Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
File: XJK5qSx-uRPD2lWAAsZz6CONscc.mft (raw, json)
Hash identifier: lhG+U4R6rvYNNqHb1nRkwgonueThZ/piphWpi0cfV24=
Subject key identifier: 44:A9:EE:BF:62:AC:21:D9:62:39:FE:C8:BF:7B:EB:58:44:7E:C0:35
Authority key identifier: 5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
Certificate issuer: /CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Certificate serial: 019D0477D6B7F343FB74B473AE74A1199070
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
Manifest number: 0F93
Signing time: Thu 19 Mar 2026 05:00:55 +0000
Manifest this update: Thu 19 Mar 2026 05:00:55 +0000
Manifest next update: Fri 20 Mar 2026 05:00:55 +0000
Files and hashes: 1: XJK5qSx-uRPD2lWAAsZz6CONscc.crl (hash: tVcjBChNf/8UC9eJQbjNJbMi1oKuOohbxey8tH90RU4=)
2: nbiO0Qsuka11ZNMxAFy9dEINXys.roa (hash: NaboMvIQcJu7trkWGRw22aXFbkdnEJpMvSjIpYA2/ik=)
3: qTb1hfW2cZsJLmGnL2cnlmiyFfY.roa (hash: hklYadmGWp1kEGK+jtsPBwTIyJolTP2I0OScsQI8ZQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:04:77:d6:b7:f3:43:fb:74:b4:73:ae:74:a1:19:90:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Validity
Not Before: Mar 19 05:00:55 2026 GMT
Not After : Mar 20 05:00:55 2026 GMT
Subject: CN=44a9eebf62ac21d96239fec8bf7beb58447ec035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7a:1b:31:93:38:cb:5c:12:13:48:4c:38:6f:
aa:25:62:78:1a:f2:ee:0f:30:a0:be:23:71:6f:af:
6d:51:42:01:38:dd:45:44:e1:d1:6e:ed:61:4b:f4:
71:1b:a5:c0:97:99:ce:92:1e:43:0e:4c:e3:f0:01:
20:64:cb:32:cd:fc:cf:b9:19:94:77:2d:a7:c2:c7:
a9:cd:27:3d:a5:af:cf:2c:0f:d0:75:85:8d:fe:e4:
62:d6:6e:5f:0d:60:a5:e3:16:01:e3:86:96:8b:7a:
50:8a:2d:59:05:a2:9a:c6:5f:8a:46:7b:cb:87:87:
72:53:dd:b3:75:43:fb:f2:cf:31:88:1d:de:03:72:
29:ee:b7:4f:5a:bd:5e:48:0e:60:40:57:de:ad:ad:
5f:50:1f:ec:8e:1d:d0:89:95:2b:e9:3d:9a:32:b9:
f5:08:8a:66:eb:db:b2:7e:ba:fd:e1:7a:a0:fc:8f:
ae:39:41:56:5f:5e:9b:d8:0b:84:96:39:15:c7:05:
62:e5:48:64:32:a5:ae:f9:12:de:5f:53:03:d6:ac:
45:bd:0a:50:07:ea:a9:f6:dd:4e:56:11:a1:b9:cc:
e3:78:ea:c5:8e:f4:af:6b:e2:a4:18:b5:a0:df:bc:
07:79:e8:cf:f9:23:d5:3e:c3:c2:5d:e2:bb:55:25:
7a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A9:EE:BF:62:AC:21:D9:62:39:FE:C8:BF:7B:EB:58:44:7E:C0:35
X509v3 Authority Key Identifier:
keyid:5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:e2:dc:4f:61:1f:ac:b9:f8:8d:81:4c:32:89:39:1d:e5:2a:
b7:ba:e8:db:09:09:c8:05:44:c2:0f:8c:71:74:2d:d6:0d:d0:
1e:f9:16:2f:a4:16:a1:e4:d9:16:f6:cd:21:fa:ae:35:3a:fe:
1e:31:87:7b:51:c8:59:00:a9:da:aa:ac:5c:81:3f:79:d3:76:
d9:36:1f:55:a2:b2:56:13:1e:af:61:ce:8c:29:5d:08:8d:d2:
a5:3d:fc:48:0c:3b:42:fc:43:66:11:ed:57:97:77:83:63:37:
ba:18:f3:a9:12:24:90:1b:94:b3:40:da:b8:90:0c:0f:57:64:
cf:c8:d2:0d:ad:b3:85:05:1f:72:a4:fa:cb:ed:76:ab:31:01:
04:51:1f:09:c6:4d:cb:70:64:c3:67:5f:09:40:ee:18:8c:53:
51:8b:73:f4:fa:e2:51:a8:34:fe:b2:fa:6d:60:c0:69:5d:c2:
76:09:a6:35:f0:da:d9:f3:2e:4c:b4:5d:a9:8b:5d:6e:1b:c6:
10:b6:0c:0f:6a:d4:ef:ce:7a:ef:01:e8:92:9e:e7:f4:06:37:
b1:0f:31:95:a9:9f:a2:f8:79:15:fd:36:fc:8c:22:b6:2d:aa:
21:e1:a3:95:43:3a:35:0e:d3:9d:2f:31:5f:c5:b5:f6:41:99:
2e:93:fc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 13:50:33 2026 by rpki-client