Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
File: xD5aLPbSgBXbyqKFDSATs2XkyTE.mft (raw, json)
Hash identifier: rkorEehlLobRS/92E6VbpFW+iyhheQOZ/PPOlsZames=
Subject key identifier: 16:C2:D5:9B:9B:10:1D:7E:6F:95:53:C1:6A:D0:E8:72:47:17:D5:54
Authority key identifier: C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31
Certificate issuer: /CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931
Certificate serial: 019D26CD2E95B864FC37D3526009B654C6FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
Manifest number: 0681
Signing time: Wed 25 Mar 2026 21:01:14 +0000
Manifest this update: Wed 25 Mar 2026 21:01:14 +0000
Manifest next update: Thu 26 Mar 2026 21:01:14 +0000
Files and hashes: 1: gW00o8n4Rs81BAgnMAtJNPDGHdU.roa (hash: SSNtGXPA/36/YiPMJlKvxQTbaar7XDaEXBXVj0gHR90=)
2: xD5aLPbSgBXbyqKFDSATs2XkyTE.crl (hash: BiAYpEcr2So5q+1zd76x/XOa3tViFVBhGxEmNF9I2hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:2e:95:b8:64:fc:37:d3:52:60:09:b6:54:c6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931
Validity
Not Before: Mar 25 21:01:14 2026 GMT
Not After : Mar 26 21:01:14 2026 GMT
Subject: CN=16c2d59b9b101d7e6f9553c16ad0e8724717d554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:57:d6:31:fe:a3:06:b9:c5:83:73:cb:32:f9:
0e:87:85:b7:5e:8b:28:c4:18:f0:7b:85:1b:03:db:
13:93:5d:66:44:ce:ef:da:df:8d:e9:17:ae:15:67:
91:04:45:dc:36:d2:5d:80:c1:9e:6b:be:36:73:f4:
71:f1:fc:38:26:c7:14:ca:08:ac:f0:8b:c4:b4:2c:
28:64:78:3c:4b:e9:8d:c9:76:b6:12:2c:b6:2f:a5:
e7:a9:34:51:cf:cb:75:e0:ef:4a:90:58:25:92:b5:
26:96:d5:fb:12:8e:2b:22:fa:6b:35:f1:14:17:4b:
76:c9:55:2f:63:99:3e:c6:e4:86:1f:f7:aa:7a:e2:
3e:45:8a:eb:86:da:4f:4f:2b:e0:f8:aa:aa:81:bd:
02:e8:3f:77:52:42:7d:5f:3d:d1:bd:8e:23:58:09:
fa:0f:c6:db:f6:1e:21:e0:f5:29:f2:79:28:4d:02:
2d:48:ba:8c:ad:6b:c9:53:c0:0b:18:da:db:7f:fa:
00:ba:72:25:d7:62:bf:2b:1f:99:76:d7:85:52:64:
88:4d:2a:ab:8b:61:f0:14:42:c5:29:d7:cd:b0:e5:
99:a6:c4:4f:da:fc:5c:20:4c:57:e2:07:e2:f9:7e:
0d:a9:23:8e:8a:2a:5f:d4:18:79:36:ac:28:bb:87:
03:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C2:D5:9B:9B:10:1D:7E:6F:95:53:C1:6A:D0:E8:72:47:17:D5:54
X509v3 Authority Key Identifier:
keyid:C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:df:88:b2:34:38:2b:15:a3:07:74:2e:74:4a:3f:5c:1d:4c:
1c:1f:f3:9d:62:f4:86:8d:50:d7:66:fb:bc:e8:e5:ba:73:01:
f6:95:a7:1a:08:07:b5:2b:95:9a:71:f5:d4:85:46:1b:c1:18:
a5:4e:8b:de:27:75:3a:c2:c1:90:b3:03:84:59:01:5a:4f:b3:
8f:a4:d7:9b:56:cd:bb:c6:58:50:4c:6b:80:12:8f:85:91:89:
2b:e2:13:3c:4e:6c:f9:53:f1:5c:d4:43:df:b6:6d:0f:0d:1e:
ea:3f:9b:21:ae:e0:de:57:c1:e6:05:0f:7a:0c:0b:a0:47:21:
f5:d1:60:e3:3e:30:8e:3a:30:69:19:5c:59:c6:a7:af:3b:a9:
28:92:df:22:d1:62:28:0e:3b:c8:81:cb:1a:50:0e:6c:46:a2:
19:65:7d:0f:ef:87:52:c7:63:fe:2d:72:25:f9:0e:11:58:39:
3f:76:12:d1:a6:cb:22:cc:02:7d:d1:8d:f6:71:80:96:76:3c:
5c:2e:bf:00:31:37:a7:22:50:cb:b1:de:bb:d6:ec:d8:c4:6f:
09:52:a8:a6:ec:3c:f5:80:b9:23:d3:ff:46:17:b2:53:9e:14:
e5:21:eb:e1:5e:7e:11:ec:11:cd:36:6b:73:55:e7:ca:30:bb:
51:29:5c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:42 2026 by rpki-client