Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
File: XLtvfRHev55LqLH2nDg7j8PErhI.mft (raw, json)
Hash identifier: qYgDVxyrNkbmq35pjutHO0bAHL9+hkGTQhmBYJQDYgc=
Subject key identifier: 82:62:6B:72:16:DF:A5:CC:19:D1:AC:D6:C1:4B:AB:52:53:29:E5:EB
Authority key identifier: 5C:BB:6F:7D:11:DE:BF:9E:4B:A8:B1:F6:9C:38:3B:8F:C3:C4:AE:12
Certificate issuer: /CN=5cbb6f7d11debf9e4ba8b1f69c383b8fc3c4ae12
Certificate serial: 019D2960D4108AE511614FB45DD34061363E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
Manifest number: 0CAD
Signing time: Thu 26 Mar 2026 09:01:44 +0000
Manifest this update: Thu 26 Mar 2026 09:01:44 +0000
Manifest next update: Fri 27 Mar 2026 09:01:44 +0000
Files and hashes: 1: XLtvfRHev55LqLH2nDg7j8PErhI.crl (hash: 64c1go6XWhedBkOLPsiLals9JvvHw98g8zHef0zDAWg=)
2: eO46gXXoSZwATk8MoN76YPpN1jQ.roa (hash: F/WomuEJ+uQlAxaPHkR6qqNqSNUL0B0LVxqFRNytneU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:d4:10:8a:e5:11:61:4f:b4:5d:d3:40:61:36:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cbb6f7d11debf9e4ba8b1f69c383b8fc3c4ae12
Validity
Not Before: Mar 26 09:01:44 2026 GMT
Not After : Mar 27 09:01:44 2026 GMT
Subject: CN=82626b7216dfa5cc19d1acd6c14bab525329e5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:72:a4:9d:c9:c7:33:b5:56:e7:11:86:22:80:
ba:93:7b:08:d0:1e:3d:ea:61:75:36:02:1c:c4:72:
0e:98:14:3f:66:e6:7d:d2:f5:e4:c9:c9:da:a5:5a:
fb:50:8a:47:95:20:c5:07:2e:97:d2:19:3d:18:5f:
37:0c:f7:a7:e6:76:40:e2:a9:45:0e:76:27:af:bd:
59:c3:86:ce:1c:8a:41:ee:36:e8:f0:e8:2c:60:2d:
d8:6c:7c:8a:bf:b7:4b:e5:55:40:bd:60:db:e9:7b:
e8:4f:a4:33:33:b8:5f:83:7c:34:d3:3b:6b:6f:37:
22:4f:8f:2e:31:da:b3:11:51:83:89:10:31:51:49:
49:c2:d1:8e:1f:bb:14:8e:cf:10:e4:84:98:47:e1:
da:48:fc:76:4d:42:99:a3:6c:f9:c5:a3:2f:ea:f4:
de:28:b9:a0:b5:e0:8e:5e:8a:69:35:96:c1:05:50:
b5:0f:e7:f8:94:aa:99:b3:df:f2:f3:10:29:f0:0c:
7a:2b:f5:f0:91:92:10:90:0c:9a:13:57:57:d1:40:
6d:b8:67:9c:26:a5:d6:00:dc:e0:7f:22:80:47:29:
d2:5d:97:8c:ab:53:3f:1e:06:3b:e9:38:d7:f0:c0:
9d:88:e2:0d:3c:99:38:d9:f1:c1:76:c1:5a:4e:54:
5e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:62:6B:72:16:DF:A5:CC:19:D1:AC:D6:C1:4B:AB:52:53:29:E5:EB
X509v3 Authority Key Identifier:
keyid:5C:BB:6F:7D:11:DE:BF:9E:4B:A8:B1:F6:9C:38:3B:8F:C3:C4:AE:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a9:0f:a2:a1:44:07:8a:b1:b7:27:70:bf:76:a1:6d:f9:9a:
fd:3e:94:1c:25:ad:e7:3b:b6:11:24:29:15:40:ac:82:dc:e3:
e1:f2:b5:4b:e8:1c:85:ce:0e:0e:9d:c5:77:53:e3:de:4a:98:
b0:53:59:01:8d:08:35:1f:9b:e9:5a:21:4c:7f:da:2e:37:8f:
b9:2c:5b:ed:43:ef:f1:a6:75:14:23:2b:78:10:f4:91:42:0f:
42:4e:8f:e3:74:4e:4a:59:62:e2:8d:4c:d4:76:98:2f:d6:8f:
e4:a1:92:fc:fc:a3:88:25:50:61:38:68:65:85:0e:7a:5c:82:
be:7b:3e:16:18:ca:55:aa:03:24:70:77:60:fd:82:16:bb:f7:
6b:d5:4a:84:6f:cb:cf:40:99:56:08:16:ab:c2:bb:73:bc:08:
3a:da:38:92:20:aa:1e:26:29:e5:7e:f4:17:0c:40:94:ba:60:
ba:10:21:3e:7f:20:11:19:84:a9:aa:ff:b5:5a:84:34:dc:a4:
68:53:2a:35:54:61:cd:6e:bc:af:47:4a:96:ae:34:1c:d1:17:
ac:28:f7:fe:b9:44:65:44:1c:7d:2b:d7:f0:f3:56:2d:35:05:
48:dc:86:c1:91:54:c9:c2:7b:ab:b5:25:94:d9:28:85:ff:b2:
ea:cb:35:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:02:40 2026 by rpki-client