Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
File: xb14VKoFD9blUPx80CtVhzC_u3o.mft (raw, json)
Hash identifier: 1Py0Tq2Gk77APkd7amvIgRuZH/fkFLVPsIoSWj8B40E=
Subject key identifier: 54:B7:F5:27:01:CA:8E:AB:0C:31:DD:EE:70:86:4F:0B:96:C2:24:DB
Authority key identifier: C5:BD:78:54:AA:05:0F:D6:E5:50:FC:7C:D0:2B:55:87:30:BF:BB:7A
Certificate issuer: /CN=c5bd7854aa050fd6e550fc7cd02b558730bfbb7a
Certificate serial: 019D29CE932676E5C69BC8BB2FCA8BE14E2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
Manifest number: 07D6
Signing time: Thu 26 Mar 2026 11:01:36 +0000
Manifest this update: Thu 26 Mar 2026 11:01:36 +0000
Manifest next update: Fri 27 Mar 2026 11:01:36 +0000
Files and hashes: 1: CQU1i8i4vqvuY4KqJGZlaSLhz1o.roa (hash: CuYb2a2XddVX7SxALr1d1KIhl+UGwYzhtlyXuVxbI4M=)
2: xb14VKoFD9blUPx80CtVhzC_u3o.crl (hash: 5IEvrYrpiPCEzWrhfYq/2MF2ozqRjLH7TxwO+JjxiTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:93:26:76:e5:c6:9b:c8:bb:2f:ca:8b:e1:4e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5bd7854aa050fd6e550fc7cd02b558730bfbb7a
Validity
Not Before: Mar 26 11:01:36 2026 GMT
Not After : Mar 27 11:01:36 2026 GMT
Subject: CN=54b7f52701ca8eab0c31ddee70864f0b96c224db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3d:91:23:48:43:b7:c3:1c:d6:6b:cc:33:de:
b5:41:e0:d9:6a:3b:65:7d:d8:24:1e:68:3f:03:65:
06:80:da:c9:fb:e9:da:c2:eb:de:89:e0:6e:4b:ec:
95:6a:e8:45:ca:24:e0:3d:ee:35:f1:6a:a6:d5:af:
97:92:af:03:da:5b:91:26:90:11:63:96:6a:a5:8f:
ec:fd:53:1b:4b:1b:24:cb:39:69:d8:f0:86:64:96:
1f:8c:7e:7f:6a:c3:14:91:4b:b5:b1:ff:c3:77:15:
3c:2b:db:02:ac:f5:cf:34:7d:89:40:48:1a:65:bd:
a7:02:b9:f4:16:f5:26:a7:8f:f0:10:b9:4a:79:7c:
1a:ac:cc:23:c3:13:ae:73:7e:f4:5d:41:90:a1:07:
9b:1a:4b:d0:9f:90:45:26:67:27:da:13:26:3b:8f:
95:81:a9:65:49:98:a3:18:18:3a:d0:3d:1b:e0:79:
a4:a6:cc:7b:e6:a3:a5:a5:86:4c:a3:6c:cd:f5:25:
7c:6c:27:4e:49:aa:d4:31:f4:36:bf:28:c8:55:a0:
93:cd:6b:15:af:4c:46:f5:fd:dd:06:68:cf:1d:23:
df:23:85:d1:ef:1f:d8:f6:71:e1:c3:78:c6:b8:b6:
48:d9:cd:c1:df:c0:0c:9b:ec:d3:13:6c:08:0e:65:
6c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B7:F5:27:01:CA:8E:AB:0C:31:DD:EE:70:86:4F:0B:96:C2:24:DB
X509v3 Authority Key Identifier:
keyid:C5:BD:78:54:AA:05:0F:D6:E5:50:FC:7C:D0:2B:55:87:30:BF:BB:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c8:fa:f4:42:70:eb:c1:c2:be:74:91:e8:72:0f:bd:e2:36:
dc:dc:f7:aa:de:b3:f0:43:11:d6:07:70:cd:eb:cb:6d:31:b0:
e4:c9:3d:5f:9f:e5:32:95:37:cc:84:9f:5c:40:33:7a:0f:23:
6b:26:3f:cb:8b:86:51:c8:77:16:96:66:cc:c2:31:45:a4:ac:
57:65:d2:8e:06:cd:33:80:64:74:59:05:25:6b:47:6f:1d:dd:
b7:8f:b8:8f:4f:87:9e:f8:ab:dd:30:ff:83:6d:98:dc:02:db:
9c:7d:cf:9d:58:78:8b:44:9a:53:93:ac:af:cd:cc:20:90:95:
a7:09:8f:1a:32:52:7c:d6:d9:ae:64:8f:b7:9d:9c:1c:e2:1c:
09:55:09:f3:bb:bf:43:4d:7f:47:9e:54:08:27:61:1a:f5:8d:
f9:67:a7:9f:6f:dd:f9:69:ef:98:ea:f0:40:e0:a7:8b:1d:3f:
ef:10:1f:07:aa:f3:90:3c:52:ba:b9:08:bc:a7:f9:20:a7:c1:
e5:aa:ad:5a:cc:f2:b3:9d:0e:7c:89:6d:81:71:3e:f5:ba:a4:
dd:92:e8:bf:f1:14:f0:bb:55:0f:de:d2:36:1c:6b:2e:fc:b0:
77:f4:57:18:be:72:68:50:82:18:a5:45:35:82:cc:46:22:35:
9c:b9:37:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:45:02 2026 by rpki-client