Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
File: X1mAEy0ZPicO0e_grShJ_oqw12w.mft (raw, json)
Hash identifier: CYBG7bfpfUb45SPExr5bNMMR1URECCboPhBhTcOmmd8=
Subject key identifier: 58:B2:0B:61:B4:14:FF:20:03:DA:6C:0C:68:1F:C5:13:AA:2E:E0:DC
Authority key identifier: 5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
Certificate issuer: /CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Certificate serial: 019D38D2B5BA5362FABF2DACEFF55B962691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
Manifest number: 1896
Signing time: Sun 29 Mar 2026 09:00:26 +0000
Manifest this update: Sun 29 Mar 2026 09:00:26 +0000
Manifest next update: Mon 30 Mar 2026 09:00:26 +0000
Files and hashes: 1: 6-Ew-si9J0hf6ZarrCVeQjfqjE4.roa (hash: ljHxNRtveUXCickR/eyPdSx4OKRRH+YbhLZnTAcXkXg=)
2: I2tNxhGFF35MT6ATAQ34a1mldMA.roa (hash: aCwLuTKx+lT5TRi4XqsraXtHCM8YuZl8sxF9wyX0Vvo=)
3: JCTQgcUELCWna8Z80DBMEn0zGk0.roa (hash: aQm1A8aMpcGmR9Y0OhWPfstPmLBs4VFn6LiSckCGnCs=)
4: X1mAEy0ZPicO0e_grShJ_oqw12w.crl (hash: qNteRekopvsmxwa5har/2rQ9N+bcp1b3ENCQ8RngY5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:b5:ba:53:62:fa:bf:2d:ac:ef:f5:5b:96:26:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Validity
Not Before: Mar 29 09:00:26 2026 GMT
Not After : Mar 30 09:00:26 2026 GMT
Subject: CN=58b20b61b414ff2003da6c0c681fc513aa2ee0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d5:ff:e9:0e:66:32:c4:d7:b2:43:2c:cf:48:
a0:74:1d:02:62:3a:d9:a9:11:46:40:6e:30:7a:ef:
bc:70:c2:b1:14:f3:9f:7d:16:7f:ab:07:a8:00:11:
88:44:74:01:fd:25:f8:ac:89:21:08:c2:47:4d:03:
48:d1:b5:86:9a:6c:2a:b7:a2:53:5e:83:79:35:08:
45:f0:7b:1f:b3:1e:14:36:cc:00:92:97:24:0a:39:
ae:aa:65:35:2c:42:db:9e:7c:9d:7f:13:9b:ee:38:
ad:f1:9c:5e:87:7a:09:03:66:59:08:5b:b0:c8:2d:
ba:b0:14:91:f8:cc:ec:f2:7f:cd:26:3b:75:af:77:
bc:88:22:d6:ae:0e:0a:c1:71:ee:34:68:03:23:b3:
93:0b:8f:74:10:64:d3:65:68:b0:79:2d:fd:89:79:
c3:c9:d2:2e:2e:24:76:5b:45:2a:20:96:6f:a9:90:
6f:6f:95:54:9c:78:ce:83:1b:e6:f0:ba:c2:93:99:
8a:15:57:eb:55:3b:1c:77:53:81:e1:84:d1:16:1f:
0d:be:55:7d:f1:ed:d8:f3:6c:b3:d3:57:02:82:06:
82:94:f4:ba:e0:6f:54:c6:cc:3a:03:c7:3e:65:ca:
82:90:ab:44:d2:5b:13:9a:02:b7:30:92:d6:be:95:
e9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B2:0B:61:B4:14:FF:20:03:DA:6C:0C:68:1F:C5:13:AA:2E:E0:DC
X509v3 Authority Key Identifier:
keyid:5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:b8:0f:d3:66:52:90:1c:23:8a:e1:71:c8:77:63:75:c9:f0:
87:34:22:75:a5:3c:18:1a:43:0a:a1:e2:2b:8b:49:ee:23:a9:
c9:2e:2b:7c:18:b9:39:ed:03:45:51:c6:ae:18:26:a3:6a:99:
ca:17:d1:ee:87:7f:a5:a8:ea:8f:23:4e:65:95:67:83:e3:37:
30:77:66:de:80:97:5a:65:bc:95:2e:69:67:33:92:ee:25:de:
0b:8c:55:df:d5:05:cd:37:7a:59:b4:f3:10:15:45:7c:27:f4:
aa:07:cd:da:95:07:38:5c:3f:55:05:c7:06:e3:28:ab:55:6a:
24:b9:d6:31:40:98:ad:91:ed:de:1c:8f:47:bc:4c:d2:fc:f1:
b4:d9:3e:e5:5d:b1:59:e9:6d:10:cb:36:14:3b:71:34:dc:58:
ab:f0:73:fb:aa:dc:a3:2e:2f:93:13:cf:f6:f5:42:e5:1a:85:
cc:d6:55:38:11:51:37:fe:f2:91:3a:70:48:fa:9f:cd:1d:13:
aa:5b:94:c5:bc:ee:df:84:0d:08:be:09:41:c0:f4:46:a5:56:
4a:fb:c7:75:3a:d0:42:36:ae:74:d5:82:26:03:8b:f0:76:50:
71:96:01:f0:37:f6:17:90:12:6d:d3:03:56:20:c6:65:5b:94:
bb:16:a1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:11 2026 by rpki-client