Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
File: XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft (raw, json)
Hash identifier: ApNvf5nZvfy9OJRtDEq84gqDeDfsemeEY8AbL9Pn2+g=
Subject key identifier: F9:ED:3E:E8:21:58:01:3F:16:E5:45:1A:3A:E7:F4:45:49:8B:4E:A2
Authority key identifier: 5C:B8:13:E0:9C:99:55:E0:BD:A7:04:1F:83:73:A8:FC:5D:AE:6B:9D
Certificate issuer: /CN=5cb813e09c9955e0bda7041f8373a8fc5dae6b9d
Certificate serial: 019D3B2F8E39CBD23F40A89999B55716AC6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
Manifest number: 0EBC
Signing time: Sun 29 Mar 2026 20:01:05 +0000
Manifest this update: Sun 29 Mar 2026 20:01:05 +0000
Manifest next update: Mon 30 Mar 2026 20:01:05 +0000
Files and hashes: 1: XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl (hash: 0xUdwgHU74IGOpGWIkcBvHHng9YFBU/BBqg+MEO6J9M=)
2: z7DQCTMfSpxYNEqc8NdY7ztXAQY.roa (hash: 0f3C1JOESj8A6E71R4wmJYEbq8aExFFVXotwYdP1hio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3b:2f:8e:39:cb:d2:3f:40:a8:99:99:b5:57:16:ac:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb813e09c9955e0bda7041f8373a8fc5dae6b9d
Validity
Not Before: Mar 29 20:01:05 2026 GMT
Not After : Mar 30 20:01:05 2026 GMT
Subject: CN=f9ed3ee82158013f16e5451a3ae7f445498b4ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:4a:8f:5e:be:5a:f5:ef:68:26:09:75:dd:8d:
ed:67:9b:fd:de:6e:55:8c:6c:8e:fd:64:b6:51:58:
98:75:fd:39:51:32:2e:b2:fc:c4:fc:7a:f7:f8:23:
13:54:ae:08:74:ac:b2:94:60:a5:5b:cf:cf:e7:32:
49:fe:34:c1:58:8a:73:95:41:d6:56:85:16:e3:a1:
a5:37:92:95:98:8b:b1:c8:ab:12:c0:37:ec:3f:ef:
f9:25:d4:17:46:0b:ac:5f:4a:e1:e9:62:c7:7d:c9:
1b:a6:7d:0e:ad:95:f2:bf:e1:31:b3:56:d1:87:e6:
be:03:a8:9f:ee:52:1e:40:ff:86:1e:b0:41:68:94:
f2:49:e8:88:3c:ba:6b:18:25:6b:6d:fe:f3:df:2d:
55:1d:d9:7f:2a:78:f0:44:2b:6c:2a:09:1f:00:b3:
dd:0a:80:3c:68:b5:6e:d6:bb:fd:ce:6b:f4:79:b6:
a7:e2:00:b3:3e:84:f0:60:a1:08:da:ef:40:a6:44:
48:12:45:6e:df:f8:37:80:69:33:a8:34:f5:46:35:
64:0c:64:56:52:7e:ce:76:de:dd:c8:61:af:9b:e3:
40:b0:92:33:31:9c:f4:d5:85:1e:2f:4e:a0:f7:c9:
27:82:91:d1:87:25:d3:10:ce:fd:26:eb:0a:4a:84:
28:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:ED:3E:E8:21:58:01:3F:16:E5:45:1A:3A:E7:F4:45:49:8B:4E:A2
X509v3 Authority Key Identifier:
keyid:5C:B8:13:E0:9C:99:55:E0:BD:A7:04:1F:83:73:A8:FC:5D:AE:6B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:01:a4:16:c5:ed:2e:3c:5d:c0:78:df:c0:4e:2c:23:a9:65:
2d:31:fe:31:50:16:fe:fb:38:00:87:d6:31:a8:3b:c2:ad:de:
21:e6:bd:02:9e:6a:11:ac:44:a6:e9:e9:39:c3:41:7e:fa:4f:
fb:2e:51:af:26:7b:a0:77:f3:72:f4:77:fb:ed:f0:77:aa:e6:
bb:cb:bb:cc:63:85:59:01:b5:1e:d6:5c:76:e8:a6:eb:6b:f8:
6b:1c:ec:8a:86:cb:dd:d2:28:70:a0:0f:94:05:4c:ac:0a:23:
28:f8:f1:55:45:66:9e:03:56:70:8c:b3:5b:c8:06:1f:f1:4d:
e6:17:85:49:f4:5b:ad:68:3c:f5:6f:2d:81:76:bd:f3:89:db:
d1:00:3a:de:74:57:4e:31:2e:45:d3:18:4b:4f:74:f7:39:ac:
da:9d:b8:e4:0c:44:3c:f6:99:95:72:3f:c5:20:66:ce:9d:ba:
f9:54:df:d3:da:99:a8:56:00:41:bd:17:e0:9e:47:af:3e:3b:
9b:a9:4c:64:8f:d3:a3:e4:5b:ae:90:b5:0e:18:46:53:65:97:
da:71:ea:5f:58:14:3b:1c:08:3e:6e:b9:35:9b:2c:38:1e:33:
6e:ed:73:0a:fa:3c:83:24:8a:c8:06:69:e4:1d:25:9d:e9:b9:
f6:87:5a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 01:30:30 2026 by rpki-client