Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
File: Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft (raw, json)
Hash identifier: oC8jCDN2EnH/bWz7UaePFweUoFcDpNF+NPoY6REsfpY=
Subject key identifier: 90:FD:CE:BB:5A:96:1F:F3:68:EE:E5:F3:A1:63:E3:42:2A:AF:FC:BC
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Certificate issuer: /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial: 019CE85BC7E5472A9480703CC476CA7CFF94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
Manifest number: 08AD
Signing time: Fri 13 Mar 2026 18:00:54 +0000
Manifest this update: Fri 13 Mar 2026 18:00:54 +0000
Manifest next update: Sat 14 Mar 2026 18:00:54 +0000
Files and hashes: 1: ATrhcvfZe2XqHKs47Dt9M3QKFhs.roa (hash: PefWPwiiidlJBpS7I/NB+iVKQJ0FsVbJRiY+10cA0F4=)
2: HxvfpX5aIfEn1UqJ_JQ9JVA67YY.roa (hash: 7RSyHDJ1xj0KCQZdzozVZqOlI9r3j6g8qDcJh+l/iTA=)
3: Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl (hash: nGKPRedLW69fXIF8birrI/VLQRlbkPGt+0T5AiA2bZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e8:5b:c7:e5:47:2a:94:80:70:3c:c4:76:ca:7c:ff:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Validity
Not Before: Mar 13 18:00:54 2026 GMT
Not After : Mar 14 18:00:54 2026 GMT
Subject: CN=90fdcebb5a961ff368eee5f3a163e3422aaffcbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d6:d6:46:fa:ef:93:11:39:18:8e:47:38:bb:
fe:b1:ae:5a:4f:9c:e5:7f:e1:47:9f:ea:af:2d:1b:
a2:98:2a:37:b3:ed:8d:86:b6:28:8d:f7:0f:79:e8:
06:c1:b5:72:95:b5:4d:c0:d1:b6:cb:5f:c9:2c:95:
e4:ac:ef:a2:53:06:03:8f:5f:da:99:fd:58:eb:9e:
c3:d5:df:f6:86:e6:61:3a:eb:2c:0c:2a:26:02:e8:
a2:0d:38:19:93:c1:2f:fd:91:31:40:61:53:5d:df:
68:db:84:eb:ce:b3:ef:60:7e:11:3d:a6:c2:4b:80:
3e:42:5f:c2:a4:e7:37:29:32:24:16:db:a7:0d:b7:
37:eb:1d:eb:b8:a9:e7:72:c2:2e:04:d4:fd:13:62:
f4:e2:9a:f3:75:be:76:fa:57:ee:07:31:ef:9b:b1:
47:37:cf:c0:c1:9a:f0:96:95:76:d6:7d:38:ca:bc:
01:b1:93:cf:27:08:92:8c:f3:3c:dd:c1:f7:05:c7:
86:59:1f:58:f1:9d:1e:10:07:6e:bb:cc:82:14:48:
e0:f1:4f:5e:05:d1:23:f1:7b:ec:bd:ca:f2:e2:64:
bf:4b:e7:31:52:4f:da:43:db:f6:29:e6:f5:05:99:
03:8c:11:9c:63:da:63:ca:86:47:a3:ca:e7:f2:d9:
be:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FD:CE:BB:5A:96:1F:F3:68:EE:E5:F3:A1:63:E3:42:2A:AF:FC:BC
X509v3 Authority Key Identifier:
keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:66:00:e7:0d:3f:64:2f:33:7b:64:18:82:e4:d6:67:dd:4d:
ca:38:f9:29:93:59:9a:7f:22:31:8c:26:cf:55:68:d1:98:63:
b0:08:0e:49:a0:ec:a0:d9:f3:3d:69:1f:b3:2b:59:91:8b:3d:
16:72:a1:14:12:2f:61:db:33:8f:bf:19:6e:8b:96:ec:56:b0:
ef:6b:76:18:43:3c:66:dc:99:39:4d:52:d1:bb:90:ad:80:b7:
b1:83:cb:11:c9:a3:86:da:39:0f:c7:66:e8:c5:a5:72:fe:22:
8f:0b:44:92:0b:c8:8a:a7:f7:02:26:fe:1c:d6:7c:71:b6:2a:
58:53:aa:5c:3e:b7:67:0c:8a:31:a8:4b:2e:c6:bf:d9:68:07:
00:c3:e3:ab:ed:d7:06:7b:a6:be:d6:6e:a4:f9:74:b8:36:ed:
ce:d4:c3:b1:a1:4e:a4:21:70:fe:c4:89:b2:c1:26:54:2f:09:
f6:0a:35:cb:af:74:7e:f0:ff:49:32:94:09:df:0b:fc:b5:5e:
6f:f6:20:69:39:6f:46:6d:b3:5e:bf:92:1f:0e:0d:9c:b6:e4:
2b:8c:c0:87:76:e2:81:79:c3:1f:96:15:08:e1:05:36:89:e2:
b3:6a:3f:18:a6:07:bb:d6:00:a6:32:bb:1e:c1:0c:3f:11:d7:
2d:35:61:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 21:31:54 2026 by rpki-client