Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
File: Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft (raw, json)
Hash identifier: otQ/+tnKfG6drvmPYCJx+xCALvpeHTovLEt/8Lg4mHc=
Subject key identifier: 90:CB:39:20:40:93:20:90:67:7F:77:98:0A:35:80:CD:42:D1:22:C1
Authority key identifier: 5D:FF:73:A8:B2:18:35:82:BB:4E:FD:7D:E8:57:D4:81:F6:D4:B4:60
Certificate issuer: /CN=5dff73a8b2183582bb4efd7de857d481f6d4b460
Certificate serial: 019D37C03CD5FE785BDE56E6F24A761B1D83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
Manifest number: 1271
Signing time: Sun 29 Mar 2026 04:00:38 +0000
Manifest this update: Sun 29 Mar 2026 04:00:38 +0000
Manifest next update: Mon 30 Mar 2026 04:00:38 +0000
Files and hashes: 1: Jqfmht0PAQt2HnSQZ-I_FzAJ46Y.roa (hash: cjrDpM/5EqcBfOXqNWcxU7B1Z2/Qb7RmnI4w4dT/TqI=)
2: Xf9zqLIYNYK7Tv196FfUgfbUtGA.crl (hash: HpA+9ipBjz+SzKNju67mO7am1ixOCNQ2F9TJqdTtXS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:3c:d5:fe:78:5b:de:56:e6:f2:4a:76:1b:1d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dff73a8b2183582bb4efd7de857d481f6d4b460
Validity
Not Before: Mar 29 04:00:38 2026 GMT
Not After : Mar 30 04:00:38 2026 GMT
Subject: CN=90cb392040932090677f77980a3580cd42d122c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d8:85:3c:d5:97:86:07:8e:6c:d0:46:e5:a2:
74:fe:13:c6:93:19:2c:b9:ab:3b:bc:4d:6f:83:8f:
c8:4f:d2:fa:50:f0:fb:10:5d:9d:7e:df:a1:95:80:
fe:0d:46:10:84:1e:2d:0d:5a:99:7e:a3:8b:bb:f9:
71:91:91:ab:64:ce:17:3f:b2:e4:cf:5c:47:9f:d0:
13:1a:30:21:2b:35:27:f2:e3:2b:b8:94:a9:e6:bf:
f5:80:42:a5:1e:e4:d4:95:93:2e:42:f6:7f:4a:a7:
5a:26:1e:34:7f:6f:a5:ff:57:ab:65:05:e0:ea:ab:
3d:5c:a3:91:76:24:1e:d4:c8:9d:f7:bb:41:87:b5:
a3:d8:28:b0:c4:94:fc:67:ed:c5:6a:50:8b:0d:f4:
a8:1e:ab:63:1c:18:47:47:08:fc:93:40:7c:89:72:
6c:56:1d:94:4f:19:cf:38:16:b9:fa:65:fd:89:54:
8a:25:20:b9:2a:95:af:fb:d4:9d:53:44:59:e9:3e:
88:6b:ce:07:e3:bd:14:9b:81:f4:5a:ce:56:a7:f7:
2b:5c:d0:d0:59:95:56:c9:4c:c4:e7:24:3e:58:42:
62:6a:62:50:ce:53:53:ee:c9:85:d7:68:ea:a1:71:
72:8f:90:aa:c1:4c:99:38:d3:8a:de:46:0f:ab:c9:
cb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CB:39:20:40:93:20:90:67:7F:77:98:0A:35:80:CD:42:D1:22:C1
X509v3 Authority Key Identifier:
keyid:5D:FF:73:A8:B2:18:35:82:BB:4E:FD:7D:E8:57:D4:81:F6:D4:B4:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:9e:a9:20:1c:44:38:74:d4:d8:f2:66:74:e2:02:01:a6:78:
ab:9e:01:09:71:c1:4b:36:2f:c5:76:e4:06:ce:b9:57:ad:dc:
c0:cd:34:f2:fb:0f:bd:6f:92:61:d5:48:0e:a9:15:d1:25:39:
08:0f:ce:bb:66:c3:64:76:67:81:82:ef:65:55:94:7c:20:b1:
84:68:05:59:81:7f:62:eb:45:3a:bc:3c:7e:f8:8f:5b:2f:f8:
2f:c9:1a:69:bc:7d:0c:1c:25:32:81:35:e6:45:a4:b5:12:18:
91:d1:f7:78:2a:b1:36:84:6f:ca:30:ba:5a:65:ac:e3:ae:ce:
9e:64:5f:07:8a:3c:58:77:4c:83:0a:59:62:61:dd:61:f9:6f:
83:ac:31:09:91:23:54:56:af:d3:cf:d8:56:68:91:40:51:b8:
68:37:4c:35:42:22:d1:42:fb:fb:c5:0e:33:9c:cb:fb:19:e6:
85:62:1e:03:49:ca:b7:46:3b:56:67:18:59:1b:1f:20:4d:f5:
e9:95:05:30:22:c6:bb:7c:c5:40:37:16:7c:5e:15:41:06:93:
80:36:7c:28:af:b5:df:af:19:41:86:38:97:fd:11:64:14:9c:
b2:ef:75:7d:4d:2a:b7:46:8f:ae:a6:5f:23:34:84:44:04:68:
3f:c7:41:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:33 2026 by rpki-client