Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
File: XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft (raw, json)
Hash identifier: 12kiVnkLxeQoUwXn5rdJVyde83AQ4MCFw2M5RYHQCa0=
Subject key identifier: 8A:D0:BF:9C:15:23:B4:6A:29:97:41:CE:31:6F:AC:46:89:3A:20:06
Authority key identifier: 5F:2B:E6:2B:E7:53:BA:99:29:35:5B:4C:E9:88:BA:E1:2A:F7:27:2A
Certificate issuer: /CN=5f2be62be753ba9929355b4ce988bae12af7272a
Certificate serial: 019D3940981E08719F0A4A69A9C082CAAD5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
Manifest number: 07E8
Signing time: Sun 29 Mar 2026 11:00:27 +0000
Manifest this update: Sun 29 Mar 2026 11:00:27 +0000
Manifest next update: Mon 30 Mar 2026 11:00:27 +0000
Files and hashes: 1: XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl (hash: 9G7SQyFX5TXaEX2b55kBCaAGb9kUh0vQ/dAZAcZd4jE=)
2: j0mWI7cQWBCGiDlGDSGVoZj238E.roa (hash: F2Brv8OMMvqFx8gd1Dzz6j6nuO9gaZQJk6LSgnOkIcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:98:1e:08:71:9f:0a:4a:69:a9:c0:82:ca:ad:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f2be62be753ba9929355b4ce988bae12af7272a
Validity
Not Before: Mar 29 11:00:27 2026 GMT
Not After : Mar 30 11:00:27 2026 GMT
Subject: CN=8ad0bf9c1523b46a299741ce316fac46893a2006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:94:2c:75:12:45:b9:6f:d6:03:b1:97:97:a6:
87:f5:e2:57:1e:1d:05:b1:b4:9f:88:99:cc:16:e1:
92:ba:99:c9:63:05:c6:0b:74:a3:c4:69:d6:49:78:
fa:d3:74:f1:88:52:06:50:70:61:73:67:85:c1:3b:
6e:23:93:73:ad:85:f7:fc:f7:ea:7c:64:b4:f7:30:
dd:18:6f:b9:c7:8e:b4:c5:0e:61:63:c1:40:f7:dc:
17:e4:ec:7c:25:05:e6:66:c2:76:94:b5:44:00:97:
31:9b:ec:1b:a5:12:93:a6:04:27:5d:c3:89:db:d9:
84:79:c4:c4:1d:c9:b9:76:2a:0e:d2:70:dd:85:20:
d2:39:dd:03:ef:4f:e5:8e:f8:48:f7:ea:6a:6a:5e:
62:09:36:35:45:1f:63:17:9a:81:43:9f:98:6b:19:
3b:33:d2:95:b0:83:86:16:d4:76:0d:9d:da:92:ba:
50:82:fe:ea:f2:5b:c6:98:63:a7:c8:d8:03:63:a2:
7c:a9:5b:83:7b:dd:5c:0b:7b:05:45:c4:31:f7:17:
85:8f:0e:96:ea:09:ec:39:db:cd:12:45:5d:28:41:
bd:f0:3b:06:6a:8e:31:30:fd:10:f7:04:d6:bd:da:
73:b6:e6:0a:05:f8:d5:7c:11:d0:1d:e8:05:8c:8c:
aa:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D0:BF:9C:15:23:B4:6A:29:97:41:CE:31:6F:AC:46:89:3A:20:06
X509v3 Authority Key Identifier:
keyid:5F:2B:E6:2B:E7:53:BA:99:29:35:5B:4C:E9:88:BA:E1:2A:F7:27:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:1e:d0:f8:82:b5:cb:c7:21:17:32:bd:87:91:fa:83:f0:26:
12:6a:0e:e4:0d:8e:66:bc:e7:cd:72:a1:69:eb:35:27:73:03:
1f:83:4b:5b:87:9f:43:d4:c9:e7:51:48:ed:18:4e:c1:60:a1:
60:7f:a0:7f:dd:f0:02:7b:f2:d6:9b:5f:e3:65:7d:f4:ad:d0:
c0:b1:fb:de:9b:bb:9a:5d:c0:86:20:de:8c:0f:e8:05:1e:20:
38:79:f0:a3:fa:77:91:89:5f:c2:97:e2:30:50:03:29:70:b1:
3b:43:c2:0a:2a:63:8c:77:43:10:77:be:d2:09:03:6e:b2:90:
eb:61:cb:16:a9:05:f5:a1:ad:47:20:a5:dd:2a:0a:89:5e:d9:
4f:7f:4f:43:3b:e7:8e:d1:b5:d6:fd:d6:74:db:57:ad:38:24:
8e:62:98:69:4d:15:1a:27:78:e3:9a:c0:85:20:05:5e:b0:6e:
8d:bd:25:fc:b3:ce:17:dc:ad:b0:9e:72:a5:dc:29:10:00:52:
30:4a:e3:34:cc:39:85:76:21:11:05:3d:f3:b6:09:2c:3c:79:
a4:cc:94:66:5f:ee:38:d7:7d:6b:0e:62:44:a1:a0:81:e5:9e:
a1:f1:1d:2e:f1:28:6f:d5:4c:e3:fd:bd:66:26:63:0a:64:c4:
c3:12:77:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:34:41 2026 by rpki-client