Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
File: XzpsIZQcHhO__E1E1hvSWV_dj-g.mft (raw, json)
Hash identifier: v2vWQVGNn4OLXFXU9qBzwZF9W9TQyCxYL6w3SCkNLJ0=
Subject key identifier: 61:B5:43:BD:10:AD:DC:EC:4A:4B:CE:74:49:AE:11:30:BE:D9:9C:5C
Authority key identifier: 5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8
Certificate issuer: /CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8
Certificate serial: 019D2884790FEE3D33A328E4A11872C4AB48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
Manifest number: 0765
Signing time: Thu 26 Mar 2026 05:01:03 +0000
Manifest this update: Thu 26 Mar 2026 05:01:03 +0000
Manifest next update: Fri 27 Mar 2026 05:01:03 +0000
Files and hashes: 1: TYmQbCMoT4fS2qLD8XTST39V7ao.roa (hash: AGtO8iqNaCFj7ECH8S64l5TD2JUqi3IXF+NQdgnWnfk=)
2: XzpsIZQcHhO__E1E1hvSWV_dj-g.crl (hash: /9U2a26ANtfr3q+SO4s/cFT8084hWOyS3eNaHbJ2aqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:79:0f:ee:3d:33:a3:28:e4:a1:18:72:c4:ab:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8
Validity
Not Before: Mar 26 05:01:03 2026 GMT
Not After : Mar 27 05:01:03 2026 GMT
Subject: CN=61b543bd10addcec4a4bce7449ae1130bed99c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ff:17:3d:b0:ed:0b:de:80:cd:04:f6:d7:3b:
24:c1:f4:50:eb:aa:51:1a:06:4d:b0:e3:06:e7:b0:
08:02:49:94:be:3b:f3:6b:91:30:2c:38:40:b8:fc:
14:aa:df:a2:d9:f2:fb:a0:4e:c3:f3:44:5c:14:61:
56:59:18:9c:4c:e7:fa:b8:79:51:32:79:25:30:9a:
0e:9b:dc:38:1d:35:68:09:60:0e:17:f1:5d:7e:89:
f4:63:57:f9:96:cd:92:05:fb:75:3f:4c:e0:b1:b2:
58:31:39:11:80:73:e5:11:63:f7:8b:b8:53:0a:de:
07:cc:fc:97:04:a1:1b:78:c4:6e:4d:1b:1b:66:cd:
a0:07:a2:a1:fc:48:b1:42:d9:e9:61:85:42:10:e2:
c2:75:c4:48:ab:cb:f1:50:da:ea:d0:94:f8:03:5a:
05:42:45:86:a5:7f:f2:e1:0f:80:7d:af:51:4a:fb:
23:57:0f:c1:0f:c3:46:69:80:b7:ca:05:d8:36:df:
a4:2e:b2:c4:97:a4:d8:f5:42:ca:b1:fd:73:27:0b:
fa:02:a3:7e:48:b7:6e:7b:42:b9:3b:b1:84:14:4a:
d0:86:24:c3:62:8d:63:59:ff:56:81:49:86:34:71:
d4:a5:eb:df:c7:8c:60:5c:46:af:7c:b6:7b:ff:a2:
a0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B5:43:BD:10:AD:DC:EC:4A:4B:CE:74:49:AE:11:30:BE:D9:9C:5C
X509v3 Authority Key Identifier:
keyid:5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:40:fd:f8:f7:a5:73:65:08:19:13:d0:ba:66:25:c8:c3:38:
7f:d2:27:83:50:39:e1:0c:f4:f7:58:d4:4b:6b:2d:5e:f8:c8:
98:30:7f:be:a2:9f:b7:54:e2:a9:5f:d8:55:0e:f8:ba:5a:bc:
af:f2:d5:83:c1:56:4d:9e:9f:32:bc:a7:6b:60:75:67:54:9e:
fa:b0:e1:46:f4:d1:b4:29:12:61:5b:ec:7a:7d:9b:ee:8d:c3:
eb:68:23:70:29:54:e4:71:fa:ac:84:83:3b:c9:0e:04:ba:ec:
ec:1d:cd:00:c1:b2:09:15:b6:16:f8:49:60:73:c7:ce:9f:71:
b2:cd:16:a4:2d:94:f7:d9:d8:6d:ca:b8:3f:e4:2f:78:43:59:
fe:0f:3f:66:f2:38:ce:2b:35:ff:cd:07:0b:1d:fd:d5:ad:fd:
2d:d5:d4:da:aa:42:95:cc:e5:74:0e:21:dc:f4:e7:22:f7:5f:
1f:a4:f7:b6:9c:4a:be:2f:8a:cb:ba:3a:52:e3:73:77:39:d8:
fd:4f:61:21:ea:c7:b6:68:18:65:3f:cf:98:21:64:f7:25:dc:
97:18:e0:d3:d7:d9:ed:7a:56:77:f8:89:28:8d:fe:62:68:2e:
29:79:93:ac:95:9c:fe:76:18:25:47:8c:17:e0:8d:8a:03:ad:
91:48:fd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:30:40 2026 by rpki-client