Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
File: XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft (raw, json)
Hash identifier: 3m1H7reTe8tGis4Kyu8rZh4Q/ltaXrngXT/r9hU2+pU=
Subject key identifier: 3C:9A:1B:42:55:6A:C6:43:13:58:B2:9C:0E:7E:2E:18:38:3E:A2:AF
Authority key identifier: 5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
Certificate issuer: /CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Certificate serial: 019D38D3B3B1B3C59D5F1C754478B6FC15E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
Manifest number: 0B5A
Signing time: Sun 29 Mar 2026 09:01:31 +0000
Manifest this update: Sun 29 Mar 2026 09:01:31 +0000
Manifest next update: Mon 30 Mar 2026 09:01:31 +0000
Files and hashes: 1: MXmi4elQgkZloOXKc5KxZJXFILw.roa (hash: 4eGKiA6fp/86boDwfJeXXyGqjfCWRwxGmH0ShZjDAuQ=)
2: XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl (hash: UJlvbUp1/AQGNiCUNlxazui2n0NW0E4iQ33H3u8LEyk=)
3: taZbUsGibT55ZZu6Th_Go_ILjiU.roa (hash: d/WlzB5v4feaToE5n6krRnONbSIkTydQjlb9UBErHJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:b3:b1:b3:c5:9d:5f:1c:75:44:78:b6:fc:15:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Validity
Not Before: Mar 29 09:01:31 2026 GMT
Not After : Mar 30 09:01:31 2026 GMT
Subject: CN=3c9a1b42556ac6431358b29c0e7e2e18383ea2af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0a:02:a5:92:51:1f:0c:54:e6:cd:15:7d:53:
47:18:d5:27:f1:2c:3f:46:f7:7e:08:1c:3f:6d:83:
dc:ae:d8:24:67:dc:52:7a:7c:a4:9f:fc:0a:8b:96:
de:3f:f9:11:17:b2:18:11:49:c2:ee:ef:c0:6f:67:
c2:93:32:81:b5:76:52:7c:47:41:86:2f:ac:51:3d:
b8:f7:fc:91:bd:4a:96:19:47:28:0f:71:8c:e9:59:
47:c2:34:82:a7:3b:e3:36:a1:ab:91:80:71:97:3b:
22:f1:83:aa:25:b4:da:2b:cb:f7:05:ef:b4:df:c4:
2b:49:35:26:b9:4b:83:a6:56:5a:a8:65:3c:c4:a3:
fd:a7:ae:25:48:bb:8c:e7:d4:14:74:56:03:47:92:
b7:cc:d5:bd:e2:c6:ee:54:06:db:d0:f5:05:e4:be:
0b:46:d9:b9:04:c2:12:98:d7:3f:1c:e8:6b:96:12:
da:19:3b:e2:72:e6:39:9b:66:87:3e:aa:0b:0c:33:
b3:94:26:29:94:29:1a:d1:20:d5:f4:bb:51:9a:80:
ae:40:63:69:b6:b5:0a:83:b1:95:bb:8e:37:b4:a7:
52:4d:0c:b7:5e:6c:a7:67:30:6c:17:78:ab:14:c2:
ee:c5:f0:bf:07:81:75:3f:c3:c6:34:c5:e8:da:d9:
9c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9A:1B:42:55:6A:C6:43:13:58:B2:9C:0E:7E:2E:18:38:3E:A2:AF
X509v3 Authority Key Identifier:
keyid:5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:7d:3b:c2:4b:ef:9a:87:be:fe:d6:58:cc:49:a2:3a:ae:11:
27:50:c1:92:c1:ef:bc:3e:bf:a8:6f:55:44:02:51:01:48:2d:
59:dd:9a:4b:34:96:35:13:c5:03:96:ae:1f:82:94:d3:16:b4:
d4:65:e3:ec:1d:1e:42:1a:3e:71:72:29:20:38:48:dd:22:4f:
d0:22:d5:55:62:34:04:a0:99:72:7e:85:a2:14:90:cd:26:30:
30:54:21:5a:a9:98:32:17:8e:f3:f5:19:20:3f:c3:e0:6d:c4:
a0:a1:c8:6a:b8:3b:66:ea:16:7c:4d:b0:38:de:6e:f6:99:3e:
10:21:4e:6f:db:c2:53:a1:76:34:c8:18:ea:ab:a8:4e:95:c0:
d7:26:70:65:3f:e8:50:83:bf:b1:d3:59:4d:62:d5:e2:4e:c7:
81:75:93:4c:8f:54:ed:4c:ac:b4:fe:3f:fb:9f:bf:d3:e7:dc:
53:fb:04:a0:f0:c9:d3:bb:bc:76:d8:35:b9:19:9a:23:8d:5e:
50:03:f6:8c:0f:96:53:f2:33:67:6e:fc:fd:fb:a9:81:1c:d1:
50:94:bf:c9:d4:c4:bc:c3:9b:7d:02:b5:09:b0:2b:0f:49:cc:
7f:52:c1:c5:b3:7d:78:b9:af:e9:52:c1:96:40:b4:44:b5:2b:
32:bc:23:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:52 2026 by rpki-client