Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e44508-1f2b-4668-a51e-0e921418c1b5/1/XVD5SGhvOBoJxg1NlogMD45LFIU.mft
File: XVD5SGhvOBoJxg1NlogMD45LFIU.mft (raw, json)
Hash identifier: bGRT/HFtRP8OgBNaSiCeHZczYaYs3+BxmD7jBykVt68=
Subject key identifier: 58:62:AD:71:E7:2C:9B:F5:B4:BA:AE:F8:67:82:2D:0B:99:1E:13:74
Authority key identifier: 5D:50:F9:48:68:6F:38:1A:09:C6:0D:4D:96:88:0C:0F:8E:4B:14:85
Certificate issuer: /CN=5d50f948686f381a09c60d4d96880c0f8e4b1485
Certificate serial: 019D382E720E5A3F6B2D9A522B0165BE7A12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XVD5SGhvOBoJxg1NlogMD45LFIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e44508-1f2b-4668-a51e-0e921418c1b5/1/XVD5SGhvOBoJxg1NlogMD45LFIU.mft
Manifest number: DA
Signing time: Sun 29 Mar 2026 06:01:01 +0000
Manifest this update: Sun 29 Mar 2026 06:01:01 +0000
Manifest next update: Mon 30 Mar 2026 06:01:01 +0000
Files and hashes: 1: XVD5SGhvOBoJxg1NlogMD45LFIU.crl (hash: lrHeXzv94GGn99HNXkffhnaYzbeL5LnmFPd+OgbLoNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e44508-1f2b-4668-a51e-0e921418c1b5/1/XVD5SGhvOBoJxg1NlogMD45LFIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/e44508-1f2b-4668-a51e-0e921418c1b5/1/XVD5SGhvOBoJxg1NlogMD45LFIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XVD5SGhvOBoJxg1NlogMD45LFIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:72:0e:5a:3f:6b:2d:9a:52:2b:01:65:be:7a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d50f948686f381a09c60d4d96880c0f8e4b1485
Validity
Not Before: Mar 29 06:01:01 2026 GMT
Not After : Mar 30 06:01:01 2026 GMT
Subject: CN=5862ad71e72c9bf5b4baaef867822d0b991e1374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:98:5d:86:cc:42:4b:6d:a2:42:e6:0c:49:4c:
4e:5c:8c:d8:cf:26:b3:63:b5:78:bc:1d:91:5d:61:
2c:13:f8:84:af:94:4f:6d:c7:81:9c:5a:b6:fe:98:
b8:01:32:ad:f0:f6:da:c6:96:d7:b4:ef:d9:ee:44:
c4:c3:08:74:7c:69:85:92:fb:37:58:3d:6d:17:7f:
c3:ef:f0:09:27:8c:64:f3:67:12:03:9d:5c:a1:f0:
b1:f1:8f:54:2f:ba:c5:03:55:72:38:bb:83:51:22:
36:2d:de:b4:3b:ed:87:3d:0c:43:57:e9:ae:0a:bf:
7e:3c:58:12:56:a4:17:24:13:85:d7:d2:52:6a:8e:
07:0f:d4:a7:be:b7:1b:89:e8:72:ad:ea:a9:12:6c:
db:42:3a:dd:2c:20:80:c6:71:af:63:34:3a:32:d4:
28:a6:58:40:ad:e1:74:0f:a0:6d:00:78:85:16:25:
15:48:5a:d8:3f:88:e7:f7:55:16:68:c6:e9:ab:c5:
06:e5:06:00:e8:f4:f7:db:36:62:f8:79:b9:04:63:
7f:3f:76:9e:d5:2a:4d:f1:d1:df:a3:ea:35:03:fc:
0e:0b:8d:cd:f4:14:95:9b:f1:64:c9:e9:ba:b8:09:
76:51:65:2a:fd:63:5b:c5:e9:3e:95:18:28:1d:71:
e3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:62:AD:71:E7:2C:9B:F5:B4:BA:AE:F8:67:82:2D:0B:99:1E:13:74
X509v3 Authority Key Identifier:
keyid:5D:50:F9:48:68:6F:38:1A:09:C6:0D:4D:96:88:0C:0F:8E:4B:14:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XVD5SGhvOBoJxg1NlogMD45LFIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e44508-1f2b-4668-a51e-0e921418c1b5/1/XVD5SGhvOBoJxg1NlogMD45LFIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e44508-1f2b-4668-a51e-0e921418c1b5/1/XVD5SGhvOBoJxg1NlogMD45LFIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:29:97:dd:d3:7c:9e:55:73:8a:e9:0d:d4:77:13:0c:14:e2:
90:d5:ad:ff:15:04:ee:93:4c:2d:f7:a6:d1:8a:92:9e:db:1b:
75:df:71:c2:53:d6:31:01:4a:68:71:2b:fc:70:a0:a8:30:fa:
51:1e:63:6f:d0:ba:f0:27:6e:d9:4c:a7:c6:f9:5e:34:7c:1c:
46:5b:da:63:e6:6d:4a:e0:12:35:80:24:93:2c:7b:cc:9d:e8:
2b:a2:e4:c8:ab:aa:1e:b5:ff:7e:8c:40:ee:f4:6b:4b:2a:6f:
06:7c:da:46:fd:31:9b:4d:35:74:9a:0a:dc:21:1e:85:0c:19:
4b:33:07:5c:9f:6b:63:06:22:ea:30:ae:5f:ac:9c:4f:86:3f:
65:28:ed:00:8a:de:94:90:96:a4:c8:e0:1b:d0:d8:c8:9a:ee:
88:49:25:6b:60:4b:a7:01:5d:ce:39:0b:66:7b:ad:ac:a4:8c:
26:00:f0:ef:78:48:0f:a0:4f:d5:14:30:de:67:91:c1:1e:53:
54:0d:43:8c:63:5f:2a:2a:fa:cf:19:d7:8f:2b:a5:4c:90:49:
b3:b1:48:5f:63:c1:53:36:a5:83:cd:d2:6a:26:4f:f7:18:db:
f1:4e:65:4c:7b:bf:b1:94:09:70:de:37:c8:d5:78:c2:e5:58:
43:b9:a7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:08 2026 by rpki-client