Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
File: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft (raw, json)
Hash identifier: 8eCj9H9BgtNM0icF0kenEWJlKL/XC8LNwJRB6mL3JcM=
Subject key identifier: FE:C7:44:A0:2A:1C:B4:8F:76:2B:8E:58:96:77:A6:11:A6:2A:3E:48
Authority key identifier: 5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA
Certificate issuer: /CN=5e05cb67209bbd1983f4327716523eb1777fd4fa
Certificate serial: 019D26CCDC51B426F048B004D26665F7A48B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 21:00:53 +0000
Manifest this update: Wed 25 Mar 2026 21:00:53 +0000
Manifest next update: Thu 26 Mar 2026 21:00:53 +0000
Files and hashes: 1: 4PuIVLEIj4zZmZW-uUpD3PaA49w.roa (hash: ywwR6jVCoJoX2GD3atJ7KKAi8JK9J3yhYoAwj8Jfgz4=)
2: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl (hash: UBmqTTgnLYLmR13dImeB/sYahTt9G2HFGO8lqLbXr0E=)
3: rVLmDTrtM8fRD2YrBcUhwt9PtiE.roa (hash: qzKX309DgizvFnW/1CNilCV4HRwfLRrE8VOSlsECFro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:dc:51:b4:26:f0:48:b0:04:d2:66:65:f7:a4:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e05cb67209bbd1983f4327716523eb1777fd4fa
Validity
Not Before: Mar 25 21:00:53 2026 GMT
Not After : Mar 26 21:00:53 2026 GMT
Subject: CN=fec744a02a1cb48f762b8e589677a611a62a3e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e1:ec:cf:06:ed:72:07:3f:f7:95:b1:46:68:
bb:01:6a:5f:86:c0:69:c0:98:ce:a4:68:6a:43:aa:
ca:5b:6f:a0:38:65:45:c1:94:d9:f6:df:ec:e8:01:
3c:bf:6d:92:bc:0c:77:67:b4:07:bb:91:99:91:0c:
7f:e8:72:3b:21:75:05:d2:88:d9:a6:1b:cf:00:88:
2b:b0:a9:1d:0e:5c:82:04:d3:b5:7b:be:bb:a6:fa:
39:27:13:e7:53:71:fb:58:e3:d5:c5:e4:85:49:5b:
db:18:ba:7d:5d:a1:27:a2:ca:41:c1:2f:dc:ef:8e:
60:ff:32:8b:a1:68:fa:60:dd:50:0b:f0:a5:da:81:
73:a4:95:75:6e:93:4d:a3:f0:14:d9:35:bf:9e:64:
3f:d8:f9:70:5c:3c:80:c6:ee:7e:6c:b9:87:09:1e:
36:32:f3:67:e4:2f:77:21:90:d2:85:23:f3:a3:bd:
38:eb:1e:96:b0:d3:c3:13:0d:c9:13:06:b8:b0:38:
0a:eb:9a:da:57:b5:68:80:67:42:46:29:fc:48:f7:
9c:cb:ad:de:f0:d6:48:ea:4f:4e:7d:06:0b:ec:f2:
59:4f:35:c3:5d:e2:fe:a2:45:48:9b:ef:e8:da:5a:
40:f6:7e:c2:46:cd:be:ca:e7:7f:35:5a:bc:16:a7:
70:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C7:44:A0:2A:1C:B4:8F:76:2B:8E:58:96:77:A6:11:A6:2A:3E:48
X509v3 Authority Key Identifier:
keyid:5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b9:88:27:33:a6:5f:cb:35:71:60:ed:3e:ec:c5:39:d3:48:
da:50:11:4e:00:9e:5f:2e:36:ac:a1:81:64:f8:6d:92:86:f9:
11:16:81:f8:e1:0d:96:7f:ae:63:a4:c2:13:96:fd:11:ec:a9:
90:15:39:c6:1d:a0:67:aa:3c:89:61:6b:84:66:1a:43:a5:b6:
6c:75:df:5d:9a:a3:ec:39:79:c8:0f:fd:a4:aa:17:31:34:24:
8e:e2:85:d9:c0:87:05:ca:47:c7:31:50:f3:d1:3f:a8:a4:4a:
38:18:3d:55:e6:41:97:32:20:30:e2:3a:01:44:50:30:75:d8:
68:bf:21:06:66:19:05:84:23:b1:42:cd:7b:05:51:c9:66:cd:
28:0a:c5:44:11:5f:9a:5c:15:e0:04:5c:ae:2d:0b:5e:1f:bf:
e1:b6:41:66:a0:12:4a:c7:8c:8b:58:73:d5:db:f9:79:88:10:
d5:e1:0c:e2:03:b4:37:5b:a7:2e:da:e9:ea:71:01:09:30:c8:
68:87:c6:ae:d2:8c:9c:fe:ba:d7:6a:00:cf:55:78:ee:da:05:
4c:b1:12:8d:84:6c:fb:c6:7a:ee:d3:ce:2b:26:08:1f:32:94:
58:52:21:c8:ae:21:ea:39:09:21:f0:5a:8c:d2:4d:a9:bc:0e:
45:fe:e8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:40:31 2026 by rpki-client