Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
File: XlFUwaEL4eJaptT4rvpGrTH5uW4.mft (raw, json)
Hash identifier: ojH24LxO1M2czNyIw9BtIHKcgi3mnTa52hipCWKEBow=
Subject key identifier: 57:9F:3A:04:69:3C:EF:E0:4D:F5:A1:21:8C:62:1F:57:5C:0A:36:AD
Authority key identifier: 5E:51:54:C1:A1:0B:E1:E2:5A:A6:D4:F8:AE:FA:46:AD:31:F9:B9:6E
Certificate issuer: /CN=5e5154c1a10be1e25aa6d4f8aefa46ad31f9b96e
Certificate serial: 019C88A9002A2657BF0019A1CD572264A874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlFUwaEL4eJaptT4rvpGrTH5uW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
Manifest number: 05
Signing time: Mon 23 Feb 2026 04:01:42 +0000
Manifest this update: Mon 23 Feb 2026 04:01:42 +0000
Manifest next update: Tue 24 Feb 2026 04:01:42 +0000
Files and hashes: 1: XlFUwaEL4eJaptT4rvpGrTH5uW4.crl (hash: Ju6yed15ZR93W3DZV/6SfD1IqKOoqRJWTPB/E93VLBs=)
2: y9CLGthskm4bnZl6iRpadOOvcw0.asa (hash: 4oKFMMI1txxJcbOTwatF9YPUQxB0wLl2gg3DiiRkr5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlFUwaEL4eJaptT4rvpGrTH5uW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Feb 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:88:a9:00:2a:26:57:bf:00:19:a1:cd:57:22:64:a8:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5154c1a10be1e25aa6d4f8aefa46ad31f9b96e
Validity
Not Before: Feb 23 04:01:42 2026 GMT
Not After : Feb 24 04:01:42 2026 GMT
Subject: CN=579f3a04693cefe04df5a1218c621f575c0a36ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cb:f6:68:c9:20:de:2b:2e:0b:a9:09:44:7d:
64:df:24:21:eb:b5:b9:61:d2:ca:37:9f:ed:de:77:
4d:21:a3:c8:ad:d8:a8:b9:e6:fc:93:d7:43:c5:10:
73:2c:a9:b4:24:43:d1:70:13:b4:39:cb:74:33:4a:
fc:2b:60:06:71:e4:f2:1c:26:1e:5b:b9:1a:61:3f:
21:67:b1:97:d6:8b:9c:50:cd:6e:ae:2e:1c:2c:cd:
25:51:ea:c1:bd:7d:ec:ed:5c:3b:00:a0:86:14:bd:
db:35:4a:7e:d3:99:64:5c:62:36:e5:fe:04:14:c2:
94:d5:16:30:07:aa:a0:d4:4e:c4:68:47:c2:9b:41:
e8:ae:1e:91:ec:1a:11:6c:51:7f:d3:2c:10:79:c7:
28:e9:ab:a3:94:3d:cf:50:2c:8a:41:ca:20:db:8b:
26:9d:ee:4d:6a:ad:f9:fe:ed:ae:2f:26:60:8b:20:
fc:5f:36:2d:65:30:aa:01:06:a7:a9:b7:a5:bd:3f:
08:ad:8a:4f:d5:96:e5:c8:f3:aa:27:2b:77:ec:92:
76:a5:0d:5a:99:40:7a:07:d8:0a:77:45:36:95:e9:
33:ed:84:dd:c8:f5:6a:05:29:7a:25:e6:b6:b0:a5:
89:5e:1e:bf:50:6f:58:5e:90:60:11:32:c9:f9:5c:
07:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9F:3A:04:69:3C:EF:E0:4D:F5:A1:21:8C:62:1F:57:5C:0A:36:AD
X509v3 Authority Key Identifier:
keyid:5E:51:54:C1:A1:0B:E1:E2:5A:A6:D4:F8:AE:FA:46:AD:31:F9:B9:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlFUwaEL4eJaptT4rvpGrTH5uW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:20:64:08:93:a5:91:b8:d6:4d:76:8b:bf:b4:af:78:23:96:
3e:68:ff:23:8d:84:4c:32:de:83:f1:85:15:35:bb:b2:1a:59:
96:07:4e:f8:20:c4:6b:14:80:d0:af:0b:90:92:70:8f:d7:4e:
27:b7:38:85:d1:7c:40:7b:42:eb:c1:7c:04:ec:c3:83:54:1f:
c6:26:3e:e8:07:84:c8:57:45:dc:84:26:8b:65:cc:f4:75:1c:
9f:06:be:b9:ea:23:07:03:1d:5e:dd:82:38:12:9f:2e:3c:06:
b0:d2:ef:27:bc:57:40:36:96:09:2d:0b:60:a8:68:f6:87:8f:
02:21:c0:05:b9:1d:54:3f:5d:82:b7:41:fb:73:63:c0:2f:db:
be:a8:4d:9f:d0:f8:22:2e:a1:39:4e:11:d3:40:f8:b7:c9:39:
63:c2:de:fc:4e:ac:a4:ea:37:dd:70:eb:e6:50:47:81:dc:dc:
50:5d:eb:0c:36:51:d4:ed:27:9d:ab:b6:ad:cd:c3:27:cd:28:
e0:ab:70:8e:73:13:b3:84:e4:89:cd:61:52:61:59:7e:c9:e0:
36:39:2b:6d:3b:b8:b2:00:44:f9:68:a1:63:f2:eb:08:0e:80:
a7:da:2e:81:60:1e:1b:f7:60:f4:b4:59:4f:75:ae:a7:67:45:
ab:be:b6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 10:16:03 2026 by rpki-client