Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
File: XK56oVlNiZKbERo3Hw_ybyAvWOI.mft (raw, json)
Hash identifier: Rz/ocL66l5FfN4NBlHdsflNorU8TCIXAq2hbs1PebMw=
Subject key identifier: A5:8F:E3:4C:09:68:6A:D6:E9:CF:6B:E8:D9:97:79:D0:2A:BB:98:BF
Authority key identifier: 5C:AE:7A:A1:59:4D:89:92:9B:11:1A:37:1F:0F:F2:6F:20:2F:58:E2
Certificate issuer: /CN=5cae7aa1594d89929b111a371f0ff26f202f58e2
Certificate serial: 019D26CCD428207B3D48620F8E912BC06509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
Manifest number: 1777
Signing time: Wed 25 Mar 2026 21:00:50 +0000
Manifest this update: Wed 25 Mar 2026 21:00:50 +0000
Manifest next update: Thu 26 Mar 2026 21:00:50 +0000
Files and hashes: 1: Oanj9HZBO6pjmAia4pctaEcwILk.roa (hash: XGqLRhTKxqFHvcnOJ1VVsX5xFgoIImSw0HHatVrIKYA=)
2: XK56oVlNiZKbERo3Hw_ybyAvWOI.crl (hash: uQcRGWm0LPzj5rDbmkpwO5rewS4fuw9rA6qkXxZPPSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:d4:28:20:7b:3d:48:62:0f:8e:91:2b:c0:65:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cae7aa1594d89929b111a371f0ff26f202f58e2
Validity
Not Before: Mar 25 21:00:50 2026 GMT
Not After : Mar 26 21:00:50 2026 GMT
Subject: CN=a58fe34c09686ad6e9cf6be8d99779d02abb98bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f0:40:16:b7:5b:5a:08:f3:d5:76:09:d5:4e:
ef:cf:33:19:9e:c0:17:e8:e9:0f:f2:24:f7:7f:a3:
a4:53:2b:29:f9:e2:75:d1:ef:95:26:c1:3e:fa:7c:
1a:28:96:7c:2b:a3:17:f2:9a:ec:25:f9:90:7e:d8:
19:64:c5:d7:92:63:7d:c3:42:15:40:48:3c:50:ae:
df:7b:0e:3d:ce:65:86:b4:75:ab:e5:59:64:8e:a8:
cd:b7:4f:86:d1:9a:69:f0:3c:c4:00:c2:27:e4:ee:
ca:f8:a4:ab:a7:26:14:84:61:49:39:e5:74:f6:1f:
37:4b:59:50:8a:27:37:fa:06:90:07:73:6f:ae:cf:
bf:f5:16:ac:a8:35:97:51:cf:2d:d5:54:90:bb:ac:
10:30:54:d0:1a:11:b0:d9:93:6c:49:34:48:0c:99:
f2:ef:ce:51:3c:2c:cc:e7:9a:e9:ff:2a:ae:c6:72:
a3:ab:0c:a6:b2:ae:5a:e4:9e:77:d1:1a:67:f4:04:
76:af:4e:0f:94:c1:f9:b6:29:1f:13:ed:95:8b:40:
b4:30:a0:eb:a7:f3:3f:42:6f:cf:9b:ac:8a:eb:d8:
0d:8c:01:6c:8a:bf:ff:de:ca:8f:1e:51:d0:f7:98:
dd:de:8d:32:a3:9c:a0:81:c6:af:35:38:af:ed:33:
fa:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8F:E3:4C:09:68:6A:D6:E9:CF:6B:E8:D9:97:79:D0:2A:BB:98:BF
X509v3 Authority Key Identifier:
keyid:5C:AE:7A:A1:59:4D:89:92:9B:11:1A:37:1F:0F:F2:6F:20:2F:58:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:45:23:bb:ae:ba:4b:23:91:6b:e8:e1:d3:d2:a8:4d:16:60:
ff:f7:be:7f:47:ad:9a:58:1a:a8:25:72:20:9a:cb:a5:14:5c:
1c:61:9b:06:6f:36:e6:38:80:c9:29:ed:67:94:0c:1d:6e:0b:
41:dd:94:63:de:c5:7d:26:1d:60:f3:64:cc:6e:3e:ad:8b:1b:
82:ef:0c:96:9f:bc:ff:d2:a9:21:aa:7a:0e:59:6e:1c:75:c4:
62:bc:f5:41:84:f7:eb:bd:93:28:51:95:04:65:7c:14:f0:5b:
6e:41:75:99:22:5f:a8:82:ee:ee:4a:91:b7:35:1a:4b:49:36:
c8:f2:a4:ac:b4:e4:30:8a:5b:cd:55:f5:c0:74:cf:21:27:73:
dd:46:ae:ce:bf:8e:96:46:4d:ab:b9:a1:5f:77:d2:4d:9a:c5:
da:2a:97:d2:ab:6a:d5:f9:89:fb:7f:8a:12:50:cd:91:bb:26:
c8:88:95:3a:c8:06:31:b9:a4:f8:51:2a:db:dd:7c:6b:88:92:
cc:04:d8:89:ff:d5:55:33:de:61:6b:39:0f:2b:ff:82:f2:0e:
3c:a6:57:08:79:b9:dd:b6:78:a4:78:a7:2c:8f:ee:d2:cf:55:
e3:89:78:0e:4a:ee:90:a0:49:af:d9:d7:10:7c:c8:d0:0f:92:
c6:a0:fe:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:37 2026 by rpki-client