Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
File: xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft (raw, json)
Hash identifier: WL78er4IB3CWq8ikLjrjFSXX94taEEuAPSxoF3WHKg8=
Subject key identifier: 18:C8:25:05:C7:CA:1D:AD:88:51:78:EC:08:53:A6:68:B1:B4:3B:D3
Authority key identifier: C5:B1:18:2D:31:79:6F:A6:3E:C3:C1:D9:B9:7C:B6:AA:AC:34:FD:D9
Certificate issuer: /CN=c5b1182d31796fa63ec3c1d9b97cb6aaac34fdd9
Certificate serial: 019D382E8C38A803C7585FA19C9BDAF373DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
Manifest number: 128A
Signing time: Sun 29 Mar 2026 06:01:07 +0000
Manifest this update: Sun 29 Mar 2026 06:01:07 +0000
Manifest next update: Mon 30 Mar 2026 06:01:07 +0000
Files and hashes: 1: xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl (hash: RxtoQC0vdGZiX4JxxSB4CS9n2Q8iRF8X+YaTJYr2cWY=)
2: y5TDm0AbnF5uW1VYqN6HJrhTGH0.roa (hash: lqxFRYQnP+n1wormol/wg9R3mZ0oBovnPQrrpsaBhek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:8c:38:a8:03:c7:58:5f:a1:9c:9b:da:f3:73:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5b1182d31796fa63ec3c1d9b97cb6aaac34fdd9
Validity
Not Before: Mar 29 06:01:07 2026 GMT
Not After : Mar 30 06:01:07 2026 GMT
Subject: CN=18c82505c7ca1dad885178ec0853a668b1b43bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cd:46:5b:69:ce:9d:f5:01:1b:a8:d5:a8:7d:
57:34:6d:07:88:7f:0c:78:49:f7:f5:09:d8:5b:20:
20:af:e0:e7:5d:f1:65:27:e4:04:92:da:79:58:6e:
58:79:92:e3:33:38:87:57:89:2f:e2:bc:6d:fa:67:
15:19:0a:50:76:2a:34:7c:df:5c:e3:20:65:00:f4:
09:12:a9:e9:ff:72:d5:c2:1c:41:bf:b1:cc:98:9a:
d2:26:17:8c:b7:f1:1d:c8:2a:5f:c9:4b:c2:5f:3b:
d1:8f:a5:3d:96:21:13:64:d7:3b:7f:ee:e2:52:b3:
d5:32:fd:00:9c:56:e5:26:3e:3c:e0:00:14:07:9e:
94:20:5d:25:68:ad:af:be:83:88:50:c2:74:0a:80:
f4:c1:73:35:15:e8:b9:32:f0:e0:4e:a4:03:ad:0f:
bd:b3:7c:b3:2c:83:2d:34:4a:11:aa:0d:69:64:51:
3d:f0:22:5e:5b:aa:d7:aa:cf:5c:36:6d:3a:cb:03:
eb:87:00:8c:2d:d2:93:bf:be:a7:39:17:03:a9:08:
39:79:1c:92:d4:50:c8:4b:3b:f0:55:ca:a6:10:79:
d3:44:83:ba:4f:7e:5f:e3:dd:34:24:1b:c6:eb:84:
2e:9e:a6:8f:d3:f7:f0:f5:a4:c4:04:59:55:3b:10:
c8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C8:25:05:C7:CA:1D:AD:88:51:78:EC:08:53:A6:68:B1:B4:3B:D3
X509v3 Authority Key Identifier:
keyid:C5:B1:18:2D:31:79:6F:A6:3E:C3:C1:D9:B9:7C:B6:AA:AC:34:FD:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:97:e5:0a:2d:8e:80:46:a2:25:db:47:69:e7:e3:a1:a8:8f:
ac:13:65:b7:98:77:a3:c9:4f:57:b2:e4:09:08:52:6a:60:ea:
a3:26:b9:24:c6:e9:2f:23:c7:63:31:46:3e:86:3f:7e:bd:2a:
3c:c1:10:66:26:c1:9e:7a:2a:89:5f:2c:90:63:d1:df:85:df:
48:81:f5:4e:d2:b5:e1:fd:20:8c:70:df:96:52:01:f1:a7:f4:
1c:15:d6:ad:7b:f0:5d:20:1a:3f:d7:03:20:34:30:b1:0d:a1:
57:6f:da:da:2b:c0:99:4b:5a:42:30:18:f0:d4:a9:e3:50:84:
3e:67:7a:26:39:45:2e:60:6c:c3:a8:84:70:e5:da:75:eb:41:
ab:af:8c:90:b0:6f:77:6b:01:ec:e9:7b:58:cc:1c:d7:43:8e:
03:29:a4:35:48:aa:3f:e4:f4:8d:51:0f:ea:5e:99:c8:5f:10:
51:fa:98:06:61:6a:6f:f0:d1:56:6a:1e:30:ba:a5:ea:fc:e4:
a8:ab:31:8c:ef:70:e3:80:b4:b2:fe:ae:00:e7:59:87:18:b9:
d9:c2:dc:15:e7:a3:af:9e:50:a1:69:25:80:31:89:7a:8d:55:
fc:b8:31:3f:09:6b:2f:24:7e:84:da:21:46:ec:23:e6:0a:c2:
34:b5:d3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:34 2026 by rpki-client