Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
File: X6OG6XZW1kirU4GylmZBQIGwAIQ.mft (raw, json)
Hash identifier: WWviveyLn6jw+NNUq9AZJhkaKEQhZPuTpNBMxAuu95g=
Subject key identifier: 7F:8A:C8:E1:39:6D:F1:F2:75:F9:CD:1D:55:A5:4B:F7:37:C9:93:26
Authority key identifier: 5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
Certificate issuer: /CN=5fa386e97656d648ab5381b29666414081b00084
Certificate serial: 019CE4EC8F8B86C29D6A1D9C174DCEB4C19B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
Manifest number: 07EB
Signing time: Fri 13 Mar 2026 02:00:34 +0000
Manifest this update: Fri 13 Mar 2026 02:00:34 +0000
Manifest next update: Sat 14 Mar 2026 02:00:34 +0000
Files and hashes: 1: X6OG6XZW1kirU4GylmZBQIGwAIQ.crl (hash: EM7vxiFz6vyfO+16Dm6cWYiDnf2afM1UBi7W2Gu5cUA=)
2: xhYgnKDXKCLXTlxGKn83qxGD5Wk.roa (hash: 4Tr8pcApL7OMPNYK6DHiqFf/BMOwe5lvOFY1rUx8z6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:ec:8f:8b:86:c2:9d:6a:1d:9c:17:4d:ce:b4:c1:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa386e97656d648ab5381b29666414081b00084
Validity
Not Before: Mar 13 02:00:34 2026 GMT
Not After : Mar 14 02:00:34 2026 GMT
Subject: CN=7f8ac8e1396df1f275f9cd1d55a54bf737c99326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:26:96:d1:b9:4b:25:d7:2d:c3:aa:99:bb:4c:
bf:38:7a:f5:9f:a6:85:98:16:d2:02:7c:3d:6e:7f:
fe:88:1d:ae:fe:5b:cf:1a:eb:5a:bf:d7:e5:f9:ba:
50:f3:b7:a1:b3:05:50:97:e2:47:72:5c:4c:46:2d:
61:7a:30:35:b2:be:65:93:3d:c6:bb:bc:22:c0:4f:
9f:97:82:0d:79:4a:41:de:15:57:a3:aa:e9:f1:9c:
77:cc:5a:28:fe:78:b8:0b:a1:ad:39:b4:e8:55:e7:
59:3f:6d:09:d0:9a:c5:14:e7:20:a9:42:c3:f7:df:
a8:34:21:d2:63:6f:69:d2:00:3b:b4:21:02:0d:2d:
9e:b4:21:b0:5e:34:ee:a2:e8:a3:ac:c9:62:d5:0f:
07:43:a8:61:d4:44:b9:fa:18:74:5b:97:d6:67:30:
9f:75:62:f3:cb:cd:9d:49:3b:e4:bd:b3:6e:71:71:
36:4a:0e:91:b3:52:d6:42:af:3b:13:16:05:b4:59:
d4:57:64:31:56:9e:9a:7f:3b:d9:77:67:53:bd:89:
5b:9d:85:6e:c7:34:08:93:1a:3b:fb:e5:83:33:76:
06:7b:bc:61:c0:41:01:ad:04:7d:26:76:3d:e2:bc:
f4:58:ea:fc:ae:d4:0a:10:15:0e:8e:b3:20:5f:6d:
7c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8A:C8:E1:39:6D:F1:F2:75:F9:CD:1D:55:A5:4B:F7:37:C9:93:26
X509v3 Authority Key Identifier:
keyid:5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:d2:06:bd:7f:c0:8b:a6:dc:06:ea:cd:22:47:27:42:51:db:
cf:4b:dc:fe:31:da:69:9a:c4:91:3a:31:a0:7c:02:1b:44:fc:
c6:4b:8c:42:03:75:2d:c8:1e:50:4b:16:52:d0:f9:67:e7:3c:
cf:5b:9e:1b:f1:50:68:d3:86:64:6f:68:0e:1a:c2:a0:16:21:
0c:37:c8:07:c9:43:a8:f3:9b:47:db:19:d5:17:07:86:73:84:
49:0c:3a:f3:1c:86:8e:8c:45:df:18:de:e1:4e:39:33:c6:98:
4b:58:67:00:e4:e2:52:1c:66:4e:cd:70:a0:a7:97:70:ae:d7:
06:1a:76:b7:19:1a:1b:12:37:df:7e:b2:a9:d8:5b:c5:f1:74:
08:29:eb:54:5e:f4:10:4b:4a:34:cc:2f:58:47:91:c7:9b:f4:
2b:03:88:f5:76:c0:34:cd:99:2a:87:0d:5a:3b:01:71:fa:bc:
b5:1a:50:e0:34:92:91:15:a8:f5:9a:7e:ef:64:ee:85:8a:6c:
25:26:d0:b3:68:a3:25:2d:61:78:91:e8:b3:1d:a2:41:ca:02:
cc:97:56:84:be:7e:4c:5d:3f:21:13:d9:ed:d6:c9:b7:92:06:
d7:f3:21:56:56:a3:70:9f:65:43:47:43:94:3f:2a:d4:b8:4d:
20:32:48:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:57:22 2026 by rpki-client