Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
File: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft (raw, json)
Hash identifier: VlDVjGLkR0QHSJmOFpaFTquwOlaG6hzcVtKiDhlwo0w=
Subject key identifier: 4C:62:D4:14:A6:4D:04:C6:96:3E:D5:01:3D:BA:3E:64:A1:76:60:2B
Authority key identifier: 5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
Certificate issuer: /CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Certificate serial: 019CF3F24E8B6B65E7812D21C8BDEB2F4281
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
Manifest number: 0C54
Signing time: Mon 16 Mar 2026 00:01:09 +0000
Manifest this update: Mon 16 Mar 2026 00:01:09 +0000
Manifest next update: Tue 17 Mar 2026 00:01:09 +0000
Files and hashes: 1: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl (hash: UlKFrwUtZbu+Nfpo/JgxVN5M5QLYI5651IShTGJ1bGY=)
2: YNrAk_rW-_hv_7y0q7L07WQbD3k.roa (hash: Q+lutWQbfqBQmTQcTTUR6g2UUXMHO1t1l0Opc14EpV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f3:f2:4e:8b:6b:65:e7:81:2d:21:c8:bd:eb:2f:42:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Validity
Not Before: Mar 16 00:01:09 2026 GMT
Not After : Mar 17 00:01:09 2026 GMT
Subject: CN=4c62d414a64d04c6963ed5013dba3e64a176602b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d1:61:2b:63:13:69:24:0c:90:d9:5a:af:a7:
41:11:4a:91:18:5c:32:73:2a:2c:a9:0b:e9:aa:28:
b5:5e:a3:f7:91:49:38:c7:89:62:a4:d8:5a:4a:a5:
82:d6:4b:be:cd:e3:66:f9:86:52:93:84:2d:dd:79:
73:55:62:18:33:0e:2b:14:80:ec:bd:d5:f2:a4:2a:
5c:da:fb:7b:58:9b:55:9f:a1:cb:f7:22:c3:f6:30:
49:53:7b:1e:7b:73:91:6b:a8:77:f7:68:ff:e9:4e:
2e:37:e3:98:ec:54:47:1d:48:5c:46:ab:f8:3c:45:
d6:00:d6:3c:98:c9:52:a9:7d:19:09:90:4a:50:7a:
e8:14:77:66:20:ef:a5:65:ec:16:9d:4c:ff:c8:66:
3b:11:be:30:6f:32:5f:2a:0d:71:05:60:5c:9b:c5:
fe:45:ac:fc:f5:e1:21:fc:45:ea:e4:38:e7:a5:2f:
0c:69:33:11:6b:66:fb:ec:b1:46:0e:f2:f1:a4:79:
1a:ac:9f:1e:10:e7:3d:0b:ab:be:71:d2:ce:b7:6f:
96:51:e8:e5:a5:4f:5c:5d:7d:0e:3f:1c:bb:9e:40:
da:54:09:24:53:de:56:b6:89:9a:86:15:5f:e9:eb:
5a:f2:5d:7e:a9:68:38:e4:47:0e:b3:e9:c4:92:7f:
23:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:62:D4:14:A6:4D:04:C6:96:3E:D5:01:3D:BA:3E:64:A1:76:60:2B
X509v3 Authority Key Identifier:
keyid:5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:22:12:b9:34:11:bb:52:5d:41:1f:d8:00:84:2c:11:aa:ac:
33:1b:ce:a5:d4:59:a7:b2:35:32:37:9f:53:6c:7c:62:ff:e3:
64:da:f1:f7:00:e3:14:b3:bf:5f:3b:56:37:2b:d1:93:10:9a:
67:be:b4:f4:3d:1f:fa:92:4a:0a:20:7b:47:9c:f7:00:15:fb:
7a:c0:cc:37:92:c9:49:9e:70:a0:72:41:01:c3:05:c9:27:e8:
c2:35:f5:e8:fe:4d:41:f8:d1:f0:25:4a:e9:12:e0:76:b0:0a:
b2:58:b0:4f:06:a9:b1:df:2d:7f:39:d6:a6:2f:7e:f7:15:00:
e2:35:cb:89:e6:42:85:43:63:ce:fa:e8:a7:92:4b:da:30:ea:
f6:91:16:86:e8:ed:22:0e:31:23:6b:bd:60:5d:ea:bb:fc:a9:
2b:98:e8:cd:0d:55:1e:bc:ca:ab:30:5c:b2:8d:ce:3c:27:4b:
6b:df:bc:d9:e6:e0:02:44:18:9f:39:90:10:6d:4c:31:b6:40:
d2:11:0a:ea:54:47:9f:ec:a9:f1:5c:f7:4f:7d:19:f7:ad:e0:
35:8e:09:14:02:f2:d3:dd:25:0d:0b:03:aa:d3:bc:32:eb:4b:
d4:b2:e8:be:fd:1f:89:61:c4:d2:66:df:cd:18:0b:8a:c9:1c:
88:3e:47:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 01:58:29 2026 by rpki-client