Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
File: XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft (raw, json)
Hash identifier: +qPRb5fzUZaEF6Iw8ereKZ5Ig55cNSuoomdDUT/vqpY=
Subject key identifier: F7:73:96:2B:25:B6:F0:F8:C8:E9:2F:71:9B:2D:46:53:64:F4:0F:14
Authority key identifier: 5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE
Certificate issuer: /CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
Certificate serial: 019CE2C6FAFE47A73127EF9122237A83F534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
Manifest number: 1024
Signing time: Thu 12 Mar 2026 16:00:17 +0000
Manifest this update: Thu 12 Mar 2026 16:00:17 +0000
Manifest next update: Fri 13 Mar 2026 16:00:17 +0000
Files and hashes: 1: XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl (hash: NCSdCUCwySH02txmCEuVoYLeDA6oM5SVGr/Zs9B+GYU=)
2: jr0yuNLqeK_xhbuJCsSNuRbhB6M.roa (hash: iEdWiLEjiAZO/NJAgyr1vdLHg3AlGR9Y7mg3YwAaB/Q=)
3: txhV4jAB0u0krXb4kFMl_-o4obY.roa (hash: s+N5nLT8dkenkTXD8VPGodvyzkSe6kSpR2hC6MCplu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:c6:fa:fe:47:a7:31:27:ef:91:22:23:7a:83:f5:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
Validity
Not Before: Mar 12 16:00:17 2026 GMT
Not After : Mar 13 16:00:17 2026 GMT
Subject: CN=f773962b25b6f0f8c8e92f719b2d465364f40f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:b4:33:43:eb:23:ea:32:8b:56:42:98:22:5d:
66:ae:8d:63:33:1b:32:02:57:b9:84:23:84:8a:81:
b1:88:e7:e2:98:74:4c:ba:ed:74:28:85:9b:47:b6:
c5:b3:09:65:4c:ae:9d:46:ad:7d:2c:ff:f6:79:59:
bb:7a:06:8d:48:63:80:d3:6f:c5:a4:81:b6:e9:c3:
59:f3:dc:e1:99:be:84:e0:1b:99:a8:de:6a:aa:25:
91:a4:1d:91:19:02:98:ba:4c:4a:37:2b:4f:79:11:
9a:a3:cb:83:d5:13:23:8f:b6:05:1f:9f:9c:f7:d1:
44:e9:a4:91:25:c3:fb:20:48:b4:18:40:5b:69:cf:
b7:fb:91:5f:77:d9:96:da:fc:61:44:e7:5c:0d:16:
7d:bd:3f:49:7e:1a:16:62:8a:ff:0f:c3:49:ea:c7:
ae:a9:dd:9d:72:3e:1d:99:be:49:e9:94:0a:1c:5d:
d7:32:7f:6a:6f:55:88:61:c7:eb:3c:ea:1f:fa:35:
02:90:6b:87:49:3c:99:37:f7:f5:1a:cd:c0:c6:f3:
f4:6a:99:18:d6:a3:d4:6f:42:39:d9:ad:00:f6:fb:
0e:43:f9:e4:19:26:ad:3e:61:ba:f3:db:ee:c6:b0:
0c:b1:0f:c5:fb:fb:8e:8d:82:ac:e1:e7:7d:04:e4:
d6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:73:96:2B:25:B6:F0:F8:C8:E9:2F:71:9B:2D:46:53:64:F4:0F:14
X509v3 Authority Key Identifier:
keyid:5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:03:ff:b3:c8:70:f4:be:ef:97:b1:d8:dd:fa:2a:11:8b:2f:
3a:1c:4e:e1:48:9e:b8:f5:9f:1a:49:98:75:1f:76:a8:81:43:
53:12:db:c0:e5:6d:0f:bf:34:d8:2d:69:07:08:35:24:c9:3c:
da:32:17:c2:fc:3d:53:e5:c1:d7:09:b8:3e:e3:8c:9a:21:20:
7d:ef:ef:da:61:94:21:9e:17:7b:bb:62:30:3a:9a:76:77:d2:
f5:7b:c4:1f:bd:1d:91:04:6b:64:c9:bf:9b:63:18:a9:26:e4:
0c:41:46:e3:57:1c:f6:27:a2:4e:ff:a6:77:f0:f9:f7:11:b4:
f2:5e:33:30:cb:90:5b:63:89:f9:44:ed:5f:72:11:3d:14:a0:
6e:8e:d2:1d:c0:e5:ca:27:75:9f:2e:f9:c7:bc:11:e8:91:42:
9c:90:01:65:26:e9:45:a9:8a:86:90:19:a1:bb:88:23:27:1a:
10:19:b6:3a:ca:2c:40:6d:f6:83:35:63:44:ae:4a:17:14:d4:
2f:89:10:c1:42:5e:4d:5a:93:44:c6:a9:99:d7:0c:7a:66:f5:
3e:85:c5:e1:c1:c2:a2:c9:8a:ae:87:1a:ff:65:bd:70:7d:27:
a5:fc:45:ca:03:64:c5:5c:5d:54:7c:35:a4:e6:db:ff:02:6c:
ad:07:3c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 01:30:20 2026 by rpki-client