Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/650c64-275d-44e1-84dc-f5b81ccf09cd/1/XiYr5dEt_b4keeOiBxP0V-k_Bps.mft
File: XiYr5dEt_b4keeOiBxP0V-k_Bps.mft (raw, json)
Hash identifier: UKcYNDJ0u0jcKpvO3649+o42hh2QPR+RqTtf92gftak=
Subject key identifier: B0:BA:56:86:19:0C:E1:38:4E:B6:33:D6:F6:51:51:EC:A8:2F:BD:CC
Authority key identifier: 5E:26:2B:E5:D1:2D:FD:BE:24:79:E3:A2:07:13:F4:57:E9:3F:06:9B
Certificate issuer: /CN=5e262be5d12dfdbe2479e3a20713f457e93f069b
Certificate serial: 019D25F18224CD592525FB1CF3FF52263B54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiYr5dEt_b4keeOiBxP0V-k_Bps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/650c64-275d-44e1-84dc-f5b81ccf09cd/1/XiYr5dEt_b4keeOiBxP0V-k_Bps.mft
Manifest number: 0291
Signing time: Wed 25 Mar 2026 17:01:17 +0000
Manifest this update: Wed 25 Mar 2026 17:01:17 +0000
Manifest next update: Thu 26 Mar 2026 17:01:17 +0000
Files and hashes: 1: XiYr5dEt_b4keeOiBxP0V-k_Bps.crl (hash: Y9QKythZtYWQChZW8udJhfmhrJ1v20oH11wJS+4N+KM=)
2: neK2XJpGtxENiwluKI1Nc9rcRww.roa (hash: 4JvFz8LvX6hWtb2+k7f5WYEW+8p5Nkh6T42RNRqex7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/650c64-275d-44e1-84dc-f5b81ccf09cd/1/XiYr5dEt_b4keeOiBxP0V-k_Bps.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/650c64-275d-44e1-84dc-f5b81ccf09cd/1/XiYr5dEt_b4keeOiBxP0V-k_Bps.mft
rsync://rpki.ripe.net/repository/DEFAULT/XiYr5dEt_b4keeOiBxP0V-k_Bps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:82:24:cd:59:25:25:fb:1c:f3:ff:52:26:3b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e262be5d12dfdbe2479e3a20713f457e93f069b
Validity
Not Before: Mar 25 17:01:17 2026 GMT
Not After : Mar 26 17:01:17 2026 GMT
Subject: CN=b0ba5686190ce1384eb633d6f65151eca82fbdcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:47:28:a2:6d:12:55:91:7f:b6:23:d4:63:4f:
51:7b:2c:69:a8:56:11:ef:5d:5b:6a:30:c4:37:ac:
85:b7:97:ca:0e:7b:2e:de:6e:2f:2e:ef:4e:c1:3e:
c2:c1:6a:f2:9a:65:bf:ae:8c:9f:dc:57:78:48:02:
4a:ec:00:cd:ff:ba:5f:b9:8f:ef:41:ba:02:15:53:
27:43:25:e4:fc:1e:63:97:37:06:ec:15:5c:df:7e:
c6:c4:fc:c0:62:4a:61:e5:49:8a:78:92:4e:0a:b9:
45:55:2d:da:4d:7c:e9:dc:62:56:77:f8:d3:7e:ca:
b2:b5:38:90:62:69:4b:65:e5:d7:80:db:0c:ac:aa:
ae:b4:24:8c:92:7b:1f:b4:a3:cf:1a:f9:1d:bc:21:
b8:94:66:4c:85:79:21:84:88:e0:84:2a:50:f6:db:
9f:94:b8:15:27:90:78:02:da:60:de:60:92:fa:fe:
f6:56:32:8a:76:92:00:f7:ef:4f:c8:a4:30:40:9e:
b1:0f:8b:67:4d:af:f4:6c:54:7a:1e:d1:7b:88:94:
21:c1:e6:f8:af:1e:fc:0e:32:8f:1e:ee:b7:66:37:
3f:36:c6:93:29:27:23:92:02:d4:78:51:b1:a3:74:
0b:f1:ce:ad:25:6f:8f:a6:4b:ec:41:5b:2c:86:6b:
e6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:BA:56:86:19:0C:E1:38:4E:B6:33:D6:F6:51:51:EC:A8:2F:BD:CC
X509v3 Authority Key Identifier:
keyid:5E:26:2B:E5:D1:2D:FD:BE:24:79:E3:A2:07:13:F4:57:E9:3F:06:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiYr5dEt_b4keeOiBxP0V-k_Bps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/650c64-275d-44e1-84dc-f5b81ccf09cd/1/XiYr5dEt_b4keeOiBxP0V-k_Bps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/650c64-275d-44e1-84dc-f5b81ccf09cd/1/XiYr5dEt_b4keeOiBxP0V-k_Bps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d3:6a:48:95:c4:cf:fe:63:47:b2:4a:20:cf:b8:06:e0:da:
39:76:15:4d:13:97:2c:d3:42:d5:d7:cf:88:e8:c8:36:98:28:
83:3c:68:ed:45:59:36:db:39:f6:cb:98:b3:84:fd:3c:7b:af:
d9:ae:1f:42:93:01:82:3e:83:e0:12:80:d9:87:ba:85:25:0d:
71:e7:fc:15:1d:54:69:0e:de:8d:da:43:43:39:ec:fc:7d:67:
d7:6a:72:09:a1:6e:d8:5f:f5:af:c5:70:23:2e:f2:b9:64:5b:
a0:35:cd:e0:5b:24:ae:93:11:fc:4c:0c:2f:1c:02:4b:54:3e:
ab:f8:6b:94:2b:18:09:77:55:57:5b:19:72:bb:ee:d5:b5:8f:
02:58:24:fc:f4:7c:f4:9f:79:a5:ef:0a:73:bf:f9:1e:e9:b9:
2c:55:6d:78:a5:a0:f7:43:ab:79:b5:fe:5d:fa:45:41:07:68:
ba:f0:4d:83:89:29:e3:b2:96:4f:c5:85:79:38:e0:05:65:85:
ac:76:c3:c6:6e:dc:4a:7c:0f:6f:12:4f:4b:e6:3d:5c:23:04:
98:f4:3e:a7:b7:47:c3:a2:df:2f:f6:14:d5:82:c4:ab:60:9d:
92:ea:7f:33:ec:83:5d:79:1e:43:1c:a3:d7:56:93:9e:37:99:
fd:ef:60:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:37 2026 by rpki-client