Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
File: XYJmcuaPPaXbUO2ButuNM73M0ro.mft (raw, json)
Hash identifier: FvvcY8tQc/Nd2ElirqoLdsP8I5LP+llDO6rfuaIZYpo=
Subject key identifier: 30:81:AF:F4:81:BD:CE:B0:A8:8D:75:D3:25:B1:CD:AE:94:5D:73:33
Authority key identifier: 5D:82:66:72:E6:8F:3D:A5:DB:50:ED:81:BA:DB:8D:33:BD:CC:D2:BA
Certificate issuer: /CN=5d826672e68f3da5db50ed81badb8d33bdccd2ba
Certificate serial: 019D277215B0F522E441CB36C58D7CBCBC67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
Manifest number: 14C2
Signing time: Thu 26 Mar 2026 00:01:21 +0000
Manifest this update: Thu 26 Mar 2026 00:01:21 +0000
Manifest next update: Fri 27 Mar 2026 00:01:21 +0000
Files and hashes: 1: XYJmcuaPPaXbUO2ButuNM73M0ro.crl (hash: BIQxWQCCqDtljL8rsBtSAqPZcEzxxSY1pWGGHhFf5mA=)
2: fDzIkCC4HQZF8d8gvy277WuuRYM.roa (hash: TzMFdxwnyUIL4oJ9MUVrNEjKX81ekLEZoq92hFxo3V4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:15:b0:f5:22:e4:41:cb:36:c5:8d:7c:bc:bc:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d826672e68f3da5db50ed81badb8d33bdccd2ba
Validity
Not Before: Mar 26 00:01:21 2026 GMT
Not After : Mar 27 00:01:21 2026 GMT
Subject: CN=3081aff481bdceb0a88d75d325b1cdae945d7333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5b:e8:1a:37:5f:e6:79:10:ef:40:dd:2e:1b:
94:9b:27:e6:ff:f8:82:48:dd:2a:41:fd:b3:e6:e3:
33:d3:3e:d5:5b:4c:bd:ea:4a:e4:67:99:8a:77:4c:
04:b4:04:44:82:82:6a:ee:5c:6a:96:05:4d:0c:34:
65:0e:c5:9e:0a:70:74:72:77:eb:f0:e2:92:95:f3:
15:b7:5d:f5:a9:70:44:c6:d3:d6:b8:99:9b:81:e0:
03:63:23:61:66:f8:b2:87:ed:89:db:84:55:fd:5c:
24:52:66:3a:56:bb:4a:ab:11:0c:c9:cd:55:b2:19:
df:15:e5:e7:48:f5:ce:7c:69:77:ee:be:ac:45:70:
21:10:07:de:c5:72:b7:f8:8f:44:3e:f1:ef:ce:49:
1f:7d:da:b4:ea:00:70:6b:ae:f1:e2:0e:20:3d:7d:
b3:6c:7e:ac:1f:03:f0:23:7e:9c:a8:d2:ff:6b:46:
c1:52:3c:bf:0b:bf:46:05:45:53:92:8f:94:a8:73:
b5:d4:cb:4f:b3:60:f1:ee:5d:a8:d7:c2:7a:38:97:
13:cb:56:f9:f9:6b:b8:46:46:5f:7b:0e:41:dc:41:
c5:c0:d1:1e:26:45:c5:32:17:5f:14:76:a9:66:19:
ab:a8:6b:8b:05:11:52:3d:52:ce:78:0a:78:4b:08:
52:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:81:AF:F4:81:BD:CE:B0:A8:8D:75:D3:25:B1:CD:AE:94:5D:73:33
X509v3 Authority Key Identifier:
keyid:5D:82:66:72:E6:8F:3D:A5:DB:50:ED:81:BA:DB:8D:33:BD:CC:D2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:65:d2:f4:f8:43:fd:cb:93:62:c6:12:01:5e:7a:6f:1a:92:
2e:71:9f:ce:6e:ab:d7:d5:b4:8b:35:53:a1:b7:c4:e4:6d:ba:
57:e8:ed:e9:be:cc:07:6e:af:ac:db:47:e3:fb:8f:d9:30:8c:
cf:9d:8e:9b:01:0c:ef:fd:54:26:2f:01:8b:12:99:5e:9c:32:
ce:ea:30:89:0a:e3:7a:ba:f2:50:83:02:dd:88:84:b0:33:88:
33:9f:e4:b6:16:2c:ac:2f:c6:bf:72:2d:cf:18:f6:99:23:36:
9b:f7:74:3c:15:bc:52:37:c7:b0:db:39:cd:a9:5e:85:5a:3f:
e6:82:13:88:c8:d5:31:dc:8f:ea:28:38:a3:1c:59:60:d9:ae:
d9:c3:8c:34:09:85:68:19:9b:55:eb:48:d1:e0:58:61:be:4f:
8e:3f:d4:a4:83:f7:95:67:e9:7e:c4:77:51:67:7d:27:42:f4:
8f:49:8c:cd:5e:70:37:e7:45:d8:68:31:9d:f3:dd:77:80:08:
8b:22:c1:c3:fc:53:c4:f4:d2:3a:86:f0:9d:ff:58:3c:e7:96:
a2:46:9b:38:cf:86:00:8a:d9:d7:65:c6:73:e7:0d:ac:29:9c:
37:c4:fb:82:92:2f:e5:2d:65:1c:72:a7:d7:c8:d8:2d:fd:20:
12:c1:08:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:21:45 2026 by rpki-client