:a2:62:47:d1:87:99:26:5d:e1:a7:
4f:15:65:54:9f:cb:64:d1:37:e8:97:31:21:b1:31:83:db:5b:
22:14:4f:24:69:aa:1e:36:05:df:f9:48:33:d3:ac:97:48:55:
d5:29:f2:4b:09:95:09:4b:b1:0b:67:3b:cd:95:45:0e:b5:10:
bd:b4:5b:63:27:93:6c:b9:99:46:26:84:86:95:89:20:23:81:
0f:65:14:1c:45:05:c1:cc:77:52:fa:ce:e0:b4:cc:be:18:aa:
c9:96:f2:38:f5:9a:93:12:04:6c:33:3f:bd:43:41:55:5c:a1:
fb:76:3b:fc:d0:46:9c:12:07:cc:55:27:37:7d:51:c6:fe:20:
c1:cd:53:47:03:1b:e0:d5:15:35:9c:42:b4:b8:5b:ca:16:c8:
22:20:1e:18:7b:7e:08:cd:a8:20:d7:f2:5e:7e:ad:d5:51:b1:
f4:ea:c8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:03 2026 by rpki-client