Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.mft
File: XTgiOCiaiALPUrZ9m_Suh6UJM8M.mft (raw, json)
Hash identifier: jUi//Jvx//lbMHNLI7BuvPnH+ZCb2oNL6CGEBftBQ5k=
Subject key identifier: 74:93:3A:C5:15:45:04:2C:79:AB:03:EA:94:89:62:7D:97:71:1A:35
Authority key identifier: 5D:38:22:38:28:9A:88:02:CF:52:B6:7D:9B:F4:AE:87:A5:09:33:C3
Certificate issuer: /CN=5d382238289a8802cf52b67d9bf4ae87a50933c3
Certificate serial: 019D38D31EC6B125AAE522D723832D8E75BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTgiOCiaiALPUrZ9m_Suh6UJM8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.mft
Manifest number: 17FC
Signing time: Sun 29 Mar 2026 09:00:53 +0000
Manifest this update: Sun 29 Mar 2026 09:00:53 +0000
Manifest next update: Mon 30 Mar 2026 09:00:53 +0000
Files and hashes: 1: XTgiOCiaiALPUrZ9m_Suh6UJM8M.crl (hash: YgC1zpnajR4PU7/OOKHQmLd/I7kQstrvhEZntNb4c0w=)
2: vIEeMsOgyhAbHtdasH9clWdBUoM.roa (hash: LNPknqC7GAKoJKuLl2I8NQhITu9vWI4/MB5dCdNLtbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTgiOCiaiALPUrZ9m_Suh6UJM8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:1e:c6:b1:25:aa:e5:22:d7:23:83:2d:8e:75:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d382238289a8802cf52b67d9bf4ae87a50933c3
Validity
Not Before: Mar 29 09:00:53 2026 GMT
Not After : Mar 30 09:00:53 2026 GMT
Subject: CN=74933ac51545042c79ab03ea9489627d97711a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:66:e3:bd:b5:7c:4e:31:50:80:6c:c3:8c:66:
c6:a1:a5:e5:b7:e3:f7:55:14:bd:7d:19:20:82:97:
c2:38:3a:1f:77:e4:68:db:cb:57:42:d6:a7:f6:71:
88:47:aa:94:74:1b:cb:88:73:84:a2:74:98:b0:fa:
e1:d5:9c:a4:ad:9a:30:d5:0d:ab:99:f6:4b:07:8b:
e7:79:31:5c:0b:2d:0c:b2:63:61:fd:04:47:c9:de:
07:45:fb:32:9b:92:ae:29:c9:65:31:e2:8d:af:42:
ba:63:c8:be:b5:84:74:e1:a4:97:fd:9e:c7:eb:44:
de:cd:fb:b7:f8:43:39:b5:6c:f6:93:22:dc:3e:55:
4d:06:01:93:a3:ec:e0:9e:76:8a:17:0e:6c:5f:5d:
5b:f6:67:48:01:6a:35:e5:e1:b5:63:87:4a:2a:68:
ca:d8:63:13:c4:58:7c:ce:d0:7d:aa:79:91:93:58:
0f:73:f3:3b:7b:10:8c:ae:7a:15:65:13:07:1a:97:
69:8a:05:77:dd:d8:b9:c6:34:cc:84:4f:98:aa:7f:
e5:bd:d6:1d:3c:3f:8d:99:6c:22:68:12:a2:61:22:
6d:ec:0f:ee:18:4f:14:68:11:45:ee:a1:67:2f:6c:
71:04:d7:7d:59:53:7d:d4:4f:ee:cd:7f:90:52:6d:
88:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:93:3A:C5:15:45:04:2C:79:AB:03:EA:94:89:62:7D:97:71:1A:35
X509v3 Authority Key Identifier:
keyid:5D:38:22:38:28:9A:88:02:CF:52:B6:7D:9B:F4:AE:87:A5:09:33:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTgiOCiaiALPUrZ9m_Suh6UJM8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:64:7b:b5:8a:d4:1b:d7:eb:7c:cb:63:1c:4d:ed:80:45:4a:
93:cc:be:7b:ce:b9:42:83:2c:75:66:b0:a8:1c:6b:dc:a5:92:
54:2b:58:12:96:a1:25:23:b6:33:5d:bf:9b:aa:13:14:50:44:
e8:02:ca:3b:76:dd:12:02:42:37:ee:c2:be:92:a5:46:06:83:
60:c8:7f:f6:f6:2e:0c:73:b8:70:bf:30:67:c8:02:56:36:f5:
cd:cd:61:9f:d3:8d:86:da:d3:90:cc:c4:8f:b6:c7:cf:a0:15:
d4:c7:4a:f6:8c:e8:23:c3:95:42:a8:4d:39:df:b9:77:67:5e:
c1:59:ed:2b:db:46:3b:04:20:22:04:69:1a:4a:b7:0a:43:1e:
5d:cd:83:f2:29:75:88:f5:96:b5:5b:48:c4:82:f6:4b:ad:32:
48:5e:45:4e:6d:f4:e8:4d:eb:9a:64:ab:38:b0:14:4d:4b:5c:
7b:c7:48:5f:2a:3f:36:5b:1d:c1:26:00:c0:95:43:65:c2:79:
e9:b6:a8:42:e8:e2:01:f4:0b:4b:b0:9b:0f:0c:ce:f2:b5:77:
33:18:44:57:19:ab:8a:8e:51:f4:52:ce:c1:c3:c4:b8:a6:b2:
b6:0d:16:78:6d:fd:81:b3:af:15:dd:df:7d:af:08:47:81:f8:
d5:63:ab:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:47 2026 by rpki-client