Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
File: XTJb79i36F40cQQgbYwKuKbg-04.mft (raw, json)
Hash identifier: 4MOy38/8AO3wpMjGLL8jfV0vkCX2bS2GG6IlUMv+vQg=
Subject key identifier: 96:8A:27:04:3C:7F:6E:ED:3C:3C:CC:D4:E1:3C:E8:44:1D:FE:A0:C1
Authority key identifier: 5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
Certificate issuer: /CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Certificate serial: 019CE52347BC3352797A226DE37B4A5220BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
Manifest number: 163E
Signing time: Fri 13 Mar 2026 03:00:20 +0000
Manifest this update: Fri 13 Mar 2026 03:00:20 +0000
Manifest next update: Sat 14 Mar 2026 03:00:20 +0000
Files and hashes: 1: PzMpMCVPdUDUUH8GTuka9keIPNQ.roa (hash: IKEP0LVD3JdV2nQIZoc3FzX3XZlJgMd0mFQnJDaVjxI=)
2: XTJb79i36F40cQQgbYwKuKbg-04.crl (hash: mrEngGD/lcxB+FqLFBLsEFkcPpBSXNaVvSlSkJDiu4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:23:47:bc:33:52:79:7a:22:6d:e3:7b:4a:52:20:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Validity
Not Before: Mar 13 03:00:20 2026 GMT
Not After : Mar 14 03:00:20 2026 GMT
Subject: CN=968a27043c7f6eed3c3cccd4e13ce8441dfea0c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:44:88:56:19:08:e2:62:8b:81:f5:83:72:0c:
52:4b:75:53:23:cb:5e:0f:96:3b:ac:48:4c:61:62:
d2:ad:1b:e6:b2:57:de:32:84:16:92:16:82:95:97:
0c:a0:5f:1d:a5:88:2c:5b:2e:22:a3:5e:90:0a:19:
8a:ab:eb:e7:1d:44:78:c4:4b:20:41:3f:9a:f4:61:
21:3e:2a:6a:03:9f:25:36:54:8f:55:c3:58:c7:33:
6d:01:a3:cf:9b:51:89:d8:43:75:17:9d:63:6c:e6:
2b:d4:17:77:49:fd:bc:f3:eb:8a:f4:4b:89:b5:63:
ff:90:8e:be:54:6e:5c:2b:a5:e2:0a:0a:e0:0c:83:
4b:83:2d:65:f5:91:35:e0:71:9a:30:ad:17:ee:44:
27:9f:02:fe:77:85:33:a9:27:ba:7e:b3:c6:3e:88:
30:cc:29:b6:38:1c:de:4e:f9:93:9d:95:ce:48:d0:
05:8c:ea:e2:ca:65:ee:5b:4c:49:1e:1e:82:38:1a:
da:03:a5:b4:0f:9c:35:4a:2f:90:91:b9:76:01:db:
fb:8c:50:90:9b:2c:ad:1c:a2:54:c3:66:6c:48:48:
f9:18:a9:3a:b8:c5:9f:ac:72:2f:3b:f4:6a:ab:ec:
d6:73:c1:a0:a0:c5:99:de:9a:b4:79:c4:e6:62:43:
20:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8A:27:04:3C:7F:6E:ED:3C:3C:CC:D4:E1:3C:E8:44:1D:FE:A0:C1
X509v3 Authority Key Identifier:
keyid:5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e6:cd:32:43:a5:9c:b4:12:00:1e:f8:14:8f:10:cd:47:c2:
68:db:e5:20:07:29:58:30:1b:0b:3e:f7:b6:35:4a:14:83:3b:
8e:10:6b:54:47:e9:26:e5:60:02:f6:53:c8:e8:c3:04:2a:e2:
03:61:fa:ca:23:8f:6d:69:8b:c8:2e:e9:10:ec:ea:78:f3:b7:
20:05:b8:6b:7e:1a:dd:d5:fd:13:06:88:df:54:68:9a:9d:0f:
fb:57:26:a6:53:7c:4b:f1:05:d6:60:87:0d:e1:d9:5a:1c:6a:
b4:cf:9a:12:72:ad:88:dd:fa:bf:c0:00:65:c9:3b:4c:18:eb:
f4:70:aa:0b:76:28:92:d3:c7:70:1d:c0:9a:13:5b:77:03:09:
40:15:a4:bd:e5:4b:a8:be:4a:5a:55:c9:b5:78:8e:a0:be:64:
36:0f:f1:f4:c7:07:2f:e3:b5:89:a2:e0:63:6f:b5:cc:3b:4d:
fa:fd:40:4f:49:d4:01:9a:1e:35:9f:ad:47:83:b1:33:ea:1d:
70:c0:45:ae:75:31:1e:12:23:2b:67:e0:77:3c:1e:ec:8e:35:
df:0a:3c:ec:5f:c2:9d:d9:49:f4:6e:67:0e:39:00:57:a2:d6:
80:d8:25:cc:61:b2:df:6b:34:03:4c:c4:ec:70:68:76:bf:ac:
f8:2f:5e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:40:14 2026 by rpki-client