
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft
File: XiNRj6qblKQtGjtNn2O5dDlNBmI.mft (raw, json)
Hash identifier: 3WFJxbMa7CqwXRTyguOaYg5tkrqIcJFYSSZcaxkPnug=
Subject key identifier: DD:79:A1:2B:94:78:BD:5E:50:EA:3F:9A:6B:B8:0E:18:5E:09:5F:94
Authority key identifier: 5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62
Certificate issuer: /CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662
Certificate serial: 019D32633325E00060FADB3D4C45C24A929C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft
Manifest number: 06CD
Signing time: Sat 28 Mar 2026 03:00:55 +0000
Manifest this update: Sat 28 Mar 2026 03:00:55 +0000
Manifest next update: Sun 29 Mar 2026 03:00:55 +0000
Files and hashes: 1: 0-9sd-qmadUujczOz2WkJX2kNQA.roa (hash: GjNrMaOgADYzx542miG7jXCQg7xlwiNJxr+8IrSPpjc=)
2: LNYXeGK0fNHFOXoFsTX923sjqo4.roa (hash: HMZywae9ctDuPusaGMZ0nvtbkQTFjTevWXrmDyy57E0=)
3: W8vZ8aoRVKjvxUVny_OfYjJN6yo.roa (hash: FSZFedNs1YnxbjhewAgdDVFznFYlPK2O05FcBLwFtyk=)
4: XiNRj6qblKQtGjtNn2O5dDlNBmI.crl (hash: ZPSJR8+BJm6KmUkf7k9NpqnMlindS2Co5WwLKyJA2Nk=)
5: jTMK8c4Hxe-_GmhnJl2cbhlhwi4.roa (hash: EV9l1WgVc2rsgYc/+T8QGA8A2PJD5mEc20rAUOjgeu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:33:25:e0:00:60:fa:db:3d:4c:45:c2:4a:92:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662
Validity
Not Before: Mar 28 03:00:55 2026 GMT
Not After : Mar 29 03:00:55 2026 GMT
Subject: CN=dd79a12b9478bd5e50ea3f9a6bb80e185e095f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3d:ac:43:e1:49:c0:c5:51:41:8a:82:ac:18:
d8:9f:3d:96:ed:19:70:e1:bd:74:25:24:13:97:31:
42:8f:86:30:b4:e4:f4:8a:f2:49:99:e8:12:6d:c7:
f4:57:e6:95:55:e5:ea:24:12:47:5b:de:d3:51:fd:
0d:37:69:ae:24:b7:b1:7e:1d:d1:7e:bd:e0:bd:30:
f3:59:e6:8e:9b:22:8e:46:4c:f2:d2:b2:10:ac:32:
4c:ac:80:71:d4:33:88:a9:fa:fa:9e:a1:6b:68:85:
bf:1d:db:2b:72:0a:75:b6:94:4f:4c:6c:59:06:ad:
7b:f2:6e:cc:18:e8:05:2a:c0:41:68:5d:38:00:ad:
ce:2c:ed:79:1b:3a:90:d3:b6:13:a8:d2:a4:21:85:
b2:25:21:e0:e0:09:bc:f5:92:e9:86:16:ea:97:37:
41:27:21:7d:61:8a:66:2a:d2:d0:d4:c3:6d:16:95:
9c:83:2e:93:06:bc:eb:86:df:d5:56:79:64:14:5e:
b1:e3:d0:c4:7d:6c:18:3b:f7:9f:40:82:d8:d5:24:
24:88:e0:da:19:90:f7:5e:90:95:80:f3:85:b2:18:
88:f9:b5:34:f5:c8:fa:a7:22:06:e7:4d:e7:7c:62:
31:0a:5e:01:af:df:dc:46:70:70:be:e8:05:78:9b:
98:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:79:A1:2B:94:78:BD:5E:50:EA:3F:9A:6B:B8:0E:18:5E:09:5F:94
X509v3 Authority Key Identifier:
keyid:5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:8a:bc:04:12:d7:fb:95:76:9c:fe:47:de:93:89:50:68:f2:
a8:8e:0f:5e:4d:fe:88:7c:fb:8a:67:0a:b9:de:f9:93:6e:76:
08:9e:de:c1:be:7c:ed:e2:3b:10:19:3a:63:37:28:6d:58:aa:
c1:8f:8a:3f:52:31:41:93:0f:74:fd:b2:25:a4:08:30:8d:ea:
98:cb:8f:92:bc:82:e4:eb:af:69:54:96:f0:85:a6:cd:86:4d:
75:96:a4:fe:74:f7:b9:b1:80:16:75:60:ae:61:6b:7a:02:f4:
15:95:c4:dc:88:0d:d1:5b:eb:dc:64:5f:7a:cc:5b:fc:f3:4b:
a3:bd:ac:54:b1:65:2c:5f:82:1d:95:eb:a0:7b:9b:25:51:61:
b5:57:22:b2:1c:3a:e6:db:18:6c:3c:a1:e9:a8:b4:85:26:d1:
e1:c9:58:34:d5:3d:53:17:9f:1a:75:13:29:e6:bd:a7:be:b1:
65:a3:da:72:da:30:36:92:f2:31:92:48:14:b6:c4:39:ac:55:
ff:0d:bd:33:98:df:1a:87:cd:ae:ef:a0:5a:09:c5:88:9c:da:
17:eb:d3:4b:e2:44:7d:f1:d1:10:da:e6:e3:cd:a0:5a:04:12:
7f:5a:13:25:a3:e9:e9:5c:bf:58:fe:58:8a:d1:4a:8c:56:1b:
df:2d:c4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 07:02:35 2026 by rpki-client