Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
File: XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft (raw, json)
Hash identifier: Gpn6BSO0EKP5tp/AP6EE3YduGILJbEsNo91Ih426XHs=
Subject key identifier: 43:5E:8B:DA:9D:84:69:90:67:F6:17:07:BC:CF:6D:58:76:8F:3E:62
Authority key identifier: 5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
Certificate issuer: /CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Certificate serial: 019CC6E2C99A9717D2B66DD0C5BA25BCE75C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
Manifest number: 078A
Signing time: Sat 07 Mar 2026 06:01:17 +0000
Manifest this update: Sat 07 Mar 2026 06:01:17 +0000
Manifest next update: Sun 08 Mar 2026 06:01:17 +0000
Files and hashes: 1: O9do_tpuJS2IYg238tFeLgPwuLo.roa (hash: inPkQd2M/OOC4cE+kZAGV36qocuoxkiJ2VIdZgql1s8=)
2: OQMR_FkQfBmNWWsOByMgzVQchtc.roa (hash: E+VXuwQXys0IVzb1O36G+Zcgxr0/sBSG/vjRsxKVhO0=)
3: XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl (hash: 7IFa6WySzNITh1sTSur+A3w72/7wT2KG9FoqgACbPLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c6:e2:c9:9a:97:17:d2:b6:6d:d0:c5:ba:25:bc:e7:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Validity
Not Before: Mar 7 06:01:17 2026 GMT
Not After : Mar 8 06:01:17 2026 GMT
Subject: CN=435e8bda9d84699067f61707bccf6d58768f3e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7c:08:f6:d1:e6:cf:69:82:11:db:b2:54:a2:
b8:6b:f4:57:62:c7:98:3b:6e:b5:43:7f:b4:1c:7f:
fe:44:60:3b:53:03:d1:fb:42:93:56:35:3e:83:55:
b8:e3:e9:a3:05:3c:2a:6b:09:dd:9f:55:86:2a:a0:
4a:52:e0:21:a1:6f:47:28:73:3d:2d:bc:10:22:1a:
cb:27:f1:a6:1e:73:f4:38:d1:3e:c7:75:f5:a9:85:
67:b0:bf:0f:9c:7a:cc:33:94:76:05:b9:bd:33:d0:
bb:1d:40:5d:8c:96:b4:4f:07:27:69:65:18:d9:eb:
56:fe:2a:2e:54:00:1c:d8:94:eb:df:e0:a3:cf:3c:
3a:72:6a:a3:06:c4:c3:a5:5f:e3:c1:0d:8a:5e:3c:
bf:c3:97:a1:ff:c0:fa:73:3f:39:51:ed:e7:b5:71:
55:1e:6a:87:f6:34:81:13:4b:ea:86:25:25:51:44:
5f:72:bd:55:07:9d:bd:01:aa:76:8b:9e:8c:af:08:
8f:0a:f6:74:6e:ad:5c:0c:1a:05:42:5c:5b:05:4e:
5c:6c:f9:da:8e:cd:cb:bc:4c:56:43:bc:8c:51:be:
7f:9b:6c:4e:23:74:23:7f:5a:84:70:fc:5d:4d:ba:
c8:40:ca:2a:7a:62:09:a4:2a:11:a0:5a:13:36:f2:
a2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5E:8B:DA:9D:84:69:90:67:F6:17:07:BC:CF:6D:58:76:8F:3E:62
X509v3 Authority Key Identifier:
keyid:5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:df:4d:3c:bc:16:3c:bc:b7:f3:ac:c6:2e:a2:cc:30:59:c5:
ed:30:5b:a5:3e:54:06:f0:7b:ce:06:e3:54:b2:88:50:c6:b5:
0e:fe:30:06:4f:a8:2d:cb:30:b5:c0:29:93:46:73:17:fc:35:
e0:f7:d9:94:06:71:d9:b7:99:71:ab:e8:9b:8b:6b:f6:cc:c6:
a0:77:fa:89:a9:4c:07:e3:56:ca:0d:24:ee:82:02:2d:73:62:
29:55:7d:d4:f8:61:c5:cf:27:3e:16:72:55:4a:97:1a:bb:7c:
b1:f7:97:4f:c4:45:53:b3:60:6c:b7:0b:55:c0:ae:bb:fb:f8:
9b:b9:c5:b9:13:27:92:d4:9e:f5:0a:a5:df:c6:b3:a4:08:9e:
15:97:7c:c0:f9:ca:cb:01:8a:8a:e3:6a:70:b1:b7:dc:b9:5b:
93:d9:eb:ce:42:08:d2:67:57:ae:3f:36:53:80:e7:54:e5:9c:
ca:5e:40:f3:3b:82:f6:47:62:77:04:74:91:24:a9:d0:5b:99:
36:94:82:b5:13:99:18:3f:37:f3:c1:a0:fe:32:d5:ca:75:8b:
f6:d1:37:47:5c:fa:7b:97:23:ff:a3:65:ae:a9:18:a5:6c:f9:
2a:d3:45:81:cf:f0:f4:d8:75:37:21:2f:7b:45:11:09:ef:8a:
f5:9d:5e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 12:44:13 2026 by rpki-client