Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft
File: X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft (raw, json)
Hash identifier: G/ZaTEfMY2HMSXSbF3++fYPsK+XnooFDpfrOqyLtlw0=
Subject key identifier: 41:33:EC:11:DB:89:20:91:61:44:8D:22:BD:D7:19:E9:AD:4D:E8:0B
Authority key identifier: 5F:EB:75:65:E2:1C:F5:B0:7B:D9:71:C9:6E:CC:3A:4A:64:FA:D2:04
Certificate issuer: /CN=5feb7565e21cf5b07bd971c96ecc3a4a64fad204
Certificate serial: 019D37C0ED0C2FCABBEBD30BDB9F124B6025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-t1ZeIc9bB72XHJbsw6SmT60gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft
Manifest number: 0365
Signing time: Sun 29 Mar 2026 04:01:23 +0000
Manifest this update: Sun 29 Mar 2026 04:01:23 +0000
Manifest next update: Mon 30 Mar 2026 04:01:23 +0000
Files and hashes: 1: MUOy_bICxHwJR6mlgWUoUwVMqbc.roa (hash: zYV7qFrIdVJVJeaFnHA8N1kYCPRTpDcW34owFMJXGG8=)
2: X-t1ZeIc9bB72XHJbsw6SmT60gQ.crl (hash: xyd4GbC+YM/vLXFalw4kzQ9nqiBdVfvvJ93q/3ykoiI=)
3: f_g1_FIZZK96z7ZSNPocxjCjsbQ.roa (hash: gb0q9RjIvyLcVT8CSfpFcZqoMX+jR12UyGETqF9tVsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-t1ZeIc9bB72XHJbsw6SmT60gQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:ed:0c:2f:ca:bb:eb:d3:0b:db:9f:12:4b:60:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5feb7565e21cf5b07bd971c96ecc3a4a64fad204
Validity
Not Before: Mar 29 04:01:23 2026 GMT
Not After : Mar 30 04:01:23 2026 GMT
Subject: CN=4133ec11db89209161448d22bdd719e9ad4de80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9f:4d:f1:87:a4:2d:f7:f3:51:25:2a:11:0c:
d2:db:27:76:a5:0d:70:1b:81:b3:0d:13:bb:75:5b:
bf:e2:5c:96:a0:90:9a:85:5a:f9:11:87:8c:6a:55:
b9:e4:46:d7:91:64:0f:91:b6:d4:03:0c:a7:3c:e7:
1f:a4:fb:cb:dc:b2:ad:e2:2d:fe:31:54:8c:79:1c:
92:35:83:ca:22:81:e4:64:f4:f7:f6:99:93:41:36:
9e:8f:82:3f:23:5e:94:1f:ce:cf:09:a1:18:6d:59:
9b:ec:f1:69:e5:39:d6:ca:b9:eb:2a:6a:9f:e2:e7:
4a:d0:29:bd:29:55:26:b4:96:c1:1d:67:3e:82:23:
72:92:8e:f9:39:8a:ce:55:f0:b8:48:2b:10:4d:9d:
63:d2:5a:1c:98:7a:6c:62:b3:af:da:b5:c9:b8:76:
45:bf:fb:9b:b4:5f:b1:33:1d:42:0e:51:38:61:32:
40:a7:ad:13:20:a8:6f:fc:66:7a:69:0e:2c:4e:42:
1d:b9:a9:47:f2:ae:42:11:68:9d:b6:5c:7d:ff:b3:
25:7a:63:3c:6f:f8:b7:85:fe:67:78:a1:67:07:38:
0b:fb:96:99:ca:0a:1a:ef:6d:47:23:27:dc:d6:e7:
86:39:18:3b:78:64:36:28:9b:aa:fd:f0:3e:cc:5d:
d2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:33:EC:11:DB:89:20:91:61:44:8D:22:BD:D7:19:E9:AD:4D:E8:0B
X509v3 Authority Key Identifier:
keyid:5F:EB:75:65:E2:1C:F5:B0:7B:D9:71:C9:6E:CC:3A:4A:64:FA:D2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-t1ZeIc9bB72XHJbsw6SmT60gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c2:31:60:7b:87:e1:f7:a2:14:9e:b1:01:ec:af:56:3a:75:
d5:22:5f:e6:36:f4:25:3a:8a:21:67:f8:1b:3e:df:a8:9c:46:
df:05:fa:49:88:44:c7:78:58:bc:46:01:6d:e4:77:c8:6b:ed:
cb:15:91:e1:18:e1:5a:fb:b5:32:89:dd:48:70:a9:1f:eb:2f:
51:56:5d:f9:69:73:e0:54:f6:c5:9b:a8:db:66:0c:98:9b:4f:
ff:ba:cf:f7:97:3b:a1:7a:27:c1:7c:8f:ec:c9:8b:7e:94:0f:
10:fd:9d:43:d9:d4:05:7a:31:f4:86:f0:53:99:86:e4:48:08:
30:24:51:02:d5:7f:be:f0:ac:b6:12:6c:fd:b5:c9:cd:34:4f:
b3:4b:74:2c:d2:8d:a0:40:41:28:88:92:7b:6c:32:83:ce:4c:
22:c7:9b:f6:74:69:a7:6e:9e:1e:a4:91:05:3a:49:b5:71:24:
de:f3:fa:49:ea:a9:1a:f2:ba:b8:e0:27:9e:5b:8f:a7:b4:09:
55:d8:66:42:e2:b8:99:32:ef:c9:1a:b6:d0:cf:8a:25:58:b6:
2b:0e:2b:59:b1:ce:e9:b2:26:30:06:29:80:f8:7b:c5:e9:70:
51:17:4f:3d:b1:16:47:49:1a:5d:7f:71:f6:34:c1:d1:4e:54:
4c:c9:bd:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:07 2026 by rpki-client