Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
File: XLeTntcMiuoxvkk-eOiPSGH1MSE.mft (raw, json)
Hash identifier: HF2CDx+5n94L8laLjWVDt6kAZ7m++H1dY8rb/rfTXPo=
Subject key identifier: 6C:F6:28:ED:2A:9A:75:BB:2F:28:05:74:54:73:B5:22:B8:C1:24:B5
Authority key identifier: 5C:B7:93:9E:D7:0C:8A:EA:31:BE:49:3E:78:E8:8F:48:61:F5:31:21
Certificate issuer: /CN=5cb7939ed70c8aea31be493e78e88f4861f53121
Certificate serial: 019D29617E0827AF9E5C8096EB3C04958A1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
Manifest number: 0F6C
Signing time: Thu 26 Mar 2026 09:02:28 +0000
Manifest this update: Thu 26 Mar 2026 09:02:28 +0000
Manifest next update: Fri 27 Mar 2026 09:02:28 +0000
Files and hashes: 1: 7eeo5JU3juiQ8OvLCUlUNcZKztE.roa (hash: JrzW0ZclqW95xnASoAIpiYFf6Rp0SBoASsXXNEQq9kc=)
2: XLeTntcMiuoxvkk-eOiPSGH1MSE.crl (hash: /V7rtYTgZLEQWB0TaBq45OyTSChenxBSYI5DScXds9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:7e:08:27:af:9e:5c:80:96:eb:3c:04:95:8a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb7939ed70c8aea31be493e78e88f4861f53121
Validity
Not Before: Mar 26 09:02:28 2026 GMT
Not After : Mar 27 09:02:28 2026 GMT
Subject: CN=6cf628ed2a9a75bb2f2805745473b522b8c124b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:4a:9b:c8:de:00:ea:3d:90:12:d7:99:88:6b:
69:55:94:57:f4:23:3e:14:94:6e:e2:e3:d1:02:d0:
1e:ad:b8:b5:07:80:22:6a:c1:a9:dc:eb:4e:45:52:
5e:84:bf:21:24:7c:99:29:76:85:46:91:e5:78:70:
7e:71:b3:e2:bd:03:fa:11:e0:3e:c0:cc:66:b0:8e:
66:16:6c:0c:85:8f:6e:fc:fa:a2:3a:e0:15:0f:f4:
64:6c:2a:3f:09:64:b0:b1:ec:50:fb:88:c9:00:59:
f9:e7:55:f8:64:9d:9e:50:23:97:89:4a:c1:44:a0:
6c:a0:78:7c:f7:74:dd:1e:28:3a:71:6f:01:f0:6e:
91:ca:b9:ca:28:fb:30:52:75:c7:7b:73:f9:c7:be:
79:af:83:53:5e:93:98:39:3d:1a:0b:8c:65:69:0f:
a6:88:77:3b:bc:5c:f3:4a:6f:49:b4:df:29:e4:26:
48:01:7e:1d:ba:a9:51:96:89:e2:06:3d:67:50:c4:
36:b3:8b:9f:3a:1b:cc:28:32:be:84:a3:78:85:51:
94:26:fe:b8:89:65:ce:83:91:ae:fe:0b:5a:e1:ee:
7b:dd:0c:2b:59:85:63:2b:a4:db:8b:3a:77:43:a1:
64:3b:8e:98:02:8a:cd:a3:91:7c:13:58:8e:d0:f5:
25:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F6:28:ED:2A:9A:75:BB:2F:28:05:74:54:73:B5:22:B8:C1:24:B5
X509v3 Authority Key Identifier:
keyid:5C:B7:93:9E:D7:0C:8A:EA:31:BE:49:3E:78:E8:8F:48:61:F5:31:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:86:3c:91:5a:b5:e9:de:d0:5b:bc:80:47:66:0b:4d:f8:f1:
ec:81:98:51:c3:f6:ec:4e:77:d5:cd:10:db:82:38:39:df:bd:
32:42:3b:98:87:fe:cc:5c:f9:fd:8e:58:d4:57:f6:9f:73:31:
4f:81:cc:bb:cd:ca:7e:79:6e:d2:c6:78:23:1b:26:5a:2d:44:
53:f3:77:c4:7f:48:48:f7:7b:94:1f:b9:10:e8:f4:9d:b5:e3:
33:d6:c1:de:88:fc:39:b8:1d:d0:bc:48:57:2c:d1:46:b4:51:
ee:10:9b:17:66:5f:19:07:28:1e:b2:6e:0c:4c:d4:ce:7f:6c:
44:82:64:ae:4b:5a:45:21:00:ba:38:37:51:78:f7:65:be:ff:
80:30:9a:f7:87:51:bc:de:71:5a:df:1e:fa:59:16:2e:2d:8b:
90:72:b4:e0:e1:4c:b2:bb:b7:73:f9:c2:e3:cc:c8:25:0c:3b:
e6:c3:dd:97:82:2a:fe:b8:60:1f:ca:7e:18:0b:f4:f1:cd:f3:
a4:fa:b6:f9:3d:f6:b7:3c:55:24:f2:5f:43:34:5c:61:a7:6a:
ce:c7:8f:c5:0a:a7:f1:6e:15:31:61:32:83:c2:14:cc:81:ff:
6b:a7:41:97:74:de:66:04:e3:a8:0d:1f:ec:7c:c6:12:b3:94:
c4:88:44:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:12:40 2026 by rpki-client