Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
File: XM97P9h86bzpn5ALZBmdYGvxYGk.mft (raw, json)
Hash identifier: UbwZX0VrTlrQnOahNCco+/kqSoOmRYmmSNFIdrEWYWk=
Subject key identifier: DF:43:CC:63:24:E5:E3:FF:E8:51:8C:EB:1F:90:22:DE:9E:52:57:08
Authority key identifier: 5C:CF:7B:3F:D8:7C:E9:BC:E9:9F:90:0B:64:19:9D:60:6B:F1:60:69
Certificate issuer: /CN=5ccf7b3fd87ce9bce99f900b64199d606bf16069
Certificate serial: 019D27728A869A1CC2009AE3B69FCD30BFC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
Manifest number: 1819
Signing time: Thu 26 Mar 2026 00:01:51 +0000
Manifest this update: Thu 26 Mar 2026 00:01:51 +0000
Manifest next update: Fri 27 Mar 2026 00:01:51 +0000
Files and hashes: 1: KhLnM9UHZFCOQul_YnhOlrlNWQg.roa (hash: F9XQk4xPu6hZHYNZKH9uTFT9zpakfltc+2j9WkGLNVk=)
2: XM97P9h86bzpn5ALZBmdYGvxYGk.crl (hash: 53VrpfQGKAPdsqSCNLSgZv1oOwbI30yRX9EPqWbwqjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:8a:86:9a:1c:c2:00:9a:e3:b6:9f:cd:30:bf:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccf7b3fd87ce9bce99f900b64199d606bf16069
Validity
Not Before: Mar 26 00:01:51 2026 GMT
Not After : Mar 27 00:01:51 2026 GMT
Subject: CN=df43cc6324e5e3ffe8518ceb1f9022de9e525708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c5:71:d5:b4:27:ef:9d:12:c1:ce:6a:80:a1:
49:da:89:ac:1e:2e:1f:4c:b7:bc:d7:d9:e6:d1:d7:
0b:95:47:00:4f:fb:62:a4:9a:e0:c5:c6:57:78:e1:
24:76:ac:28:23:49:e5:98:c2:ae:07:97:1c:a9:aa:
ac:b3:76:41:6c:32:45:3a:f8:da:d0:e4:1e:00:10:
bb:d3:49:f8:de:d3:ac:a2:9e:b6:3a:b9:81:5b:f8:
be:76:b7:51:8a:b4:ac:11:f0:8c:f6:a0:f3:52:0a:
23:30:d2:32:f0:1c:37:96:5c:bd:39:ad:78:48:65:
b9:32:4f:04:85:e7:16:68:4a:92:9d:b9:82:9a:85:
9b:be:d1:da:01:44:dc:cb:75:ba:6c:59:b6:71:43:
9a:07:28:74:b4:4e:a3:3e:9f:9b:d1:c5:eb:50:db:
f1:36:be:7a:f4:ae:71:15:c0:3d:7e:57:0b:8b:b2:
4c:0c:39:00:7f:1a:a8:f9:b9:a2:bd:e4:f1:61:78:
a1:3c:aa:1e:4a:6b:5c:04:61:79:16:6e:73:ce:ef:
98:ea:e7:62:c8:90:d7:04:7c:4d:56:43:36:c5:aa:
35:e9:23:dd:ab:49:81:35:1f:80:33:06:26:21:e3:
e4:11:e9:c1:e3:3c:2b:ca:7e:b5:80:86:75:ee:1f:
23:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:43:CC:63:24:E5:E3:FF:E8:51:8C:EB:1F:90:22:DE:9E:52:57:08
X509v3 Authority Key Identifier:
keyid:5C:CF:7B:3F:D8:7C:E9:BC:E9:9F:90:0B:64:19:9D:60:6B:F1:60:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:f0:6d:51:52:d2:e3:34:aa:74:97:f2:5c:8c:fb:a5:bd:19:
7c:25:6a:2a:ad:a7:4d:ea:2e:17:55:02:a7:d3:32:a3:7a:76:
c1:ba:f1:00:7e:5b:9b:7e:be:7d:c0:da:18:ea:f1:2f:9f:b6:
39:84:0e:8d:c3:8f:45:c5:86:09:44:71:b3:e0:f8:de:8e:b5:
7a:e4:71:ab:7e:0f:06:4c:ce:ae:e2:8e:cf:3b:e6:fa:ce:f5:
cc:9b:7a:76:8b:37:1c:aa:29:6a:30:2c:0f:ad:bb:e3:05:49:
24:5f:28:d0:36:d8:cd:d8:3d:27:b9:05:db:1d:99:b8:34:f0:
c0:55:4b:66:9a:cb:11:bf:fa:17:cd:59:c2:c8:27:59:f3:f3:
96:a1:36:e0:a0:25:aa:0f:7a:e3:98:62:8c:68:75:88:b9:57:
76:9b:e5:f4:fa:46:92:9f:d2:b3:56:b8:59:8d:a2:82:af:cd:
1f:71:f9:fa:dc:7e:8e:65:2e:f2:6e:67:fc:41:ef:28:89:e6:
38:36:19:2d:f2:81:c8:89:ab:ff:4e:e1:4a:60:4a:57:4f:99:
d0:d0:14:2f:62:56:56:64:32:cc:81:7d:fe:b4:a1:df:92:50:
0a:7b:7b:9d:99:8b:e0:0b:6d:b2:5f:d2:26:8e:15:05:aa:a4:
68:64:3b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:29:55 2026 by rpki-client