Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft
File: XuAEvvpVPds1Vk-3disF6yIuz5M.mft (raw, json)
Hash identifier: N+QfTbXwLvz8pyMKPi0QUW5OWrmV9amoxyWjujjCbr4=
Subject key identifier: 89:05:34:CA:AA:6C:EB:96:98:36:2F:67:64:32:15:DC:B2:8B:B0:C5
Authority key identifier: 5E:E0:04:BE:FA:55:3D:DB:35:56:4F:B7:76:2B:05:EB:22:2E:CF:93
Certificate issuer: /CN=5ee004befa553ddb35564fb7762b05eb222ecf93
Certificate serial: 019D2772D19CBD927708F7F151D9E8BD54F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft
Manifest number: 10ED
Signing time: Thu 26 Mar 2026 00:02:09 +0000
Manifest this update: Thu 26 Mar 2026 00:02:09 +0000
Manifest next update: Fri 27 Mar 2026 00:02:09 +0000
Files and hashes: 1: AnmyPTbeKIdDpKQo2ow_d3sowCk.roa (hash: 5yDe2nBXJJOjrwl2r1aO5EGRjZW/0EOoxp3H2cvGJfM=)
2: H2Ow2vJleUpffVQJUaw-DrOP25Q.roa (hash: KI8QYq2nupDeoMFFlx5O6qkC1YhqNdHz/2qG81EcAxI=)
3: OgDedPoLqQ8e0IHdzPTL4sAzlxc.roa (hash: B++2fKZYAzjlOxy+tDnJEo09oVmzZa6HnhPwxHljg8k=)
4: XuAEvvpVPds1Vk-3disF6yIuz5M.crl (hash: 6Ld4qxCJQrkB0mGW63cxXQJXsLOM970LCmEkUtipAno=)
5: zmd5DMlEMs7x1X9PCKsNsTMW85A.roa (hash: +YU6hVZe0+5DtmTz9/lx0AEtMcLkshGqyIbMlS0ia0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:d1:9c:bd:92:77:08:f7:f1:51:d9:e8:bd:54:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee004befa553ddb35564fb7762b05eb222ecf93
Validity
Not Before: Mar 26 00:02:09 2026 GMT
Not After : Mar 27 00:02:09 2026 GMT
Subject: CN=890534caaa6ceb9698362f67643215dcb28bb0c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:89:10:42:5b:b2:26:2e:a0:56:d4:54:d4:b6:
d6:d5:d6:0f:37:4d:37:17:e8:6b:41:0e:24:f8:91:
77:e2:73:f2:89:ea:9d:cb:3e:79:63:ea:f1:d7:e5:
4d:59:16:65:6c:18:03:e8:4c:f9:0e:8c:d4:fc:d5:
90:03:6e:9f:59:ad:b6:55:ea:5c:06:00:f4:74:d1:
70:40:32:8b:1e:ef:35:77:92:51:a6:fa:a2:4d:0e:
90:8c:49:03:2f:f4:44:bf:25:44:62:01:3b:9d:df:
27:82:78:f9:98:f6:82:a4:38:f0:96:6a:81:c9:99:
aa:f8:e1:eb:d7:3e:8f:9e:cd:87:e1:3a:8d:d4:07:
8a:ef:71:70:20:ba:5b:96:34:37:72:9f:99:2f:8c:
79:7b:31:1b:71:88:8a:89:52:3f:41:1d:b7:a4:0f:
46:77:ec:b0:0c:4b:75:8f:c4:60:42:14:c6:bf:ad:
55:c5:15:d9:87:01:bf:ef:b4:f4:83:13:96:4b:9c:
0f:cb:b7:62:fc:f1:19:c8:c6:f0:17:68:d4:96:66:
c9:3c:7d:ce:ea:d7:ac:4a:21:75:22:57:76:09:d5:
ba:a6:3b:b5:69:e2:3a:37:5f:c0:17:3f:fa:15:5d:
1f:17:e2:c6:86:3a:87:4c:10:62:08:c3:72:d6:c7:
97:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:05:34:CA:AA:6C:EB:96:98:36:2F:67:64:32:15:DC:B2:8B:B0:C5
X509v3 Authority Key Identifier:
keyid:5E:E0:04:BE:FA:55:3D:DB:35:56:4F:B7:76:2B:05:EB:22:2E:CF:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a2:fb:53:50:03:1a:31:b1:29:6e:f1:47:cb:a2:f0:6b:e7:
2c:fe:1b:3c:42:e8:e2:72:3c:ed:b8:58:84:96:90:1a:7d:48:
ef:0e:c6:de:11:b5:ca:65:d4:f6:87:e5:1b:d7:d9:d2:54:b7:
d1:5e:87:0d:de:16:93:12:d2:aa:3f:14:53:98:3a:ad:fa:54:
56:10:1d:21:61:60:ac:cc:da:20:d5:32:56:8c:34:66:01:c8:
e7:46:fe:6c:5a:18:c0:c4:81:e0:82:a6:22:9c:98:b9:c8:37:
aa:94:c5:cc:99:7e:1c:2b:0c:58:be:59:6e:bf:98:8c:0e:f8:
00:2c:a5:fe:d9:2d:7c:15:0f:27:28:fe:d7:43:bd:9c:b9:d7:
47:f4:aa:31:29:37:d6:41:88:41:1b:66:47:4d:a5:0e:a2:20:
92:62:7d:cb:a8:e5:d4:54:83:24:c0:e3:35:48:7c:25:c6:9a:
16:a6:0b:e5:e0:5f:3d:1c:2f:3e:f9:06:f8:e0:e6:cb:1f:e4:
7f:ad:2a:e9:56:aa:04:aa:cc:dc:82:1f:9a:3b:48:d6:24:48:
01:76:ec:ac:e6:88:2e:ab:5f:e8:d8:c1:75:ef:36:b0:b9:7b:
64:8e:d5:e3:a3:f6:81:2b:08:78:3c:69:5c:e5:cc:52:89:51:
54:fa:54:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:53:09 2026 by rpki-client