Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
File: XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft (raw, json)
Hash identifier: 0VmuQxd/haKgrXfGfgwrBnszWLDY891P+1Oripw3ZwU=
Subject key identifier: CF:62:35:C1:6C:11:98:A6:2D:7E:CF:CA:46:A3:65:11:1A:74:20:08
Authority key identifier: 5D:41:D3:30:DC:8C:72:93:E7:29:45:1D:B2:64:63:83:83:8E:3F:8C
Certificate issuer: /CN=5d41d330dc8c7293e729451db2646383838e3f8c
Certificate serial: 019D25BA15C78BB796BB68ED7A5601A7E520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
Manifest number: 77
Signing time: Wed 25 Mar 2026 16:00:45 +0000
Manifest this update: Wed 25 Mar 2026 16:00:45 +0000
Manifest next update: Thu 26 Mar 2026 16:00:45 +0000
Files and hashes: 1: PDKY0YNxgfL-wdtHC7OMqbGRy6Q.asa (hash: 4mulaDEjjaiJyNExN4M0awWM7+bcCqHjl7wFr6Imm1M=)
2: XUHTMNyMcpPnKUUdsmRjg4OOP4w.crl (hash: WNaL1TL2xhcq+GswkXLeQAB8Owhq9/iTotltOPMvuts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:15:c7:8b:b7:96:bb:68:ed:7a:56:01:a7:e5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d41d330dc8c7293e729451db2646383838e3f8c
Validity
Not Before: Mar 25 16:00:45 2026 GMT
Not After : Mar 26 16:00:45 2026 GMT
Subject: CN=cf6235c16c1198a62d7ecfca46a365111a742008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:83:3a:21:c8:89:51:67:7a:48:ea:8d:9c:e8:
63:79:16:a0:87:4a:c5:bc:99:f7:d2:70:58:07:de:
34:b1:5d:65:a5:2d:fd:fc:20:77:15:9b:8c:20:82:
03:39:ce:b6:46:d9:11:9e:3b:c5:00:ef:c3:52:da:
75:4d:ac:0b:23:c2:4f:03:59:27:53:1b:93:c3:9b:
9d:7c:db:a8:ec:0f:7f:cb:83:9b:a4:64:3a:67:14:
48:0d:0a:60:1f:26:12:7e:04:da:69:8a:62:78:18:
04:72:ff:f3:0a:36:17:24:db:4c:ed:18:dd:5f:66:
2f:66:dd:92:02:33:2f:47:f4:9c:06:ea:2b:4d:ad:
40:a5:79:34:b4:50:e2:59:2a:07:73:c1:a0:5a:cc:
cc:63:03:04:a0:32:c7:5c:11:b5:ba:a2:45:18:f5:
7e:62:bf:de:7a:87:83:f3:5a:a0:82:4d:af:96:71:
e9:9e:4e:ff:58:49:2d:8c:21:4d:bd:65:e7:3d:8d:
e7:7e:ae:77:53:ea:bf:18:74:3e:3b:dc:7e:56:ee:
90:9b:ef:da:01:33:52:88:13:26:4e:9f:0c:1a:82:
fd:f5:64:fd:b3:f3:ae:36:5b:20:2e:c0:73:95:94:
1c:96:13:f8:be:2a:fc:c9:d2:e3:98:fd:16:34:d6:
aa:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:62:35:C1:6C:11:98:A6:2D:7E:CF:CA:46:A3:65:11:1A:74:20:08
X509v3 Authority Key Identifier:
keyid:5D:41:D3:30:DC:8C:72:93:E7:29:45:1D:B2:64:63:83:83:8E:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e9:7d:62:e9:52:be:36:58:95:be:ae:d0:db:f7:06:f2:12:
70:2d:8d:4c:47:51:1e:a3:84:fc:e8:bf:a7:41:fc:61:04:9a:
91:dd:62:96:3d:7e:cf:0a:df:ed:b1:6d:80:2e:29:0a:22:d3:
12:ce:f4:c2:a1:89:fe:ce:06:63:d0:c4:a3:3f:f8:75:bd:05:
c5:d4:92:5f:e8:79:90:46:13:0d:80:11:8c:11:b1:5b:ce:fc:
c8:68:ca:8b:7c:ac:a6:cc:ea:61:3a:31:55:59:1c:c0:e6:41:
d3:8d:2f:17:cb:43:e4:80:54:ba:32:b2:af:ae:d8:c1:82:f4:
cd:95:47:16:90:ea:47:92:0d:25:e3:63:66:f5:5f:2c:93:c0:
09:67:30:0f:df:4f:8c:29:be:fe:0d:b8:df:60:49:ec:5b:5c:
60:6d:61:bd:99:fa:a5:d7:79:d6:35:98:9d:f3:f9:f6:1b:e0:
f0:49:d4:c4:16:fb:e4:0b:b1:4b:ba:fe:0e:29:d0:01:b3:a0:
3a:92:46:85:f4:cb:52:68:55:fc:cc:3c:e6:6b:83:d3:5e:d6:
60:d0:ee:a3:76:38:29:00:57:f8:62:27:32:92:2f:1a:17:ec:
d1:85:68:f0:a8:a9:32:a1:d3:d8:0a:a5:ca:3c:58:28:42:53:
09:43:92:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:53:20 2026 by rpki-client