Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
File: XOsOvYeLd9QvLKndCPcMMjxdA9s.mft (raw, json)
Hash identifier: fPcyLkAtPUr6Um2qDSBfO3jtIVrGnpZEGauXAgv7DbA=
Subject key identifier: 87:09:98:68:BF:CD:78:4A:AB:73:78:23:2C:5D:D7:E0:0F:E3:A1:C4
Authority key identifier: 5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB
Certificate issuer: /CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db
Certificate serial: 019D37C051F0C4CF84A8E388929B0D3DC6C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
Manifest number: 11AE
Signing time: Sun 29 Mar 2026 04:00:43 +0000
Manifest this update: Sun 29 Mar 2026 04:00:43 +0000
Manifest next update: Mon 30 Mar 2026 04:00:43 +0000
Files and hashes: 1: 3dTGZIR5xNjpUjR4hZwNlOd2Bsc.roa (hash: f2BLKcRZVhnRXkQ4qW92OvGurLauRFZKARhH1pRyUeg=)
2: XOsOvYeLd9QvLKndCPcMMjxdA9s.crl (hash: iqSrYjJVxckPIC8q1BG1+68bflki7Kd9ByAVivpsMXM=)
3: f-TtHG-5pZXW87X0GbscTUNU96w.roa (hash: lCxogCHK18lqz8wrch+QF7zhq9f/HEWgIBotwp+AlGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:51:f0:c4:cf:84:a8:e3:88:92:9b:0d:3d:c6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db
Validity
Not Before: Mar 29 04:00:43 2026 GMT
Not After : Mar 30 04:00:43 2026 GMT
Subject: CN=87099868bfcd784aab7378232c5dd7e00fe3a1c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b9:f3:9c:3e:70:51:91:4b:90:0b:31:0c:d8:
02:d7:71:66:98:5d:51:aa:cf:8a:ce:8d:5f:6c:3b:
5a:a4:e3:ca:77:95:21:67:ed:3d:5d:97:0e:72:5f:
eb:f4:f1:27:bf:9f:75:d8:fe:b9:3a:a6:79:a7:97:
65:5c:5a:22:5a:4e:21:8f:09:83:65:3c:98:82:ad:
33:a3:d1:59:a3:29:b8:fa:bb:a4:07:45:07:9e:15:
f9:33:7a:3b:ca:80:99:3b:a4:bc:6a:0a:4f:28:e4:
97:85:1d:fb:e2:ff:3e:29:09:ee:9c:f0:e3:2c:de:
f7:50:2c:35:96:46:bb:61:2b:43:cc:b2:88:62:4c:
28:93:ad:70:86:6a:1d:ca:be:f9:ba:6a:5a:d3:b4:
bb:5b:77:fb:6a:8d:ca:65:cc:22:29:ad:94:cc:1a:
a2:f2:6e:53:df:f1:82:c8:96:6f:f0:5c:4c:2d:f8:
f7:c5:74:da:97:78:1a:b6:0f:2f:a3:33:09:fb:bd:
79:45:ef:46:40:d1:c2:99:cd:5d:da:04:2f:2d:6f:
4f:fa:ad:2d:77:c8:96:7a:43:7e:d7:34:27:e1:92:
2b:df:72:45:08:29:8b:f0:8b:93:61:ef:3d:34:c7:
22:cb:b7:69:f7:16:e6:59:58:47:fc:33:d3:e5:b4:
28:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:09:98:68:BF:CD:78:4A:AB:73:78:23:2C:5D:D7:E0:0F:E3:A1:C4
X509v3 Authority Key Identifier:
keyid:5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:5e:ca:38:2c:df:30:3a:34:7b:86:29:f3:16:a8:cf:7f:cd:
3e:81:2c:39:28:ba:c9:01:f6:2e:4d:fa:8d:a7:1f:5d:dc:83:
bb:e6:c2:30:09:29:38:8c:4f:20:5d:21:1c:2a:ed:17:ef:5c:
32:81:84:58:dc:a8:e7:ee:6a:2f:1c:ae:fc:92:7a:79:3d:a1:
e9:ea:48:5b:4d:cd:f3:c8:9e:27:e7:ef:54:96:b0:ba:da:51:
1c:f4:89:48:d5:81:b2:ea:04:9d:96:6f:fc:2e:e1:53:e2:fb:
3b:ee:14:fa:d8:6e:f3:96:77:d8:9e:16:64:30:02:81:77:e1:
ca:19:f1:f6:a5:51:af:4c:16:2e:39:61:bd:9b:7e:7a:8c:f7:
14:3c:80:0a:b5:01:5d:1f:60:50:64:5d:01:56:c6:49:8d:da:
15:d2:c5:9c:a9:a4:29:da:45:07:b0:98:04:c8:1b:2d:c3:8d:
c5:c9:a9:3a:ad:59:2f:a8:24:13:f6:ec:cc:3c:e1:08:b2:f1:
a0:da:69:71:61:5f:f8:33:0b:dc:79:2c:65:fc:95:ef:b0:6b:
82:5f:70:ac:0f:b9:f3:33:0b:b3:8e:9d:ff:15:90:e8:e4:69:
ea:fe:c9:5b:2c:7d:9e:be:39:30:57:f8:75:ea:45:b5:74:e9:
81:25:ca:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:10 2026 by rpki-client