Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
File: XmFA8XMSeE72KuO-AwwMLMZhpwI.mft (raw, json)
Hash identifier: Vlz/6kiOLI76i1BEcijzROWIpBqsp1MVBK8+EiXCPCI=
Subject key identifier: ED:7C:78:D9:B3:59:8F:6E:5A:A4:EA:8E:3E:5B:A4:82:A7:A3:39:5D
Authority key identifier: 5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02
Certificate issuer: /CN=5e6140f17312784ef62ae3be030c0c2cc661a702
Certificate serial: 019D25BA355E83D5FCB7E81F9F3CDDFCA4AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
Manifest number: 0D6F
Signing time: Wed 25 Mar 2026 16:00:53 +0000
Manifest this update: Wed 25 Mar 2026 16:00:53 +0000
Manifest next update: Thu 26 Mar 2026 16:00:53 +0000
Files and hashes: 1: XmFA8XMSeE72KuO-AwwMLMZhpwI.crl (hash: pdSwxMTb8zstq9dM1B71ffEPEyapkYLvIuzjRmZDepA=)
2: vSKxJft-YrfZTgTcPvrZEBw-s-o.roa (hash: fXlVBWLEGWm5OQD/WI5lmOPHwN/6Yh6slPhBeiX8hgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:35:5e:83:d5:fc:b7:e8:1f:9f:3c:dd:fc:a4:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6140f17312784ef62ae3be030c0c2cc661a702
Validity
Not Before: Mar 25 16:00:53 2026 GMT
Not After : Mar 26 16:00:53 2026 GMT
Subject: CN=ed7c78d9b3598f6e5aa4ea8e3e5ba482a7a3395d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:04:e4:8f:6c:93:f6:4a:4b:6a:61:bd:f9:ea:
af:21:26:c8:cd:eb:56:24:60:0f:f8:b2:2d:35:24:
bb:08:25:4d:9c:ee:d1:5c:17:de:b5:b2:e5:9a:dc:
e3:b8:83:6b:8d:c7:f3:95:65:be:01:29:95:e5:57:
5f:65:d1:c2:3b:4a:9f:90:a4:cf:41:42:74:72:9d:
3b:48:e2:9a:a7:27:62:67:20:0d:65:cf:55:61:f2:
83:12:53:db:6d:7c:15:10:bd:bd:fb:8b:b6:be:8f:
a8:f0:03:df:71:f3:4d:c3:3b:04:39:59:01:94:14:
87:26:e3:13:ce:b2:c0:13:a5:a1:8d:db:b8:0c:bf:
b8:59:83:47:41:41:ba:f3:b4:32:e8:59:b0:78:46:
2a:63:14:1b:e9:23:bc:a6:e9:70:26:81:8a:64:b2:
ef:02:6f:c6:a1:08:15:b7:1a:30:78:a1:a9:91:c6:
ae:1c:38:e3:11:78:e5:aa:1c:6c:6f:2e:ae:8a:92:
04:e1:b1:74:3a:4e:ca:1c:16:90:2f:60:9f:29:0d:
45:18:01:b7:9b:a2:b0:f5:08:4a:1d:e8:5b:88:0c:
8f:af:61:d5:96:90:d9:9b:28:1e:71:2e:e8:55:5d:
bf:6d:e8:a0:90:ff:d5:b0:d2:99:b4:5a:ef:51:d1:
e8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7C:78:D9:B3:59:8F:6E:5A:A4:EA:8E:3E:5B:A4:82:A7:A3:39:5D
X509v3 Authority Key Identifier:
keyid:5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:84:94:fa:5a:53:43:f3:25:7e:2f:b8:38:b6:49:e7:7e:d5:
41:cc:bc:94:d6:79:b3:63:a2:dd:c9:a9:f4:0a:b4:cf:86:8b:
81:6e:7d:f9:81:1b:22:9c:15:34:cc:b0:51:53:8b:0e:2d:e4:
0e:60:3d:cf:0b:81:41:6f:7e:ad:51:0b:0d:33:7b:70:03:1f:
13:90:11:0a:bb:08:71:b7:83:e7:29:7c:3b:1d:e7:73:cd:e5:
33:9b:53:68:78:12:a4:43:de:ed:81:54:16:be:76:ff:7e:74:
2d:92:22:28:f0:c9:fa:a6:99:60:23:2e:d3:4c:ac:a8:a3:2a:
f2:d4:56:61:87:09:b4:89:e6:b9:a7:c9:ae:7a:15:05:85:2e:
bd:b4:c9:c5:01:8e:9d:19:4b:68:7d:20:2c:fc:55:64:4b:f0:
37:8c:b3:a2:eb:fa:35:f2:b5:cd:86:92:40:e8:8b:c0:05:d5:
8b:51:bb:41:2b:69:fc:62:8a:dc:0f:a5:55:f4:bd:2d:03:44:
35:d3:6b:72:bd:28:81:03:0c:96:d1:e6:31:64:f3:e5:fd:92:
9e:11:bc:27:c1:1e:3b:64:58:89:0f:d7:5e:5d:70:17:45:90:
9b:14:ef:51:a2:3a:22:b0:59:8d:97:2f:fd:01:cd:9e:c2:a8:
d1:6f:fd:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:43:37 2026 by rpki-client