Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
File: v00XR_NcDNayXwsKDmjQRCyTkUw.mft (raw, json)
Hash identifier: VAcBOjDNTM92fwf1TVvWAOm+y0UEYwGmqaFtYgULAMU=
Subject key identifier: 57:D5:37:7F:2D:FA:91:13:99:7A:35:08:4A:E0:18:CD:DA:71:03:EB
Authority key identifier: BF:4D:17:47:F3:5C:0C:D6:B2:5F:0B:0A:0E:68:D0:44:2C:93:91:4C
Certificate issuer: /CN=bf4d1747f35c0cd6b25f0b0a0e68d0442c93914c
Certificate serial: 019D382E4BB71B43057FFA21EF2976B8D19D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
Manifest number: 056F
Signing time: Sun 29 Mar 2026 06:00:51 +0000
Manifest this update: Sun 29 Mar 2026 06:00:51 +0000
Manifest next update: Mon 30 Mar 2026 06:00:51 +0000
Files and hashes: 1: XqXq0lu4hhkfUjIupnzFYlf_0AY.roa (hash: wDEIYcOU1jFM2otuCniD9mD3XBpASPyj3p4B1WJeSKE=)
2: v00XR_NcDNayXwsKDmjQRCyTkUw.crl (hash: DIXR77qawEs1fyVpOSMuAgXl1d2MB/XvvaIrDuFGwiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:4b:b7:1b:43:05:7f:fa:21:ef:29:76:b8:d1:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4d1747f35c0cd6b25f0b0a0e68d0442c93914c
Validity
Not Before: Mar 29 06:00:51 2026 GMT
Not After : Mar 30 06:00:51 2026 GMT
Subject: CN=57d5377f2dfa9113997a35084ae018cdda7103eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:17:77:86:e7:49:56:a4:61:83:31:63:70:f7:
a9:bd:11:53:22:b4:c5:eb:0b:38:85:71:2d:fc:7b:
aa:b0:32:3a:a2:87:ff:99:69:79:7f:07:07:5a:f8:
a0:8a:e1:9b:86:17:01:ea:1f:50:ad:36:5e:e7:07:
21:e3:8e:b0:26:c1:80:0e:67:a4:b9:58:37:01:c9:
db:e5:8c:73:0e:0c:5f:15:37:0a:b2:d6:30:4f:6c:
d6:82:19:e2:78:7b:81:bd:35:f9:89:8c:c3:db:e5:
0c:7b:f6:46:ea:99:05:28:70:07:72:e1:a6:7f:7d:
48:59:8b:12:3d:ef:62:78:c9:a6:b0:bd:78:cc:1c:
40:38:6e:d3:41:80:5e:f9:5a:16:5c:01:1a:6d:8c:
4d:d5:6a:f8:6b:bc:d1:ae:db:13:8e:ff:f2:74:ef:
0c:ae:a2:75:24:d5:c2:4b:53:14:43:57:9d:83:ce:
7a:ea:2f:da:08:4b:70:72:8f:76:07:1c:2b:d6:0b:
4c:23:60:f0:42:d9:48:c8:16:e3:d9:49:2e:09:49:
99:2d:d4:3f:29:45:d4:84:05:e9:87:e1:5d:89:d5:
a2:bd:0a:07:14:a7:ed:8c:1a:65:29:17:ac:bd:83:
32:10:29:6b:b2:76:f7:08:0e:d3:66:69:b9:f1:1a:
d4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D5:37:7F:2D:FA:91:13:99:7A:35:08:4A:E0:18:CD:DA:71:03:EB
X509v3 Authority Key Identifier:
keyid:BF:4D:17:47:F3:5C:0C:D6:B2:5F:0B:0A:0E:68:D0:44:2C:93:91:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:26:ab:48:03:8a:ee:a4:83:e1:d8:b5:04:ef:38:23:58:91:
28:f4:92:6e:91:34:8e:65:4d:a7:89:be:1b:eb:03:1a:5d:4a:
4d:01:a6:da:67:87:4d:cf:5b:b5:0a:95:33:c3:31:d9:57:9f:
c0:a8:6f:db:a1:d7:95:e2:e7:8f:b8:41:cf:30:36:d2:f1:5b:
39:61:f6:6c:ea:09:5b:69:18:3b:49:f1:a1:df:d0:87:bf:5d:
1b:d2:3d:2a:0f:0b:99:4a:de:27:ac:14:3e:d0:bf:fa:95:0e:
1f:a1:b2:a3:84:a5:6e:03:cc:d6:4c:6a:4c:51:e1:ca:b4:46:
25:e8:7e:f9:36:5e:ad:b5:81:a6:3c:34:34:ab:26:56:cd:8a:
6d:46:c4:10:7d:cd:73:d1:d8:bf:8d:65:30:3a:2a:5f:ce:ca:
c8:e0:0e:00:0b:2b:4d:e3:50:ea:96:02:72:21:25:16:06:58:
9a:55:91:5c:f2:c7:a8:5e:50:b0:e9:46:96:35:fc:f8:28:d6:
4a:74:bb:13:21:83:01:55:40:79:5c:ea:5e:5a:57:97:17:ff:
4c:da:27:a7:5d:69:5c:67:f9:68:20:68:b6:9e:d0:e4:89:89:
1f:18:2a:6c:89:6c:de:ae:6b:b4:e5:7a:1e:8d:a1:c6:69:12:
04:1e:13:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:35:02 2026 by rpki-client