Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
File: XlTVGjJHsX9vlqDM4lMBktyfdCI.mft (raw, json)
Hash identifier: K3poqgNa+i8q28n2r4vJkBdystp74r0wKul17gg5nuQ=
Subject key identifier: 96:8D:DB:8A:4A:8A:74:D8:EB:DF:B6:CF:45:BE:34:82:D4:2C:06:D1
Authority key identifier: 5E:54:D5:1A:32:47:B1:7F:6F:96:A0:CC:E2:53:01:92:DC:9F:74:22
Certificate issuer: /CN=5e54d51a3247b17f6f96a0cce2530192dc9f7422
Certificate serial: 019D38D2FB3BC034E98BDDAC139048C49BF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlTVGjJHsX9vlqDM4lMBktyfdCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
Manifest number: 0860
Signing time: Sun 29 Mar 2026 09:00:44 +0000
Manifest this update: Sun 29 Mar 2026 09:00:44 +0000
Manifest next update: Mon 30 Mar 2026 09:00:44 +0000
Files and hashes: 1: XlTVGjJHsX9vlqDM4lMBktyfdCI.crl (hash: SZEMNkY8PN61mVfmIDnQaXKX43y55eZcjbr5KGEeutA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlTVGjJHsX9vlqDM4lMBktyfdCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:fb:3b:c0:34:e9:8b:dd:ac:13:90:48:c4:9b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e54d51a3247b17f6f96a0cce2530192dc9f7422
Validity
Not Before: Mar 29 09:00:44 2026 GMT
Not After : Mar 30 09:00:44 2026 GMT
Subject: CN=968ddb8a4a8a74d8ebdfb6cf45be3482d42c06d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3d:47:10:b0:fd:cb:35:43:31:04:4a:ad:f4:
5c:1c:9b:f4:58:0e:f4:c4:6e:b9:7c:af:f9:0d:f5:
45:07:b7:8c:b5:7f:56:b4:14:e7:0f:5a:af:07:a7:
e5:58:db:ac:bd:c1:76:f8:9d:a9:6e:67:13:f4:a5:
62:4d:90:4e:c3:87:0e:1f:e1:b7:a7:32:f7:cc:29:
13:e0:fb:43:3b:e3:b6:ef:6f:db:dd:43:31:3a:4c:
1e:67:24:d5:3d:4d:e7:49:0d:e3:03:4d:61:c6:d3:
1e:15:a3:4d:8b:c1:d8:68:19:40:39:9f:ef:e7:82:
60:94:51:e3:a0:7a:88:6b:d9:1e:7c:73:98:39:ac:
1d:4b:96:66:67:8f:4c:00:d8:00:ca:ac:1a:11:ca:
c3:2d:80:29:c5:65:6a:e5:90:60:b7:22:d9:93:d0:
d8:68:d2:76:76:7f:9d:b9:38:41:be:ca:d7:ca:59:
0e:a0:bf:f9:ff:49:cd:ee:67:f8:24:79:08:f4:97:
8b:00:fe:82:1a:b4:d5:7c:6b:30:4b:98:9b:fd:12:
37:eb:b3:db:e2:85:23:1c:e3:c1:7e:d5:aa:2e:9c:
ea:6f:fd:5d:b6:c4:5c:dc:8e:5e:55:63:6d:2f:e0:
5f:c1:d2:e7:9d:46:eb:d6:8e:8b:73:ad:22:6d:30:
2e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8D:DB:8A:4A:8A:74:D8:EB:DF:B6:CF:45:BE:34:82:D4:2C:06:D1
X509v3 Authority Key Identifier:
keyid:5E:54:D5:1A:32:47:B1:7F:6F:96:A0:CC:E2:53:01:92:DC:9F:74:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlTVGjJHsX9vlqDM4lMBktyfdCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:27:1d:5d:94:d6:b2:23:eb:a5:59:f7:b4:47:ee:87:18:d5:
0a:e3:a9:ee:6d:bc:1c:e7:9c:bd:1a:f2:27:07:8e:d5:45:8b:
82:ed:9c:a9:38:d9:f5:d5:af:53:7f:99:5b:01:50:53:d7:ec:
dd:0e:fa:2c:d3:d9:cc:ff:fb:3e:cc:ea:25:cf:f5:b0:d0:57:
c5:88:80:a0:72:12:64:cd:cb:0e:c1:65:29:d6:01:7a:98:37:
f4:c6:b4:93:b2:e5:de:ca:00:88:2f:79:98:aa:26:71:d4:2e:
bc:0d:cb:74:8d:31:70:40:fd:7b:3e:95:19:9d:ef:9a:3f:34:
98:86:8e:a9:66:09:34:aa:fa:24:29:79:3d:48:56:bf:cb:cd:
51:97:d2:ae:a6:e3:0f:4b:7d:b0:86:31:22:f0:95:03:51:ef:
f0:60:f4:7b:51:20:40:45:cd:d8:35:16:2e:34:4d:7f:3b:bd:
ae:b8:e2:c7:97:da:fa:db:7c:eb:32:d2:ab:4f:87:4c:15:3f:
c3:33:1a:d8:4c:ef:fe:59:0a:e8:b9:bc:b6:60:88:e2:22:53:
3b:6d:69:8c:95:83:c5:e7:4a:b2:40:04:d3:d3:9f:a6:58:8f:
c3:80:90:a4:ac:ae:e9:5c:f7:70:e5:13:89:f6:90:66:34:a4:
ab:53:d0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:15 2026 by rpki-client