Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft
File: XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft (raw, json)
Hash identifier: n0WdPXqPnCgSFTY1f/9ITlWturO/Z907zT0xTR/KG2w=
Subject key identifier: C1:F7:DE:6E:B5:D1:B4:69:D9:9D:39:E5:BB:13:0D:A0:CA:57:C6:98
Authority key identifier: 5D:63:73:F5:DF:99:D8:21:DC:B5:7C:7F:B9:20:2F:B4:68:6E:5D:61
Certificate issuer: /CN=5d6373f5df99d821dcb57c7fb9202fb4686e5d61
Certificate serial: 019D37C0F3411D52734F8A5BBE0AACC72771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWNz9d-Z2CHctXx_uSAvtGhuXWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft
Manifest number: 132A
Signing time: Sun 29 Mar 2026 04:01:25 +0000
Manifest this update: Sun 29 Mar 2026 04:01:25 +0000
Manifest next update: Mon 30 Mar 2026 04:01:25 +0000
Files and hashes: 1: B5MgyjNRD03FWnj_3gSqIo7RbDQ.roa (hash: 2XUCmJsZX49x+0/QDCsg4NgkqWj0gTX+eRsw6155dKM=)
2: XWNz9d-Z2CHctXx_uSAvtGhuXWE.crl (hash: e4TlT8eSSfhqdDQnLzWuHegPZVUBE+ZM/E2KKSeLJDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWNz9d-Z2CHctXx_uSAvtGhuXWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:f3:41:1d:52:73:4f:8a:5b:be:0a:ac:c7:27:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6373f5df99d821dcb57c7fb9202fb4686e5d61
Validity
Not Before: Mar 29 04:01:25 2026 GMT
Not After : Mar 30 04:01:25 2026 GMT
Subject: CN=c1f7de6eb5d1b469d99d39e5bb130da0ca57c698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6e:19:fc:01:2e:39:0c:d6:ae:23:98:46:10:
fc:8d:74:dd:00:06:73:d8:62:44:cd:a6:0a:af:f7:
1a:63:d1:4f:ca:fe:7c:4d:ce:a7:4e:d4:b1:58:6b:
e6:d8:f6:f8:d7:44:2a:80:db:b2:cc:0f:ba:4f:12:
e3:51:d4:eb:af:df:02:59:e5:f6:c4:6e:32:bc:15:
63:7d:dc:ac:12:9b:21:8d:cf:06:b6:d2:03:c6:ec:
73:d1:bb:01:16:44:77:31:51:9b:c8:e5:84:c3:85:
a3:cd:5b:7d:89:4d:00:e3:e5:77:7a:fd:d1:b3:21:
00:b2:21:54:31:3f:d8:da:24:5d:31:47:9c:22:5a:
ff:32:a3:43:0e:df:35:66:e7:4e:5f:f3:9c:0d:97:
86:71:7f:e4:ab:22:cb:02:8e:d8:50:35:26:90:00:
f4:5c:f9:3f:4c:aa:88:95:83:50:4f:d0:cd:80:84:
be:06:39:a4:8f:68:f6:aa:0a:cd:f1:6f:4f:02:91:
64:09:bb:73:00:53:7d:24:54:4a:77:68:99:5f:8b:
ee:dc:e4:fe:b7:90:b7:7e:fe:fb:c7:55:cd:39:b0:
ab:3f:77:56:20:a1:1d:b3:86:7b:b5:df:53:b9:1c:
02:06:33:ed:d0:d5:f7:5e:03:b7:a6:29:c0:1c:c0:
de:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F7:DE:6E:B5:D1:B4:69:D9:9D:39:E5:BB:13:0D:A0:CA:57:C6:98
X509v3 Authority Key Identifier:
keyid:5D:63:73:F5:DF:99:D8:21:DC:B5:7C:7F:B9:20:2F:B4:68:6E:5D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWNz9d-Z2CHctXx_uSAvtGhuXWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:9f:1e:a0:32:02:dc:18:00:d1:6c:df:5a:6f:45:0f:3a:76:
24:aa:e0:75:62:96:49:ec:52:c1:ba:68:1b:75:a2:3a:95:0e:
a3:f3:1d:60:2c:ec:d7:5b:67:50:06:11:86:55:ac:64:2a:a1:
9d:77:2a:51:95:ad:19:d7:ba:09:05:9f:43:de:82:62:48:8b:
6f:bd:05:e4:3a:af:33:cb:0d:9f:7f:f1:33:1f:6a:66:0c:da:
73:b2:aa:da:00:a9:93:b6:b3:96:7e:c4:0d:e3:55:c4:e0:13:
35:28:cd:2e:a5:33:f0:b6:9f:a9:9c:a9:cf:bf:b2:15:1a:98:
09:32:cd:6a:33:68:2b:53:05:70:7d:af:cc:8f:59:b8:b9:31:
d6:50:5c:d6:8a:82:ff:70:95:5b:f2:37:09:78:ab:b9:07:71:
06:7e:4c:2e:f0:89:90:3e:75:aa:6a:78:b5:55:84:11:bf:8e:
c4:c4:f4:72:a4:71:cc:e7:07:f3:fc:33:a9:ce:69:15:de:b3:
60:d7:c1:89:4f:dc:73:aa:15:76:96:5e:4f:c2:dc:83:66:2d:
7d:7a:24:cb:32:4f:b4:d2:b2:41:d7:97:d5:36:c4:63:fd:1c:
83:65:50:71:dd:95:0e:4b:7f:af:65:2c:ff:a5:78:6b:f0:88:
ae:23:47:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:45 2026 by rpki-client