Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
File: XnzrnJMcsXleInriyGR1UTrkkVw.mft (raw, json)
Hash identifier: qbeJuWNFbJwzzEfZKkjCPk28lDJBMDN98cl+1Rwpymc=
Subject key identifier: 3B:03:29:11:29:4B:0D:F9:C9:62:2B:7A:CA:3C:C6:3E:6E:91:FD:18
Authority key identifier: 5E:7C:EB:9C:93:1C:B1:79:5E:22:7A:E2:C8:64:75:51:3A:E4:91:5C
Certificate issuer: /CN=5e7ceb9c931cb1795e227ae2c86475513ae4915c
Certificate serial: 019D37C1179F18A80A2BC7BEFDC8AE3F4535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 04:01:34 +0000
Manifest this update: Sun 29 Mar 2026 04:01:34 +0000
Manifest next update: Mon 30 Mar 2026 04:01:34 +0000
Files and hashes: 1: XnzrnJMcsXleInriyGR1UTrkkVw.crl (hash: LW9WAMzJR/i1JUB2uBEzp+tWfCpfFtb4lcl8oegW9+o=)
2: b2Q2Eat3_cux0yjgVGOzDFtgpic.roa (hash: jMq1XWA6LmE8jKy6nS6lDU5q1VTY7iuwpA5ReXp7Ws0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:17:9f:18:a8:0a:2b:c7:be:fd:c8:ae:3f:45:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7ceb9c931cb1795e227ae2c86475513ae4915c
Validity
Not Before: Mar 29 04:01:34 2026 GMT
Not After : Mar 30 04:01:34 2026 GMT
Subject: CN=3b032911294b0df9c9622b7aca3cc63e6e91fd18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d2:1c:d4:ee:a3:ec:18:a2:e2:3f:cb:e5:4b:
c2:73:0a:5d:63:d8:74:34:61:eb:9c:dc:d8:3b:f7:
d4:bf:e8:f9:d0:55:e9:6d:04:42:47:a9:87:0c:3d:
1c:f1:43:93:06:22:a0:21:7c:7e:d2:ed:4d:81:0b:
69:3a:49:f0:35:c4:4b:12:1d:ed:c4:05:cc:fe:4d:
b2:b9:00:1b:bd:ef:55:ec:bd:75:41:6d:0b:2e:b7:
2a:5a:ed:cf:7c:01:8e:61:a6:58:b4:74:7b:38:16:
21:14:14:bf:87:8f:41:53:9d:c6:ef:34:ba:f5:d6:
d1:4d:40:68:83:f9:4c:49:0e:42:70:3b:ef:07:f0:
9d:48:0e:ec:7e:3d:3b:bb:29:c1:c5:79:47:af:9c:
cf:a6:60:cc:aa:80:61:67:5f:62:d3:83:61:21:05:
97:b1:60:f2:b8:52:18:9d:4d:72:66:f9:ff:cb:10:
b8:10:43:ea:ff:81:06:31:59:72:a2:7b:63:00:15:
8f:aa:1a:60:c7:bc:ed:81:f1:10:84:07:22:c8:81:
c5:71:5c:71:f5:09:b5:a6:6f:ee:6e:13:7f:7b:78:
a9:bf:f1:ac:0a:62:dc:44:0e:cd:93:65:9f:95:c4:
46:d3:a7:3c:b5:f2:ec:8b:50:63:15:e3:a1:dd:2e:
5b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:03:29:11:29:4B:0D:F9:C9:62:2B:7A:CA:3C:C6:3E:6E:91:FD:18
X509v3 Authority Key Identifier:
keyid:5E:7C:EB:9C:93:1C:B1:79:5E:22:7A:E2:C8:64:75:51:3A:E4:91:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:53:1a:2e:ac:0a:8a:06:f0:7e:31:3a:33:33:95:14:76:48:
bb:25:91:a2:ec:5f:44:0f:2d:3d:b6:18:72:d4:e2:41:86:82:
50:5e:34:ed:11:69:fd:4d:3d:8d:13:c6:0d:6f:ef:c6:53:6d:
cf:9c:90:61:03:80:1e:21:dc:57:a6:9c:94:ba:77:a7:d2:1d:
60:5f:f3:04:25:50:37:7c:50:dd:d0:b9:b7:53:2c:ed:a9:5a:
12:3c:47:d5:c7:20:0b:e7:4f:15:d4:bb:0c:3b:17:d1:fd:de:
39:46:5c:59:8b:3d:9b:be:cc:18:3c:0f:7d:5b:74:d8:79:f7:
3a:e0:0b:39:26:50:07:3f:35:c5:69:bb:8b:8d:91:02:a1:e1:
b4:23:0e:ff:e8:0e:6c:ee:71:e5:1e:21:19:df:c8:1c:95:a3:
2c:7b:94:8d:ca:bd:4f:96:8f:70:93:08:0b:7b:48:04:0e:8d:
af:5d:01:9b:d9:4b:b9:31:2c:9f:38:33:f5:c0:d0:b5:48:63:
b3:04:f7:a6:c4:2d:3e:9e:58:26:fd:a4:fc:63:6a:47:99:20:
b2:f2:86:d5:71:95:95:e9:3d:96:9f:e8:26:97:e4:dc:44:d8:
51:47:8c:49:a1:2e:26:b9:79:9a:56:1f:47:bd:91:bc:ad:7b:
45:1f:c4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:52 2026 by rpki-client