Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft
File: XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft (raw, json)
Hash identifier: dEFnT83rOjdYk6hfVWVUUKDaBPIBZFP+2viMwnUFYcM=
Subject key identifier: 24:78:6A:EB:9A:86:5C:00:E5:B6:E4:73:F5:33:B4:37:57:4E:69:3C
Authority key identifier: 5C:75:70:07:AE:BF:00:09:8A:80:02:28:DB:1F:59:30:EE:66:E6:75
Certificate issuer: /CN=5c757007aebf00098a800228db1f5930ee66e675
Certificate serial: 019D382E49456DE27C7C5139EA02E88B529A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHVwB66_AAmKgAIo2x9ZMO5m5nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft
Manifest number: 0895
Signing time: Sun 29 Mar 2026 06:00:50 +0000
Manifest this update: Sun 29 Mar 2026 06:00:50 +0000
Manifest next update: Mon 30 Mar 2026 06:00:50 +0000
Files and hashes: 1: XHVwB66_AAmKgAIo2x9ZMO5m5nU.crl (hash: FxR5k8EzKXzu3pTZuYL/0L4Wfg13UlHz5Jl2+whAmK8=)
2: iaWZDNhDLscYcfyYSiXpXFomI88.roa (hash: Pf7br+pz9PCLXjlHTpNcxUaJd9dwtWHArZdZaJaAooU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHVwB66_AAmKgAIo2x9ZMO5m5nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:49:45:6d:e2:7c:7c:51:39:ea:02:e8:8b:52:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c757007aebf00098a800228db1f5930ee66e675
Validity
Not Before: Mar 29 06:00:50 2026 GMT
Not After : Mar 30 06:00:50 2026 GMT
Subject: CN=24786aeb9a865c00e5b6e473f533b437574e693c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:51:2e:68:e2:97:74:01:d2:b9:18:a6:52:d3:
3c:73:91:08:0c:9b:0a:20:16:d1:b1:7d:82:95:0a:
44:55:97:b4:60:5f:16:13:49:23:38:8e:82:34:96:
4b:51:0c:d3:13:fd:50:1c:8c:cf:a6:b1:f3:b2:04:
f7:ad:49:57:25:71:5c:40:5a:e1:85:aa:29:3f:e5:
93:ba:cd:20:1e:f1:eb:f8:18:b5:14:90:1c:7f:f7:
d6:de:b3:32:95:d5:eb:4b:f5:3f:27:64:0d:ec:00:
f5:ff:9a:37:a0:70:c9:01:32:ff:eb:1b:7d:db:1a:
e7:c1:4b:2b:10:0f:90:55:b0:b5:b2:8b:d7:df:8a:
57:54:3a:5d:96:5e:a5:15:fc:e7:7e:74:e5:d1:f1:
d2:ec:ab:0e:f0:a9:97:2b:19:a2:21:67:72:47:90:
2b:b4:87:f7:b4:ca:06:89:d9:91:87:e1:00:b3:04:
0f:a2:89:9a:75:88:2b:29:8e:d6:ec:d8:4e:93:7d:
8c:ba:ce:63:28:17:26:7d:c9:14:37:e1:87:eb:61:
b6:ef:21:c0:39:7a:b1:ee:32:18:72:b9:48:e8:d2:
47:22:68:c1:00:97:d6:4e:62:58:81:f5:9c:60:44:
6e:9b:98:76:34:f2:ee:be:9a:2c:7a:9d:c0:ef:b4:
d4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:78:6A:EB:9A:86:5C:00:E5:B6:E4:73:F5:33:B4:37:57:4E:69:3C
X509v3 Authority Key Identifier:
keyid:5C:75:70:07:AE:BF:00:09:8A:80:02:28:DB:1F:59:30:EE:66:E6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHVwB66_AAmKgAIo2x9ZMO5m5nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:3c:e4:61:ce:73:67:f2:5e:13:a3:36:42:62:d3:5e:33:87:
c5:f2:dd:cf:1e:14:42:a9:6d:45:18:36:40:d9:d4:d1:ca:c7:
ad:0c:43:3e:67:5a:62:d8:71:f6:1e:1c:30:03:42:37:67:bd:
5c:15:70:df:38:05:e0:f6:e9:b8:a7:e9:c9:90:e5:91:3b:e0:
e7:62:f6:67:82:dc:33:bc:bb:9a:eb:87:2c:e9:c9:8f:74:6e:
cc:a4:65:42:3d:85:7c:e2:a5:a9:e3:21:a5:94:98:08:3c:c2:
b3:10:3d:98:83:45:31:d0:12:ea:78:16:2f:12:49:52:1d:83:
c1:fa:03:39:a2:7c:b9:0c:78:d0:cc:8b:d3:ac:09:65:85:94:
c0:14:cc:e7:fe:fd:81:34:b5:21:98:5d:4b:85:08:69:5d:a5:
b3:ac:a1:36:bf:68:6b:6f:58:a3:18:5e:a6:4a:44:b5:2e:77:
25:98:f6:6a:d2:c1:bf:df:6e:13:34:c6:e6:0c:11:15:74:e3:
3a:6f:ab:16:e2:a2:c6:87:c0:93:f0:b9:b4:38:69:7a:57:64:
87:56:47:3c:ba:02:57:4e:e2:50:70:aa:b8:e4:7b:bd:7e:5a:
73:51:12:b1:30:9b:84:01:a7:df:16:6c:4b:64:ad:d4:b5:49:
71:c6:ac:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:12 2026 by rpki-client