Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft
File: XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft (raw, json)
Hash identifier: kGlNL7KbjR8N3ClgdiS+DEyqEPMGI9kZLHM2hCPi+bc=
Subject key identifier: 2B:C6:A8:82:26:AB:C4:48:1F:6B:A4:DC:01:A8:39:5D:18:30:87:09
Authority key identifier: 5C:02:F9:81:BE:E7:95:21:A3:04:B6:8F:66:7F:EA:ED:81:EA:3F:F6
Certificate issuer: /CN=5c02f981bee79521a304b68f667feaed81ea3ff6
Certificate serial: 019D39E5A10BD59AA67E8EC1F92B6AD1104B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft
Manifest number: 12E9
Signing time: Sun 29 Mar 2026 14:00:43 +0000
Manifest this update: Sun 29 Mar 2026 14:00:43 +0000
Manifest next update: Mon 30 Mar 2026 14:00:43 +0000
Files and hashes: 1: PD1M6PtARbBp-MFE-_EKsQHkiUA.roa (hash: skJJkpTERxyYoCR/2Ty9oHhbHrSmVPhxCwzmUEM9AKQ=)
2: XAL5gb7nlSGjBLaPZn_q7YHqP_Y.crl (hash: +/ujDI8xpqHxz516lfs9yvQCqHT/iXoDm0/Y9ZnQ9+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:a1:0b:d5:9a:a6:7e:8e:c1:f9:2b:6a:d1:10:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c02f981bee79521a304b68f667feaed81ea3ff6
Validity
Not Before: Mar 29 14:00:43 2026 GMT
Not After : Mar 30 14:00:43 2026 GMT
Subject: CN=2bc6a88226abc4481f6ba4dc01a8395d18308709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3a:96:0b:40:80:c7:1a:24:e6:2d:08:50:aa:
67:72:df:b6:cb:2f:e5:e2:86:88:dc:92:d6:a2:43:
0b:5c:92:6e:91:66:96:76:3e:21:65:57:c3:a7:0a:
df:01:a3:aa:71:dc:c3:99:14:0d:1a:bf:c7:fa:dc:
b3:cf:2e:b6:b2:f3:68:3d:c6:95:21:5d:fa:8e:d3:
a9:64:e9:45:5f:cc:39:4f:db:f7:6d:4f:93:ee:21:
65:97:27:6a:69:15:22:b4:77:a9:83:a1:26:54:34:
c8:24:65:2c:a9:3f:c9:2e:bb:16:36:e4:67:fc:cf:
ca:e6:74:6c:76:71:f0:14:45:3f:b0:9f:62:3f:0f:
dd:91:d7:26:88:84:2f:fe:0d:84:da:63:93:8c:7e:
9f:2b:af:9f:da:5a:6e:5c:d2:91:40:bb:2e:cf:80:
c0:c9:8f:24:10:07:2f:0b:3d:28:fb:13:e3:89:84:
87:07:0d:dd:2f:90:0b:3b:2a:8e:77:6d:93:9d:42:
50:e6:c9:c0:21:50:ff:b5:39:09:11:b0:1d:99:e8:
16:28:38:53:09:54:26:ef:9b:af:c8:f2:26:43:2b:
4b:27:67:7c:27:9a:10:73:0f:e2:1b:c5:0e:36:57:
6c:4b:7c:e7:fa:84:43:6f:49:17:0f:56:ce:ca:a0:
d1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C6:A8:82:26:AB:C4:48:1F:6B:A4:DC:01:A8:39:5D:18:30:87:09
X509v3 Authority Key Identifier:
keyid:5C:02:F9:81:BE:E7:95:21:A3:04:B6:8F:66:7F:EA:ED:81:EA:3F:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ef:e4:df:02:9c:80:71:cf:08:d1:ae:5e:9a:f4:43:df:d7:
e6:12:d3:df:b5:16:69:fb:a2:c9:19:b2:43:a4:6c:d9:ed:d5:
d9:c6:a4:59:20:36:15:09:ba:c5:b9:0c:e2:67:52:c0:8e:87:
76:97:e9:a0:49:34:a3:25:ca:96:11:63:50:18:88:bb:4e:d7:
f2:39:68:9b:f7:e8:52:d9:18:ab:a1:88:90:80:dc:02:6b:7f:
d1:cd:b1:2d:ae:13:64:b4:54:ca:d6:45:9f:8c:80:47:65:db:
b2:fa:b0:08:61:ae:f3:ef:b9:20:05:bd:d0:93:19:44:5c:92:
dc:49:6b:ac:cd:52:cb:2c:db:21:74:a5:3a:c7:6d:2f:66:07:
b3:76:0c:ce:4b:40:91:20:ff:5c:cb:3f:73:d7:43:96:cc:96:
50:21:ee:b2:0f:b5:ea:61:8a:9d:b7:4f:d9:9d:1a:81:77:7a:
74:d8:90:de:79:9f:43:33:2a:cb:33:2c:6d:08:b2:5f:22:6e:
20:05:d6:c5:6b:43:cd:dc:03:a9:4f:76:83:6d:e5:7b:cc:d2:
77:df:d6:45:ad:a1:94:14:e9:d1:ac:c8:1d:96:4e:fc:a5:82:
cc:84:87:3e:37:5a:f9:89:86:6d:06:23:4a:fa:f7:78:90:63:
20:1b:e0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:59 2026 by rpki-client