Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
File: XjFIuezSDl_yRlqc0QGtqa5QjVc.mft (raw, json)
Hash identifier: nHyICJt4tMxtVgPN2xor2X9XrTG0y9Wh/64Btd1rUAM=
Subject key identifier: 59:D2:83:EC:3B:45:CD:EE:28:49:65:F4:4F:AE:F1:82:AA:FF:5A:C1
Authority key identifier: 5E:31:48:B9:EC:D2:0E:5F:F2:46:5A:9C:D1:01:AD:A9:AE:50:8D:57
Certificate issuer: /CN=5e3148b9ecd20e5ff2465a9cd101ada9ae508d57
Certificate serial: 019D2AA9E8272FBF959866FB752C498D006C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
Manifest number: 1446
Signing time: Thu 26 Mar 2026 15:01:11 +0000
Manifest this update: Thu 26 Mar 2026 15:01:11 +0000
Manifest next update: Fri 27 Mar 2026 15:01:11 +0000
Files and hashes: 1: JA3YuaJEsqvd9eusygyCJH9iklY.roa (hash: 9CJlUPdmf0qr6MJ6TlKKLBohMPRtzMpsz+bJMGO5jMQ=)
2: XjFIuezSDl_yRlqc0QGtqa5QjVc.crl (hash: O9/bUr0M2sXCrZkMkqT2I4y1JAAemKmmDGwSFnRqClA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:e8:27:2f:bf:95:98:66:fb:75:2c:49:8d:00:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3148b9ecd20e5ff2465a9cd101ada9ae508d57
Validity
Not Before: Mar 26 15:01:11 2026 GMT
Not After : Mar 27 15:01:11 2026 GMT
Subject: CN=59d283ec3b45cdee284965f44faef182aaff5ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a1:ac:0d:a7:d6:de:e8:51:17:97:aa:0a:5a:
66:2b:03:23:89:9b:e0:ac:70:d6:2a:ef:3d:87:c6:
93:e3:25:e5:e7:4a:96:cd:49:32:46:da:25:e0:77:
4f:1e:c1:ef:c0:34:94:02:55:d9:1d:23:4e:3f:71:
0e:1e:ba:1c:cc:f8:a9:ce:25:45:0b:d5:6f:26:89:
47:f7:2b:a6:3e:fb:7d:05:af:7c:54:64:33:31:94:
cf:98:78:ed:3d:af:97:af:a7:3b:ec:2d:84:47:a0:
f7:76:7d:9f:42:7c:cf:f9:82:f5:69:0a:2b:2d:29:
21:7c:2f:d8:7a:0a:af:69:14:ca:05:18:7f:fa:c4:
d9:24:4f:38:ca:ba:7e:f9:12:72:4a:98:09:8d:e6:
bf:37:d4:78:24:37:92:cc:7e:1d:8c:9b:00:95:08:
24:03:6c:45:7a:dc:a4:22:2b:49:40:7c:0b:52:26:
ff:f4:e1:ca:dc:b0:c8:e3:a8:06:6b:d0:38:45:a9:
37:e5:f5:f3:e5:16:24:8a:a4:cb:1a:74:57:9d:b9:
10:d1:7c:f3:c2:3e:03:4a:36:33:25:59:1c:62:cf:
6b:0f:3c:e0:9e:ba:56:93:db:f6:ca:f3:d3:a0:74:
55:55:68:a4:5d:9c:23:f8:78:48:43:59:ad:57:65:
29:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D2:83:EC:3B:45:CD:EE:28:49:65:F4:4F:AE:F1:82:AA:FF:5A:C1
X509v3 Authority Key Identifier:
keyid:5E:31:48:B9:EC:D2:0E:5F:F2:46:5A:9C:D1:01:AD:A9:AE:50:8D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:0f:1c:13:ea:67:34:74:96:a6:6d:32:b0:67:63:a0:13:42:
00:c4:c0:19:4a:55:ad:9d:a9:53:b2:a2:8f:20:13:cb:66:d0:
ab:55:56:0e:b8:d1:59:10:36:0a:9d:26:1f:ce:78:ca:16:c6:
43:87:c1:86:e4:1b:32:d5:73:0b:1a:dd:3a:2a:c3:5e:d0:56:
f4:de:d1:2c:cb:5d:6c:69:b8:98:9e:0b:c2:dd:11:44:3d:e5:
b1:59:03:91:49:c1:73:0c:82:5c:0f:75:91:86:94:bb:72:be:
bf:43:17:ac:e3:3c:07:19:0f:a1:59:00:1d:bb:3d:a5:b4:ea:
53:15:46:31:6f:68:9a:7e:8c:54:15:d1:19:1c:77:de:8c:73:
3c:2b:62:a4:88:66:d7:a6:ad:b7:63:64:6d:2f:6f:b8:7d:c3:
a8:4d:be:b1:b4:a7:83:37:18:e6:3a:59:bf:c8:d4:45:c6:2a:
e4:05:0b:77:12:71:17:d9:2d:0a:bc:2b:92:7f:22:0b:b9:3b:
06:6f:a4:4c:69:77:28:61:e7:97:3e:ec:ce:ce:ef:c3:e3:c2:
2a:5b:4d:2e:24:45:f8:01:cf:f7:5e:02:17:3b:fd:54:d8:6f:
e2:6f:7a:14:e1:b5:26:ea:63:95:5f:ef:05:8f:f5:b1:f2:1f:
ea:cf:00:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:32:43 2026 by rpki-client