
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft
File: xUcTl89ew5mqDuxcMXOx8wQHI6k.mft (raw, json)
Hash identifier: 129x/GN4cdxWrOFA7qDh0c58xuWNC6NQNMwBteRWKXI=
Subject key identifier: 8E:C9:FF:8F:5E:D9:D0:E3:1F:55:DE:80:70:6F:83:87:49:5D:7F:25
Authority key identifier: C5:47:13:97:CF:5E:C3:99:AA:0E:EC:5C:31:73:B1:F3:04:07:23:A9
Certificate issuer: /CN=c5471397cf5ec399aa0eec5c3173b1f3040723a9
Certificate serial: 019D37C03EC0297FFF344594052825C3AD88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUcTl89ew5mqDuxcMXOx8wQHI6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft
Manifest number: 0A5C
Signing time: Sun 29 Mar 2026 04:00:38 +0000
Manifest this update: Sun 29 Mar 2026 04:00:38 +0000
Manifest next update: Mon 30 Mar 2026 04:00:38 +0000
Files and hashes: 1: Wd7kxNOQtW9wntahD6-s3hs_RN8.roa (hash: Yn5VDfyyadHVMUb0Gm6V0K9m9w04Ph9wP22TSsc2ons=)
2: xUcTl89ew5mqDuxcMXOx8wQHI6k.crl (hash: MIAypiHjmvsR9H9L7ZCtTuiOAxDI1MalivABXESF6U4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUcTl89ew5mqDuxcMXOx8wQHI6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:3e:c0:29:7f:ff:34:45:94:05:28:25:c3:ad:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5471397cf5ec399aa0eec5c3173b1f3040723a9
Validity
Not Before: Mar 29 04:00:38 2026 GMT
Not After : Mar 30 04:00:38 2026 GMT
Subject: CN=8ec9ff8f5ed9d0e31f55de80706f8387495d7f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a9:5e:17:a6:ee:33:ea:58:72:6c:f8:78:f6:
27:88:cb:59:45:f5:e7:42:43:f3:e6:53:c6:9b:0e:
d4:d0:c9:08:19:a6:7c:75:4b:1f:01:b7:69:31:02:
7e:9a:b4:1b:ef:3b:ac:e9:99:2c:98:26:9c:47:a0:
1d:c4:e1:60:f2:50:34:a3:18:b0:41:77:23:f4:a2:
21:70:2b:70:ce:36:b3:fb:2d:11:25:00:e5:9c:d5:
63:f0:e7:b2:50:b0:38:39:53:d0:c2:28:5e:69:72:
3a:11:6e:29:57:56:f5:87:8e:14:46:96:d4:c7:e0:
60:fd:5d:68:a7:7f:0d:ca:4e:5c:ba:0e:24:be:c5:
1f:b8:28:2f:20:56:52:98:12:1b:47:03:80:43:bb:
6b:b7:e9:9d:c6:f1:e6:5d:5c:d4:cc:32:ea:5f:7f:
2b:26:2a:b9:af:0e:8f:b5:3a:7a:ac:23:67:eb:13:
e5:14:f3:df:84:ab:17:ae:68:77:04:bb:83:53:73:
38:ea:14:44:62:31:6c:c6:a4:9e:ba:f2:24:15:31:
5e:cc:9b:4c:62:7e:51:e7:cf:ef:4a:43:57:ff:e0:
c9:a3:8d:a9:53:7e:7c:dc:73:b9:b0:b4:a8:80:dd:
7b:8c:28:49:2f:3f:9d:3e:5e:5f:c8:b4:ef:0b:0e:
75:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C9:FF:8F:5E:D9:D0:E3:1F:55:DE:80:70:6F:83:87:49:5D:7F:25
X509v3 Authority Key Identifier:
keyid:C5:47:13:97:CF:5E:C3:99:AA:0E:EC:5C:31:73:B1:F3:04:07:23:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUcTl89ew5mqDuxcMXOx8wQHI6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:66:7b:b3:62:74:e2:48:6d:73:ee:0b:db:64:b8:7f:d1:30:
b0:ef:08:a7:55:e9:3e:e9:50:7c:d8:47:24:19:a6:43:c8:65:
3a:4d:cd:dc:a9:cd:b7:95:1a:e5:61:00:06:90:db:ac:37:85:
18:4d:48:7d:a0:65:52:4b:f4:63:62:88:e8:81:7b:3f:5f:cb:
f1:df:f6:0a:4e:0e:02:82:d5:91:a2:c1:3d:b5:39:24:66:80:
ef:41:b5:87:e1:8f:15:e8:af:ac:48:22:32:df:54:fc:6c:3f:
cc:71:ac:26:df:21:e5:82:5a:b8:94:15:b0:6a:6f:e7:b4:01:
cc:f5:76:08:be:d0:64:11:44:92:5d:e7:19:39:34:89:de:1a:
ca:0a:38:b7:f2:f5:71:10:1e:b5:ac:05:05:38:c1:79:88:3e:
19:97:d3:84:21:f8:0f:7e:ab:ee:2a:e4:4f:b1:c5:98:82:f4:
75:e6:3f:e3:0c:40:29:8e:be:5d:f6:13:13:77:78:cd:31:b2:
f7:30:6e:e2:af:ab:f8:38:8e:eb:55:97:a2:e7:d6:9c:78:c7:
7e:c0:09:0f:bc:cb:19:f7:77:34:89:45:26:54:05:80:6e:3e:
b7:11:7b:36:6c:b5:f9:7e:f8:56:88:15:81:3a:1c:96:d1:51:
55:43:db:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:40 2026 by rpki-client