Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
File: XS8h5aT74BUgX2zviK-uGc0GphI.mft (raw, json)
Hash identifier: WUOfhPN4g2TK4HdV8gqBWAp0ohuO/1dHHK5qUQzSbpw=
Subject key identifier: AF:66:38:67:91:AF:F3:4A:DB:8B:16:FE:FF:B9:E4:9E:E0:AD:25:48
Authority key identifier: 5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12
Certificate issuer: /CN=5d2f21e5a4fbe015205f6cef88afae19cd06a612
Certificate serial: 019D3909FDCC4BB9BE4C0CF2F77DEC981659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
Manifest number: 1823
Signing time: Sun 29 Mar 2026 10:00:49 +0000
Manifest this update: Sun 29 Mar 2026 10:00:49 +0000
Manifest next update: Mon 30 Mar 2026 10:00:49 +0000
Files and hashes: 1: TsOOfWYO7s3iDHFcR1k7ZOE39Ec.roa (hash: j+9fyMphVuQhWbTHtgX76YqDUNucL2DHLde2/xPrgJg=)
2: XS8h5aT74BUgX2zviK-uGc0GphI.crl (hash: 3KWnTvYKzuo4bqpsRcXJUZpJk/FmhUVeOR002zyZX0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:fd:cc:4b:b9:be:4c:0c:f2:f7:7d:ec:98:16:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d2f21e5a4fbe015205f6cef88afae19cd06a612
Validity
Not Before: Mar 29 10:00:49 2026 GMT
Not After : Mar 30 10:00:49 2026 GMT
Subject: CN=af66386791aff34adb8b16feffb9e49ee0ad2548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:db:b2:a2:5f:bc:30:23:3e:d1:ca:8e:d0:6d:
34:60:c1:21:ad:a3:55:c1:9a:6a:40:67:ff:4d:75:
99:46:35:0e:4b:a4:df:de:c3:89:36:2e:ab:9a:e2:
09:75:e9:e3:39:3a:19:a9:74:bd:c6:80:36:7e:40:
a1:ac:fc:05:e0:16:90:d5:9d:c7:52:00:79:5c:e5:
b9:c7:30:3f:40:e4:78:ed:c1:12:65:31:c5:74:3b:
e1:89:ef:90:18:9f:6a:55:0e:69:a3:78:ea:c8:78:
b0:99:ba:90:d2:0b:5c:1f:74:f4:61:a7:13:31:1e:
ef:4b:27:20:6d:ae:8e:6f:f8:0f:48:61:ec:a2:17:
ad:2f:ef:56:be:22:f8:5a:ae:c2:58:9f:9d:c8:c1:
27:81:06:81:ff:4b:3d:32:38:e0:66:0e:6a:c1:ea:
2c:7d:9e:5a:21:95:f2:9d:c6:12:1c:cb:ec:f9:82:
af:5d:4a:9e:11:3f:d0:ce:db:d1:32:79:95:56:a1:
16:81:e3:e4:20:7e:00:1e:8f:8d:8a:fa:d4:f7:1e:
de:6c:84:04:af:63:e4:49:eb:2a:34:96:ce:60:6d:
b2:ec:59:8d:f2:11:b0:91:14:22:f1:84:09:af:16:
97:aa:f4:c1:65:bb:d3:6a:78:95:7a:0d:3b:4f:a8:
95:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:66:38:67:91:AF:F3:4A:DB:8B:16:FE:FF:B9:E4:9E:E0:AD:25:48
X509v3 Authority Key Identifier:
keyid:5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:10:37:d3:d4:a3:eb:1b:52:17:4e:fa:79:8e:c0:4f:9a:19:
09:3f:0c:32:e3:be:db:66:73:9b:ed:8c:a6:c9:ed:b0:39:eb:
dd:33:cd:e7:f4:e9:0a:b6:17:f7:19:98:12:37:7d:9c:76:17:
22:ef:81:6c:e5:9c:0f:af:e7:ac:7a:30:6c:55:fe:ed:32:4d:
2b:28:31:48:51:8d:bd:24:e9:18:cf:b1:92:ad:0c:49:19:21:
c4:fb:03:4f:5c:12:56:fd:fd:4e:0e:e3:9a:97:b1:c0:78:d2:
3c:ef:5b:76:a9:2b:13:14:52:a7:96:53:5e:3d:1e:d8:66:be:
84:79:d0:7e:10:dc:be:8e:28:06:9a:0b:31:da:fc:65:8b:bc:
0a:41:ae:28:c8:8e:d7:a4:e1:9d:02:5d:b0:57:b2:a9:58:4d:
08:d7:c4:a4:18:b4:51:5f:ac:32:a1:8f:dd:fb:1f:05:76:bc:
fa:5f:da:16:f1:36:85:a4:27:ed:bd:ac:05:fe:b1:4b:94:54:
99:24:b2:4c:51:32:40:09:ec:fa:86:34:1c:3e:89:a5:0f:b9:
cc:20:9b:e6:f4:8a:00:ef:53:ef:91:70:43:95:3f:a1:d1:8a:
a3:9b:5c:5b:9a:70:5c:a9:4d:ba:ca:d9:44:48:8c:14:1c:13:
e5:7e:d9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:51:32 2026 by rpki-client