Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
File: XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft (raw, json)
Hash identifier: tgp+Voc9tQauGRK6Ft7sTSiuP4zQwlig/bXZKJSr61I=
Subject key identifier: 87:09:FF:25:A6:D5:E2:F9:2B:D3:B5:EE:F2:3A:9F:7B:4D:49:2E:4C
Authority key identifier: 5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6
Certificate issuer: /CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6
Certificate serial: 019D389BB656DAA0DC51FF760C920DF294EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
Manifest number: 1899
Signing time: Sun 29 Mar 2026 08:00:21 +0000
Manifest this update: Sun 29 Mar 2026 08:00:21 +0000
Manifest next update: Mon 30 Mar 2026 08:00:21 +0000
Files and hashes: 1: EgZw9prYM48BikMrmIquBFUeyCY.roa (hash: ctCXPXYhr5UMOKpyrvlkfwGqe62m7LyduahfprfYDD4=)
2: XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl (hash: x9uJxOET6gHaSjx3wFl5GiQQTpqZTNg5XY7gmYgVcY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:b6:56:da:a0:dc:51:ff:76:0c:92:0d:f2:94:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6
Validity
Not Before: Mar 29 08:00:21 2026 GMT
Not After : Mar 30 08:00:21 2026 GMT
Subject: CN=8709ff25a6d5e2f92bd3b5eef23a9f7b4d492e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ba:58:a6:93:e9:83:1d:dc:81:ef:b1:6d:09:
82:f2:cb:09:32:1f:0c:d9:20:00:99:e1:8a:d9:36:
2e:ee:fb:74:a2:0e:c6:22:93:91:ba:77:8b:d0:b2:
8e:f7:dd:92:87:31:ae:8d:3f:ea:2f:95:5d:1e:a1:
18:e7:98:12:55:87:83:34:8a:99:3e:2d:d2:62:c4:
af:f5:a7:54:14:3e:2f:cc:6b:18:04:9f:71:f6:10:
74:96:37:b3:8f:3d:e9:6e:38:51:6e:2a:25:4d:ad:
c1:17:34:5f:c5:40:c7:80:a3:e0:57:f9:f7:f7:22:
a0:ec:28:9b:14:f7:48:2a:8a:09:b3:42:66:9c:e6:
44:86:e5:4f:d6:34:59:1a:8e:8f:72:d6:e5:d7:45:
e8:d9:59:19:be:6d:87:21:dd:6c:24:01:8c:da:7a:
1b:68:ea:73:04:b1:c6:ec:35:7d:52:7e:ff:3a:c0:
81:a6:6e:a6:b3:bd:ed:9e:06:2d:b7:e5:fe:75:f9:
22:5e:f4:1f:bf:61:fe:44:3e:02:60:d1:a1:ca:cf:
43:b0:06:4a:b8:ce:68:ca:20:df:88:02:99:9e:95:
83:b5:8a:a1:97:47:9f:42:4a:60:86:e4:0c:e1:6f:
ed:75:da:72:81:74:75:da:e5:41:41:76:c9:77:d9:
37:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:09:FF:25:A6:D5:E2:F9:2B:D3:B5:EE:F2:3A:9F:7B:4D:49:2E:4C
X509v3 Authority Key Identifier:
keyid:5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f0:db:48:ec:0a:d4:b4:c5:9b:c4:b6:d4:68:89:af:f9:4a:
db:3f:64:14:7f:26:ac:bc:79:f0:a1:1f:b1:ec:b2:7c:2b:28:
0f:ca:49:ee:50:23:a6:c8:2c:5b:40:b1:af:93:04:bb:cd:a2:
6b:12:4c:07:0e:91:9e:e3:99:63:71:72:b1:3f:cc:09:87:8b:
45:0d:33:fd:3f:66:5c:68:76:42:62:22:08:71:b2:26:ba:ac:
bd:05:af:7a:41:20:d0:07:3c:19:b9:74:b5:42:e8:04:6a:e7:
87:9f:d4:df:15:d5:fc:70:6a:42:33:5e:cb:52:d1:ba:22:dc:
a8:2d:d7:fc:72:eb:d4:02:74:a0:bb:89:0a:1f:66:08:42:96:
8c:4f:6b:5a:26:91:a1:cd:f7:f0:57:83:3f:ef:93:29:28:d7:
ea:f4:0d:94:7c:05:ad:f1:ec:6d:de:d7:8f:42:2b:ec:9d:a2:
8a:63:01:95:04:3f:81:8b:66:61:91:05:d1:e7:9b:cc:0a:c1:
9e:25:a7:c8:b1:55:70:6c:29:df:d1:aa:78:cc:7d:86:b6:08:
34:40:ec:56:4f:4e:24:05:2a:b8:e0:75:6c:70:5b:cd:da:7e:
7a:53:1d:0a:19:92:54:c0:04:75:56:ae:6c:f6:b8:c0:6c:be:
7a:93:5b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:06 2026 by rpki-client