Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
File: XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft (raw, json)
Hash identifier: ssxCFe2rK+XHZS42C7S+YBYEbW3/HC/NTJVtI8XZemo=
Subject key identifier: 3D:22:C4:76:CD:3A:17:32:79:1D:14:A7:80:4D:96:5A:F1:0E:E1:40
Authority key identifier: 5C:DE:8E:81:39:F2:C8:F6:2F:84:82:D0:1B:0A:DB:86:B2:A1:D1:95
Certificate issuer: /CN=5cde8e8139f2c8f62f8482d01b0adb86b2a1d195
Certificate serial: 019D37C08B55F03CA12A8A6F51A335EF0CF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
Manifest number: 091E
Signing time: Sun 29 Mar 2026 04:00:58 +0000
Manifest this update: Sun 29 Mar 2026 04:00:58 +0000
Manifest next update: Mon 30 Mar 2026 04:00:58 +0000
Files and hashes: 1: XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl (hash: aqbsN8RnM+I0f/qodivDPgo2T002yyuUEkkXnJhdeiU=)
2: b757MQvXDSUkc0atEwpcyuKC6YI.roa (hash: RFAcdsiEO0xgN3cYS1sxIjrVlqcw5hgZfBN09N0DhJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:8b:55:f0:3c:a1:2a:8a:6f:51:a3:35:ef:0c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cde8e8139f2c8f62f8482d01b0adb86b2a1d195
Validity
Not Before: Mar 29 04:00:58 2026 GMT
Not After : Mar 30 04:00:58 2026 GMT
Subject: CN=3d22c476cd3a1732791d14a7804d965af10ee140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:53:7a:b1:6e:90:fb:3f:7c:ee:45:c7:30:e9:
3e:56:6b:2c:f7:e5:9c:3a:57:a1:ac:38:de:21:86:
c5:bd:f0:38:61:70:5b:3a:8c:14:d9:bf:48:82:2c:
8b:88:54:eb:42:99:c6:fd:53:72:09:ad:57:39:99:
b7:f5:5e:06:a0:a6:9b:0d:15:f7:20:a9:d5:ce:d5:
4e:27:10:f9:c5:84:8d:07:c0:b8:29:44:02:93:2f:
55:f4:bf:9d:a1:3f:30:81:f0:f7:bd:cb:41:93:6e:
af:23:bb:6f:c6:94:4a:9f:df:f9:4a:e0:91:60:b4:
a7:bf:f0:3a:0f:31:ff:4e:85:e1:32:76:3f:ea:85:
07:d3:3b:4e:c5:75:dd:10:56:d6:c2:13:08:9e:b9:
b3:3e:40:91:b4:92:b8:56:24:dd:f9:68:6f:89:9b:
e5:ce:33:cf:ac:e6:13:b9:c7:d0:36:32:57:2e:d0:
ed:eb:e8:5f:e1:6c:9a:f7:45:89:44:59:7b:01:19:
0f:0d:b5:41:ef:8a:86:b9:be:e6:41:b4:d6:0a:42:
90:0c:7c:f8:65:04:b6:4f:0d:cb:fa:39:b7:24:b0:
21:da:5d:74:8f:45:c8:69:88:70:fd:fd:81:8d:b3:
96:d7:6b:7c:8c:f3:1a:a2:2b:bf:c0:89:13:b6:7c:
e5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:22:C4:76:CD:3A:17:32:79:1D:14:A7:80:4D:96:5A:F1:0E:E1:40
X509v3 Authority Key Identifier:
keyid:5C:DE:8E:81:39:F2:C8:F6:2F:84:82:D0:1B:0A:DB:86:B2:A1:D1:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:d5:5c:1e:41:fd:74:94:36:fd:f4:ca:f5:5d:cb:9b:77:cd:
83:44:be:dc:a7:c7:73:0d:24:82:67:2f:08:86:19:b6:cc:6e:
f4:5d:42:52:19:00:ae:a3:fa:98:ef:67:01:56:e1:ca:da:71:
31:9c:55:66:e7:04:46:42:67:19:07:fa:99:42:8e:7c:a3:a3:
59:f9:f0:b0:c6:85:c1:9a:c7:8a:c4:bc:2f:09:64:4f:8e:38:
05:7b:d4:91:12:8a:d0:ce:6d:ca:40:50:7c:0c:8f:56:c7:e1:
dc:5c:01:f1:b0:56:a2:d6:61:bd:ee:3c:93:9f:d4:8c:27:d6:
86:61:9e:eb:98:eb:5e:54:df:9a:5e:be:0d:d1:ca:bc:f6:fb:
74:06:11:56:6b:3a:33:d6:78:e6:9d:5e:78:b8:ae:50:b5:a0:
ec:89:98:05:9a:76:b5:29:c0:1f:ca:8a:23:2e:64:c9:09:74:
f0:86:fb:7a:5d:53:2f:84:c2:d4:4a:df:cd:a5:8b:78:31:af:
92:13:89:5f:50:ae:b7:ad:82:51:b8:37:a3:84:d5:ae:9d:ae:
7b:03:0b:67:4c:e6:5a:c4:7c:83:bc:fc:50:1b:56:a5:2d:d5:
78:e2:d3:bb:54:54:c5:28:45:da:6f:d7:c2:61:6f:e9:b6:d5:
cb:1e:1a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:10 2026 by rpki-client