Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
File: XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft (raw, json)
Hash identifier: keClr0ljM3b3wLQhZ2OmwiJjXEeVJFk4/vVOVClCB0A=
Subject key identifier: 59:BC:02:74:86:0B:AA:D7:8A:32:25:E3:B0:9F:10:5A:1A:BA:E9:8F
Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
Certificate issuer: /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Certificate serial: 019D371B8B98864C885CC30C5EBCB62CF9FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
Manifest number: 0C25
Signing time: Sun 29 Mar 2026 01:00:45 +0000
Manifest this update: Sun 29 Mar 2026 01:00:45 +0000
Manifest next update: Mon 30 Mar 2026 01:00:45 +0000
Files and hashes: 1: EmJaWy9ErTq18djeUNfT6TYwXlA.roa (hash: 4n7tztgrwrUxD6WI3OMeFvCbZPJYYWR7ZCZusKoAv2Y=)
2: I-K9nqaL8isdaQPATdz15jV472A.roa (hash: IzWVmalHZuVa9srOGb7K8LfnsGA4gkEh+RLBEqMh0oM=)
3: RcwVn60BAjXaSKd54kN8HvE9mEI.roa (hash: HMzOnWY8MpFn7ebVHAu3c09I2xVaAKGb1gijWHIVX6I=)
4: VMEOZBTbdat5Ej2FDGSSyvWxON4.roa (hash: il5PH5NsJiNfZtmLceTZARbKmqNBVyPmTfnq15PGTB8=)
5: XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl (hash: FQnZi+bFftFolo2BskO+FY/++txZAZLb1AU071qVGFU=)
6: lIxTSYsNmmcqNIHLrqXgnkuovB4.roa (hash: KyCy7f0RC+Gah0kPcXWSGeJFDqftrveXwrbOBQUq7gE=)
7: n6hUs8ScD2JiUwNfl89-e_tCc6w.roa (hash: /7fv2sWCDJbqb4l7iyEbmK73ArodpdBZ+jyH4nyo2WE=)
8: roenOOlAGA0_OFjwrFwDRIQ0Y_Y.roa (hash: HW4LBYiaQzfwjk4eYDYDeite6KGRHXlfiOHLKtkmNeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:8b:98:86:4c:88:5c:c3:0c:5e:bc:b6:2c:f9:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Validity
Not Before: Mar 29 01:00:45 2026 GMT
Not After : Mar 30 01:00:45 2026 GMT
Subject: CN=59bc0274860baad78a3225e3b09f105a1abae98f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b9:52:44:36:bf:fe:9a:ab:dc:fb:92:33:ea:
0d:96:7d:eb:b0:b5:9f:3b:24:74:47:9f:ab:56:4d:
a9:67:c2:21:56:b9:56:f3:06:87:38:dd:e5:bd:a4:
ba:07:32:e4:f2:1e:79:43:e3:e1:1c:2f:47:9e:2c:
a4:16:f9:61:1d:8e:45:f4:38:02:cc:6f:7d:49:20:
4a:32:ac:4b:06:ea:c7:53:d6:2d:93:e1:63:98:1e:
98:30:64:bb:e2:3b:8d:16:a8:78:d2:32:24:ec:6d:
ad:2f:f5:ca:bc:d7:20:93:bd:ee:7a:8c:bb:5d:4c:
39:c2:5d:35:65:c3:9d:6d:b2:e3:e3:85:9f:62:4c:
72:79:48:ca:cf:24:1f:c6:ed:49:e1:16:13:1e:cd:
27:68:26:c6:12:d3:49:af:f0:19:51:46:b5:e0:70:
65:35:77:0b:50:91:aa:52:de:c8:0f:69:b7:a5:8d:
92:30:8b:43:a8:54:a7:b7:40:95:4e:a4:ea:33:dd:
1d:aa:d1:92:05:d5:bb:b0:ed:b4:1b:42:34:d6:94:
55:49:c1:0f:07:7a:80:f1:2c:d1:81:77:c8:91:1a:
3a:fb:d6:fd:1d:19:8c:1c:82:8b:73:e3:7d:1b:1f:
cc:33:74:95:44:1e:bb:92:f6:e7:d6:37:96:2c:24:
11:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BC:02:74:86:0B:AA:D7:8A:32:25:E3:B0:9F:10:5A:1A:BA:E9:8F
X509v3 Authority Key Identifier:
keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:73:48:51:5d:4a:d7:55:1d:cb:6a:f1:e8:5b:c5:2b:47:12:
c7:c2:25:cb:82:20:f2:72:45:48:ff:c1:63:22:63:db:99:80:
b1:34:88:41:c0:bc:c4:30:91:86:a7:38:2c:b3:89:b4:30:4c:
a8:3a:69:7e:3a:1e:7b:90:5d:a5:c1:1a:f2:9b:35:dd:8d:66:
a5:8c:7d:02:ce:f2:d8:90:39:b2:79:f1:3a:79:51:88:03:88:
09:fb:7a:d7:ec:a0:b9:7c:85:b5:a6:46:64:90:24:c5:2d:1e:
3e:f3:0b:11:97:c8:31:a2:97:66:c0:29:27:9a:61:49:73:26:
db:e1:fb:10:29:56:5b:c6:60:1f:ee:4a:ee:e8:77:8d:9c:30:
c6:ee:ae:2d:fe:ab:e4:e2:3c:39:14:4f:d4:2a:bb:69:1f:3a:
b5:49:3c:5d:f2:fb:48:43:4c:a4:af:27:d8:d8:8a:9e:65:bc:
be:71:6d:33:5e:85:c9:6a:73:cb:17:4e:90:40:e1:14:48:68:
be:54:a2:19:f3:b7:9d:0f:59:0a:1a:a2:92:72:90:94:1e:94:
cd:a8:9c:82:38:77:7b:56:34:dc:09:67:d0:b3:37:36:a9:6e:
87:14:c9:7d:c7:01:33:cf:ea:34:e1:14:3e:1a:22:1b:76:d2:
0c:74:e9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:16 2026 by rpki-client