Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
File: XxpCcHKzHUR4TDdd-uQieOcfqDY.mft (raw, json)
Hash identifier: sSujv+bCJ5rxXqeGbeDx1wifw2tTgLq6VGAkXBRCiag=
Subject key identifier: 42:33:79:3E:B9:71:BC:D4:4A:8F:0B:CF:BA:17:11:19:1D:90:4E:8E
Authority key identifier: 5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36
Certificate issuer: /CN=5f1a427072b31d44784c375dfae42278e71fa836
Certificate serial: 019D3865EA18CDFBC4B93F9282EDC2893BB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
Manifest number: 1207
Signing time: Sun 29 Mar 2026 07:01:36 +0000
Manifest this update: Sun 29 Mar 2026 07:01:36 +0000
Manifest next update: Mon 30 Mar 2026 07:01:36 +0000
Files and hashes: 1: KceNOn_bCzlpYzkGAtSH71ZEniE.roa (hash: ghG8vlvVhPRN/q5ENiLGfWe2Rdz70LqNWlKQluJ96vs=)
2: TnLGleLWbF6Xbip1RIdiru4lzlk.roa (hash: TwgWk/EYTVXEiwe/Z9ywXVNMqxvlSEZDhUOiWjsfVSk=)
3: WMhIoor7Hyuy0wOxrEP3KE2ZBT8.roa (hash: wF/mTYNEBbK6LQa44t3Ab29Zi1DQ3lUoIwP6+TkkiBA=)
4: XxpCcHKzHUR4TDdd-uQieOcfqDY.crl (hash: PBs5qTvVgNceYHHaMeGCwGEfLPeaJh19kbZnl/rL9AI=)
5: gXCR-cLYMaojwmIaH2ky7eyIf5g.roa (hash: I8h0Z2ywnH4bteSn3QmarASyoNf+QDRHyu/nb8W4GNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:ea:18:cd:fb:c4:b9:3f:92:82:ed:c2:89:3b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1a427072b31d44784c375dfae42278e71fa836
Validity
Not Before: Mar 29 07:01:36 2026 GMT
Not After : Mar 30 07:01:36 2026 GMT
Subject: CN=4233793eb971bcd44a8f0bcfba1711191d904e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:51:e5:78:12:bd:23:5c:b1:7e:0e:30:06:32:
1b:f4:26:e3:c7:0e:3e:38:1b:3e:63:df:c6:43:ae:
e8:15:53:34:15:55:a3:41:46:c1:86:f6:2d:e9:65:
40:01:b4:56:e3:87:80:e0:38:25:f6:a6:21:c1:cb:
dc:0e:e4:bf:33:0f:ac:52:cd:e4:30:3f:97:b5:9e:
e1:33:6c:73:91:85:72:9b:f7:28:0d:f0:09:a9:e8:
a3:17:c1:d7:ea:76:3f:33:fd:c4:c4:9b:8d:9a:4d:
d0:f5:42:4e:7d:a3:2e:47:be:aa:58:9d:fa:55:db:
7a:6b:aa:4f:b5:93:16:47:b7:9b:40:de:7f:fb:d7:
89:1e:a3:b3:0c:54:6f:fb:c9:a4:61:99:a0:9a:9e:
09:0a:79:88:bb:65:37:ec:81:db:70:4b:f3:56:c0:
b3:b4:ad:d6:51:30:1b:c4:c3:e6:c3:d4:dc:46:79:
7d:62:2d:f9:af:b3:cc:79:ad:b7:38:09:c7:f6:ac:
49:c3:72:0c:1a:a5:a4:75:7f:e5:3d:8f:0e:eb:f5:
e7:12:fe:2c:20:ef:72:a1:52:dc:7d:68:a4:4b:28:
e9:aa:32:da:58:71:d6:72:b8:da:a0:ef:18:e7:b6:
ba:60:5f:ed:34:f5:72:44:22:04:52:16:b9:7b:d6:
40:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:33:79:3E:B9:71:BC:D4:4A:8F:0B:CF:BA:17:11:19:1D:90:4E:8E
X509v3 Authority Key Identifier:
keyid:5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:03:e7:c1:16:0b:f7:7a:32:3f:64:71:25:5c:45:07:84:c1:
ed:36:96:78:59:c7:b6:61:db:52:a9:09:b8:e4:ac:3f:6a:02:
e4:cc:11:1c:96:36:3c:cf:8a:b8:94:3f:a5:6f:88:4e:43:15:
c0:8b:0f:1a:23:a0:11:d1:ae:54:fa:d3:e8:7d:d0:8a:43:22:
ec:9d:7e:a3:f2:6b:6b:0d:dd:ee:e1:2a:e3:5b:81:9e:34:05:
59:ee:2d:22:79:73:74:e9:dd:bb:48:1c:5e:dc:29:c3:c1:72:
29:a3:14:2d:c6:f7:3c:46:eb:3e:38:44:18:1a:44:09:f7:65:
61:1c:0f:88:01:56:5e:12:3f:f7:09:71:1c:ae:f6:5e:c4:ba:
16:d9:92:d1:6e:6a:a7:6e:b5:17:6e:ef:d7:98:5e:2a:1b:3a:
11:f8:44:bb:d4:72:8b:e3:d0:22:d6:00:c9:bb:d0:72:e8:17:
51:7e:14:51:69:59:49:fa:e3:56:68:90:b8:90:45:75:c4:ff:
0e:e6:23:4d:95:2a:4e:4f:37:b8:a6:a9:1b:14:c7:53:e0:2a:
40:f2:09:f6:18:d7:0d:87:c8:33:5e:8d:b1:e8:a3:bd:89:7e:
ca:57:30:76:7e:67:a2:df:5a:89:09:24:fc:3c:5f:78:c1:bb:
55:b7:01:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:11 2026 by rpki-client